August 13, 2026CVE-2026-27537 affects the Popup By Supsystic plugin (v1.11.2 and below) with a high severity score of 7.2 due to stored…
August 12, 2026CVE-2026-65493 affects Dokan Pro versions up to 5.0.2, allowing authenticated attackers to exploit a PHP Object Injection vulnerability. With a…
August 12, 2026CVE-2026-18146 affects Fluent Forms versions up to 6.2.11 with a CVSS score of 7.2. This high-severity XSS vulnerability allows attackers…
August 12, 2026CVE-2026-59552 affects the Pdf Embed Viewer plugin (up to v1.4.2) with a high severity CVSS score of 7.2. Unauthenticated SSRF…
August 12, 2026CVE-2026-59533 affects the Relevanssi Light plugin for WordPress (up to version 1.2.2) with a high severity CVSS score of 7.5.…
August 11, 2026CVE-2026-19091 affects the GeoDirectory plugin (up to version 2.8.169), posing a high severity risk (CVSS 8.1) due to arbitrary file…
August 11, 2026CVE-2026-18961 affects the Ventraconnect Social Login plugin (up to v1.4.3) with a high severity (CVSS 8.1) authentication bypass. Update to…
August 11, 2026CVE-2026-15606 affects the ACF Frontend Form Element plugin (up to version 3.29.9) with a CVSS score of 8.8. It allows…
August 11, 2026CVE-2026-15426 affects AcyMailing versions up to 10.11.1, allowing authenticated attackers to bypass authorization and capture password-reset emails. Upgrade to version…
August 11, 2026CVE-2026-13457 affects the Instawp Connect plugin (up to v0.1.3.6) with a CVSS score of 7.5. It allows remote code execution…
August 11, 2026CVE-2026-65510 affects the Pepro Ultimate Invoice plugin for WordPress (up to version 2.2.6) with a high severity CVSS score of…
August 11, 2026CVE-2026-65492 affects Dokan Pro plugin versions up to 5.0.0, exposing users to high severity stored cross-site scripting risks. Ensure you…
August 11, 2026CVE-2026-65516 affects the Pepro Ultimate Invoice plugin (up to 2.2.6) with a high severity CVSS of 7.2. Unauthenticated SSRF vulnerabilities…
August 10, 2026CVE-2026-59549 affects the Buddypress Media plugin (up to version 4.7.10) with a high severity CVSS score of 7.5 due to…
August 10, 2026CVE-2026-59526 affects the MapSVG plugin for WordPress (up to version 8.14.0) with a high severity SQL injection vulnerability (CVSS 7.5).…
August 10, 2026CVE-2026-59550 affects Another Wordpress Classifieds Plugin versions up to 4.4.7, exposing a high severity SQL injection risk (CVSS 7.5). Users…
August 10, 2026CVE-2026-59538 affects the GamiPress plugin (up to version 7.9.7) with a high severity SQL injection vulnerability (CVSS 7.5). Update to…
August 9, 2026CVE-2026-65513 affects Simply Schedule Appointments plugin versions up to 1.6.12.10 with a high severity CVSS of 7.2. Ensure you update…
August 9, 2026CVE-2026-65520 affects the Miniorange OAuth 20 Server plugin (up to version 6.2.0) with a CVSS score of 7.5. This SQL…
August 9, 2026CVE-2026-65552 reveals a high severity PHP Object Injection vulnerability in the Export User Data plugin for WordPress, affecting versions up…
