{"items":[{"id":"CVE-2026-15142","published":"2026-08-15T08:27:16.449Z","updated":"2026-08-17T16:07:00.679Z","title":"Real Estate Manager Pro <= 12.8.6 - Authenticated (Subscriber+) Privilege Escalation via 'user_has_cap' Filter ID Collision","severity":"HIGH","score":7.5,"vendor":"WebCodingPlace","product":"Real Estate Manager Pro","kev":false,"epss":0.00363,"kevAdded":null},{"id":"CVE-2026-57701","published":"2026-07-23T11:18:06.713Z","updated":"2026-07-23T13:40:27.605Z","title":"WordPress Real Estate Manager Pro plugin <= 12.8.5 - Reflected Cross Site Scripting (XSS) vulnerability","severity":"HIGH","score":7.1,"vendor":"WebCodingPlace","product":"Real Estate Manager Pro","kev":false,"epss":0.00251,"kevAdded":null},{"id":"CVE-2026-57398","published":"2026-07-13T08:41:24.076Z","updated":"2026-07-13T13:46:49.710Z","title":"WordPress Real Estate Manager Pro plugin <= 12.8.3 - Cross Site Scripting (XSS) vulnerability","severity":"HIGH","score":7.1,"vendor":"WebCodingPlace","product":"Real Estate Manager Pro","kev":false,"epss":0.00251,"kevAdded":null},{"id":"CVE-2026-27361","published":"2026-03-05T05:53:54.588Z","updated":"2026-04-28T16:15:02.171Z","title":"WordPress Responsive Posts Carousel Pro plugin <= 15.1 - Broken Access Control vulnerability","severity":"HIGH","score":7.5,"vendor":"WebCodingPlace","product":"Responsive Posts Carousel Pro","kev":false,"epss":0.00362,"kevAdded":null},{"id":"CVE-2026-27354","published":"2026-03-05T05:53:53.894Z","updated":"2026-04-28T16:15:02.216Z","title":"WordPress WooCommerce Coming Soon Product with Countdown plugin <= 5.0 - Cross Site Scripting (XSS) vulnerability","severity":"MEDIUM","score":6.5,"vendor":"WebCodingPlace","product":"WooCommerce Coming Soon Product with Countdown","kev":false,"epss":0.00191,"kevAdded":null},{"id":"CVE-2025-68552","published":"2026-02-20T15:46:40.954Z","updated":"2026-04-28T16:14:30.210Z","title":"WordPress WooCommerce Coming Soon Product with Countdown plugin <= 5.0 - Local File Inclusion vulnerability","severity":"HIGH","score":7.5,"vendor":"WebCodingPlace","product":"WooCommerce Coming Soon Product with Countdown","kev":false,"epss":0.00535,"kevAdded":null},{"id":"CVE-2025-68996","published":"2025-12-30T10:47:51.680Z","updated":"2026-04-28T16:14:33.815Z","title":"WordPress Responsive Posts Carousel Pro plugin <= 15.1 - Local File Inclusion vulnerability","severity":"HIGH","score":7.5,"vendor":"WebCodingPlace","product":"Responsive Posts Carousel Pro","kev":false,"epss":0.00445,"kevAdded":null},{"id":"CVE-2025-68548","published":"2025-12-23T11:50:41.384Z","updated":"2026-04-28T16:14:30.224Z","title":"WordPress Responsive Posts Carousel Pro plugin <= 15.2 - Cross Site Scripting (XSS) vulnerability","severity":"MEDIUM","score":6.5,"vendor":"WebCodingPlace","product":"Responsive Posts Carousel Pro","kev":false,"epss":0.00159,"kevAdded":null},{"id":"CVE-2025-67562","published":"2025-12-09T14:14:10.979Z","updated":"2026-04-28T16:14:21.237Z","title":"WordPress Image Caption Hover Pro plugin < 20.0 - Broken Access Control vulnerability","severity":"MEDIUM","score":5.4,"vendor":"WebCodingPlace","product":"Image Caption Hover Pro","kev":false,"epss":0.0027,"kevAdded":null},{"id":"CVE-2025-9874","published":"2025-09-11T07:24:55.823Z","updated":"2026-04-08T17:02:48.590Z","title":"Ultimate Classified Listings <= 1.6 - Authenticated (Contributor+) Local File Inclusion","severity":"HIGH","score":7.5,"vendor":"webcodingplace","product":"Ultimate Classified Listings","kev":false,"epss":0.00969,"kevAdded":null},{"id":"CVE-2025-0763","published":"2025-09-11T07:24:50.341Z","updated":"2026-04-08T16:43:50.751Z","title":"Ultimate Classified Listings <= 1.7 - Missing Authorization to Authenticated (Subscriber+) Plugin Settings Update","severity":"MEDIUM","score":4.3,"vendor":"webcodingplace","product":"Ultimate Classified Listings","kev":false,"epss":0.00243,"kevAdded":null},{"id":"CVE-2025-54032","published":"2025-08-20T08:02:59.315Z","updated":"2026-04-28T16:13:29.424Z","title":"WordPress Real Estate Manager Pro Plugin <= 12.7.3 - Cross Site Scripting (XSS) Vulnerability","severity":"HIGH","score":7.1,"vendor":"WebCodingPlace","product":"Real Estate Manager Pro","kev":false,"epss":0.00251,"kevAdded":null},{"id":"CVE-2025-52728","published":"2025-08-14T10:34:02.317Z","updated":"2026-04-28T16:13:17.683Z","title":"WordPress Responsive Posts Carousel WordPress Plugin Plugin <= 15.0 - Local File Inclusion Vulnerability","severity":"HIGH","score":7.5,"vendor":"WebCodingPlace","product":"Responsive Posts Carousel Pro","kev":false,"epss":0.00686,"kevAdded":null},{"id":"CVE-2024-13753","published":"2025-02-20T09:21:38.663Z","updated":"2026-04-08T16:56:46.394Z","title":"Ultimate Classified Listings <= 1.5 - Cross-Site Request Forgery to Account Takeover","severity":"HIGH","score":8.1,"vendor":"webcodingplace","product":"Ultimate Classified Listings","kev":false,"epss":0.00262,"kevAdded":null},{"id":"CVE-2024-13748","published":"2025-02-20T09:21:37.344Z","updated":"2026-04-08T16:43:56.064Z","title":"Ultimate Classified Listings <= 1.4 Authenticated (Administrator+) Stored Cross-Site Scripting via Title Parameter","severity":"MEDIUM","score":4.4,"vendor":"webcodingplace","product":"Ultimate Classified Listings","kev":false,"epss":0.00228,"kevAdded":null},{"id":"CVE-2024-56286","published":"2025-01-07T10:49:17.760Z","updated":"2026-04-28T16:10:56.865Z","title":"WordPress Classic Addons – WPBakery Page Builder plugin <= 3.0 - Local File Inclusion vulnerability","severity":"HIGH","score":7.5,"vendor":"webcodingplace","product":"Classic Addons – WPBakery Page Builder","kev":false,"epss":0.006,"kevAdded":null},{"id":"CVE-2024-11952","published":"2024-12-04T08:22:46.454Z","updated":"2026-04-08T17:10:12.446Z","title":"Classic Addons – WPBakery Page Builder <= 3.0 - Authenticated (Contributor+) Limited Local PHP File Inclusion","severity":"HIGH","score":7.5,"vendor":"webcodingplace","product":"Classic Addons – WPBakery Page Builder","kev":false,"epss":0.00898,"kevAdded":null},{"id":"CVE-2024-52487","published":"2024-12-02T13:48:55.534Z","updated":"2026-04-28T16:10:43.994Z","title":"WordPress Ultimate Classified Listings plugin <= 1.7 - Cross Site Scripting (XSS) vulnerability","severity":"MEDIUM","score":6.5,"vendor":"webcodingplace","product":"Ultimate Classified Listings","kev":false,"epss":0.00313,"kevAdded":null},{"id":"CVE-2024-52448","published":"2024-11-20T11:52:43.461Z","updated":"2026-04-28T16:10:42.618Z","title":"WordPress Ultimate Classified Listings plugin <= 1.7 - Local File Inclusion vulnerability","severity":"HIGH","score":7.5,"vendor":"webcodingplace","product":"Ultimate Classified Listings","kev":false,"epss":0.00574,"kevAdded":null},{"id":"CVE-2024-43953","published":"2024-08-29T17:53:36.687Z","updated":"2026-04-28T16:10:14.273Z","title":"WordPress Classic Addons – WPBakery Page Builder plugin <= 3.5 - Cross Site Scripting (XSS) vulnerability","severity":"MEDIUM","score":6.5,"vendor":"webcodingplace","product":"Classic Addons – WPBakery Page Builder","kev":false,"epss":0.00254,"kevAdded":null},{"id":"CVE-2023-52179","published":"2024-06-11T10:40:56.641Z","updated":"2026-04-28T16:09:05.739Z","title":"WordPress Product Expiry for WooCommerce plugin <= 2.5 - Broken Access Control vulnerability","severity":"MEDIUM","score":5.4,"vendor":"WebCodingPlace","product":"Product Expiry for WooCommerce","kev":false,"epss":0.003,"kevAdded":null},{"id":"CVE-2024-0201","published":"2024-01-03T09:31:51.694Z","updated":"2026-04-08T17:20:31.576Z","title":"Product Expiry for WooCommerce <= 2.5 - Missing Authorization to Authenticated (Subscriber+) Plugin Settings Update","severity":"MEDIUM","score":5.4,"vendor":"webcodingplace","product":"Product Expiry for WooCommerce","kev":false,"epss":0.00389,"kevAdded":null}]}