August 12, 2026CVE-2026-59552 affects the Pdf Embed Viewer plugin (up to v1.4.2) with a high severity CVSS score of 7.2. Unauthenticated SSRF…
August 12, 2026CVE-2026-59533 affects the Relevanssi Light plugin for WordPress (up to version 1.2.2) with a high severity CVSS score of 7.5.…
August 11, 2026CVE-2026-19091 affects the GeoDirectory plugin (up to version 2.8.169), posing a high severity risk (CVSS 8.1) due to arbitrary file…
August 11, 2026CVE-2026-18961 affects the Ventraconnect Social Login plugin (up to v1.4.3) with a high severity (CVSS 8.1) authentication bypass. Update to…
August 11, 2026CVE-2026-15606 affects the ACF Frontend Form Element plugin (up to version 3.29.9) with a CVSS score of 8.8. It allows…
August 11, 2026CVE-2026-15426 affects AcyMailing versions up to 10.11.1, allowing authenticated attackers to bypass authorization and capture password-reset emails. Upgrade to version…
August 11, 2026CVE-2026-13457 affects the Instawp Connect plugin (up to v0.1.3.6) with a CVSS score of 7.5. It allows remote code execution…
August 11, 2026CVE-2026-65510 affects the Pepro Ultimate Invoice plugin for WordPress (up to version 2.2.6) with a high severity CVSS score of…
August 11, 2026CVE-2026-65492 affects Dokan Pro plugin versions up to 5.0.0, exposing users to high severity stored cross-site scripting risks. Ensure you…
August 11, 2026CVE-2026-65516 affects the Pepro Ultimate Invoice plugin (up to 2.2.6) with a high severity CVSS of 7.2. Unauthenticated SSRF vulnerabilities…
August 10, 2026CVE-2026-59549 affects the Buddypress Media plugin (up to version 4.7.10) with a high severity CVSS score of 7.5 due to…
August 10, 2026CVE-2026-59526 affects the MapSVG plugin for WordPress (up to version 8.14.0) with a high severity SQL injection vulnerability (CVSS 7.5).…
August 10, 2026CVE-2026-59550 affects Another Wordpress Classifieds Plugin versions up to 4.4.7, exposing a high severity SQL injection risk (CVSS 7.5). Users…
August 10, 2026CVE-2026-59538 affects the GamiPress plugin (up to version 7.9.7) with a high severity SQL injection vulnerability (CVSS 7.5). Update to…
August 9, 2026CVE-2026-65513 affects Simply Schedule Appointments plugin versions up to 1.6.12.10 with a high severity CVSS of 7.2. Ensure you update…
August 9, 2026CVE-2026-65520 affects the Miniorange OAuth 20 Server plugin (up to version 6.2.0) with a CVSS score of 7.5. This SQL…
August 9, 2026CVE-2026-65552 reveals a high severity PHP Object Injection vulnerability in the Export User Data plugin for WordPress, affecting versions up…
August 9, 2026CVE-2026-65515 affects AffiliateWP versions up to 2.35.0 with a CVSS score of 7.2. This high-severity stored XSS vulnerability allows attackers…
August 9, 2026CVE-2026-65558 affects AffiliateX plugin versions up to 2.3.5, with a CVSS score of 7.2. Unauthenticated SSRF allows attackers to make…
August 9, 2026CVE-2026-65546 reveals a high-severity SQL injection vulnerability in the Qode Tours plugin for WordPress (up to version 3.1.3.1). Unauthenticated attackers…
