Export limit exceeded: 425871 CVEs match your query. Please refine your search to export 10,000 CVEs or fewer.

Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 1

Export CSV
CVE-2026-13432

ThumbPress < 6.2.2 - Subscriber+ Plugin Deactivation

The ThumbPress WordPress plugin before 6.2.2 does not perform a capability check on one of its AJAX actions, allowing authenticated users with subscriber-level access or higher to deactivate the ThumbPress WordPress plugin before 6.2.2, disrupting the site's image-handling functionality.

CVSS 3.1 · 5.4 Medium EPSS < 1% KEV · Not listed
Vendors
Thumbpress Wordpress
Products
Thumbpress Wordpress