October 29, 2026CVE-2024-30225 is a critical PHP Object Injection vulnerability in WP Migrate Db Pro (up to version 2.6.10) with a CVSS…
October 15, 2026CVE-2024-32555 affects the Easy Real Estate plugin for WordPress (up to 2.2.9) with a critical CVSS score of 9.8. Unauthenticated…
October 13, 2026CVE-2024-33567 affects the Barcode Scanner Lite plugin for WordPress (up to 1.5.3) with a CVSS score of 9.8. Unauthenticated attackers…
October 13, 2026CVE-2023-52215 affects the Barcode Scanner Lite plugin for WordPress, with a critical CVSS score of 9.8. Unauthenticated SQL injection vulnerabilities…
October 13, 2026CVE-2023-52221 affects the Barcode Scanner Lite Pos plugin for WordPress (up to 1.5.1) with a critical CVSS of 9.8. Unauthenticated…
September 22, 2026CVE-2025-39399 affects the License Envato plugin for WordPress (up to v1.0.0) with a critical CVSS score of 9.8. Patch to…
August 16, 2026CVE-2026-16098 affects Prosolution WP Client versions up to 2.0.10, posing a critical risk with a CVSS score of 9.8. Update…
August 16, 2026CVE-2026-14524 affects the ProSolution WP Client plugin (versions up to 2.0.8) with a critical CVSS score of 9.1. Patch to…
August 16, 2026CVE-2026-18432 affects the Acf Frontend Form Element plugin (up to v3.29.9) with a critical CVSS score of 9.8. Patch to…
August 15, 2026CVE-2024-13784 affects the Arforms Form Builder plugin (up to v1.8.5) with a critical CVSS score of 9.8. Unauthenticated PHP Object…
August 14, 2026CVE-2026-18855 affects the Link Library plugin for WordPress (up to 7.9.4) with a critical CVSS score of 9.1. It allows…
August 14, 2026CVE-2026-15826 exposes the Profile Builder plugin (up to v3.16.4) to critical authentication bypass, allowing unauthenticated access as the Administrator. Upgrade…
August 14, 2026CVE-2026-16142 affects Truebooker Appointment Booking plugin versions up to 1.2.6, allowing unauthenticated account takeover with a CVSS score of 9.8.…
August 13, 2026CVE-2026-12949 affects Wishlist Member X plugin versions up to 3.34.1, with a critical CVSS score of 9.8. Unauthenticated attackers can…
August 11, 2026CVE-2026-16230 affects the Formidable Signature plugin for WordPress (up to version 3.0.6) with a critical CVSS score of 9.8. Unauthenticated…
August 8, 2026CVE-2026-65553 affects the Spider Analyser plugin for WordPress (up to v2.1.3) with a critical CVSS score of 9.8. Unauthenticated attackers…
August 8, 2026CVE-2026-65507 affects the Ai Copilot Content Generator plugin (up to v1.5.6) with a critical CVSS score of 9.8, allowing unauthenticated…
August 7, 2026CVE-2026-14526 affects the Ai Copilot Content Generator plugin for WordPress (up to v1.5.6) with a critical CVSS score of 9.8.…
August 6, 2026CVE-2026-14365 reveals a critical authentication bypass in the Truebooker Appointment Booking plugin (v1.2.3 and below) with a CVSS score of…
August 6, 2026CVE-2026-14364 affects the Truebooker Appointment Booking plugin (up to v1.2.3) with a critical CVSS score of 9.8. Unauthenticated attackers can…
