August 16, 2026CVE-2026-14498 affects the Query Wrangler plugin for WordPress, with a high severity CVSS score of 8.8. Users should upgrade to…
August 16, 2026CVE-2026-17123 affects the Royal Elementor Addons plugin (up to v1.7.1064) with a CVSS score of 8.8. Authenticated users can exploit…
August 16, 2026CVE-2026-16099 affects the Podlove Podcasting Plugin for WordPress (up to v4.5.3) with a CVSS score of 8.8. Authenticated users can…
August 16, 2026CVE-2026-15002 affects the Platnosci Online Blue Media plugin for WordPress (up to 5.0.0) with a high severity CVSS score of…
August 15, 2026CVE-2026-10734 affects the Infility Global plugin for WordPress (up to 2.15.21) with a high severity CVSS score of 7.2. Unauthenticated…
August 15, 2026CVE-2026-13424 affects the Bookly Responsive Appointment Booking Tool (up to version 27.7) with a high severity CVSS score of 7.2.…
August 15, 2026CVE-2026-2497 affects the Gallery Plugin for WordPress (up to version 4.7.9) with a CVSS score of 7.2. Authenticated attackers can…
August 15, 2026CVE-2026-17581 affects the Woocommerce Pos plugin (up to 1.9.14) with a CVSS score of 7.2. Authenticated attackers can exploit this…
August 15, 2026CVE-2026-17087 affects WP Travel Engine versions up to 6.8.4, allowing unauthorized access to sensitive booking details. Upgrade to 6.8.5 to…
August 14, 2026CVE-2026-15142 affects the Real Estate Manager Pro plugin (up to v12.8.6) with a CVSS score of 7.5. Authenticated users can…
August 14, 2026CVE-2026-14279 affects the Wholesale Market plugin for WordPress (up to 2.2.2) with a high severity CVSS score of 8.8. Authenticated…
August 14, 2026CVE-2026-16145 affects the Gdpr Compliant Recaptcha For All Forms plugin (up to 5.1) with a high severity CVSS score of…
August 14, 2026CVE-2026-15312 affects the Propovoice plugin (up to version 1.7.8) with a CVSS score of 8.8. Authenticated users can escalate privileges…
August 14, 2026CVE-2026-15965 affects the Maxupload Upload Larger Files Easily plugin (v1.4.0 and earlier) with a high severity CVSS score of 8.8.…
August 14, 2026CVE-2026-15162 affects the Object Sync For Salesforce plugin (v2.2.13) with a CVSS score of 7.5. This high-severity SQL injection allows…
August 14, 2026CVE-2026-14433 affects Meeting Scheduler By Vcita plugin versions up to 4.6.0, with a CVSS score of 7.2. Unauthenticated attackers can…
August 13, 2026CVE-2026-18109 affects W3 Total Cache plugin versions up to 2.10.3 with a CVSS score of 7.2. This high-severity stored XSS…
August 13, 2026CVE-2026-27537 affects the Popup By Supsystic plugin (v1.11.2 and below) with a high severity score of 7.2 due to stored…
August 12, 2026CVE-2026-65493 affects Dokan Pro versions up to 5.0.2, allowing authenticated attackers to exploit a PHP Object Injection vulnerability. With a…
August 12, 2026CVE-2026-18146 affects Fluent Forms versions up to 6.2.11 with a CVSS score of 7.2. This high-severity XSS vulnerability allows attackers…
