August 9, 2026CVE-2026-59556 affects the Aco Woo Dynamic Pricing plugin (up to 4.5.11) with a high severity CVSS score of 7.2. Unauthenticated…
August 9, 2026CVE-2026-59553 affects the Best Woocommerce Feed plugin (versions 7.6.1 and earlier) with a CVSS score of 7.2. Users should upgrade…
August 9, 2026CVE-2026-59527 affects the MapSVG Lite Interactive Vector Maps plugin for WordPress (up to 8.14.0) with a CVSS score of 7.5.…
August 8, 2026CVE-2026-65545 affects the Ai Engine plugin (up to v3.6.8) with a high severity CVSS score of 7.2 due to stored…
August 8, 2026CVE-2026-65549 affects the Jeg Elementor Kit plugin (up to version 3.2.10) with a high severity CVSS score of 7.5. Authenticated…
August 8, 2026CVE-2026-65517 affects Wp Ecommerce Paypal plugin versions up to 2.0.4, with a CVSS score of 7.2. This high-severity stored XSS…
August 8, 2026CVE-2026-65508 affects the Simply Schedule Appointments plugin (up to 1.6.12.10) with a high severity SQL injection vulnerability (CVSS 7.5). Update…
August 8, 2026CVE-2026-65509 affects the wpDataTables plugin (up to version 7.5.1) with a high severity CVSS score of 7.2. Unauthenticated attackers can…
August 8, 2026CVE-2026-65544 affects the Super Socializer plugin (up to version 7.14.5) with a CVSS score of 7.2. This high-severity XSS vulnerability…
August 6, 2026CVE-2026-66707 affects the Facebook For WooCommerce plugin (up to version 3.7.5) with a CVSS score of 7.2. Unauthenticated XSS vulnerabilities…
August 6, 2026CVE-2026-66702 affects the Rank Math SEO plugin (versions up to 1.0.274.1) with a high severity CVSS score of 7.2 due…
August 6, 2026CVE-2026-66705 affects the Official Facebook Pixel plugin (up to 5.2.1) with a CVSS score of 7.2. This high-severity XSS vulnerability…
August 6, 2026CVE-2026-66690 affects the GiveWP Donation Plugin (up to version 4.16.5) with a CVSS score of 7.2. This high-severity XSS vulnerability…
August 6, 2026CVE-2026-56058 affects the Quform plugin (up to version 2.23.0) with a CVSS score of 8.8. It allows authenticated users to…
August 5, 2026CVE-2025-15028 affects the Formgent plugin (up to v1.9.2) with a high severity CVSS of 7.2 due to stored XSS vulnerabilities.…
August 5, 2026CVE-2026-18510 affects the TranslatePress Multilingual plugin (up to v3.2.6) with a high severity CVSS score of 7.2. Unauthenticated attackers can…
August 5, 2026CVE-2026-15918 affects VikAppointments plugin version 1.2.19 with a CVSS score of 7.5. This high-severity SQL injection vulnerability allows unauthenticated users…
August 5, 2026CVE-2026-15459 affects WPMU DEV Dashboard plugin version 5.0.0 and earlier, with a CVSS score of 8.1. Unauthenticated attackers can bypass…
August 5, 2026CVE-2026-13395 affects the Bookly Responsive Appointment Booking Tool (v27.8 and earlier) with a high severity CVSS score of 7.5. Unauthenticated…
August 5, 2026CVE-2026-16636 affects Fluent SMTP plugin versions up to 2.2.95, exposing a high severity cross-site scripting risk (CVSS 7.2). Upgrade to…
