August 5, 2026CVE-2026-15459 affects WPMU DEV Dashboard plugin version 5.0.0 and earlier, with a CVSS score of 8.1. Unauthenticated attackers can bypass…
August 5, 2026CVE-2026-13395 affects the Bookly Responsive Appointment Booking Tool (v27.8 and earlier) with a high severity CVSS score of 7.5. Unauthenticated…
August 5, 2026CVE-2026-16636 affects Fluent SMTP plugin versions up to 2.2.95, exposing a high severity cross-site scripting risk (CVSS 7.2). Upgrade to…
August 5, 2026CVE-2026-14602 reveals a high-severity PHP Object Injection vulnerability in the Remote API plugin for WordPress (versions up to 0.2). Unauthenticated…
August 5, 2026CVE-2026-18325 affects the Forminator plugin (up to v1.56.1) with a CVSS score of 7.2. This high-severity XSS vulnerability allows unauthenticated…
August 5, 2026CVE-2026-18322 affects the Popup By Supsystic plugin (up to v1.12.0) with a CVSS score of 8.8. Unauthenticated attackers can escalate…
August 5, 2026CVE-2026-7693 affects the Backup Backup plugin (up to v2.1.5.1) with a high severity CVSS score of 7.2. Authenticated users can…
August 5, 2026CVE-2026-7444 affects the Search Analytics for WP plugin (up to version 1.4.16) with a high severity CVSS score of 8.1…
August 5, 2026CVE-2026-6639 affects the Ai Copilot Content Generator plugin (up to 1.4.6) with a CVSS score of 7.5. Unauthenticated attackers can…
August 5, 2026CVE-2026-15979 affects the Content Egg plugin for WordPress (up to 11.3.0) with a CVSS score of 8.1. Authenticated users can…
August 5, 2026CVE-2026-7529 affects the Wisecampaign plugin for WordPress (up to version 1.1.16) with a CVSS score of 7.5. Unauthenticated attackers can…
August 5, 2026CVE-2026-8761 affects the Dokan Lite plugin for WordPress (versions
August 5, 2026CVE-2026-17506 affects the Independent Analytics plugin for WordPress (up to 2.15.0) with a CVSS score of 7.2. Unauthenticated stored XSS…
August 5, 2026CVE-2026-16143 affects the VikRentItems plugin (up to v1.2.1) with a high severity CVSS score of 7.2 due to stored XSS.…
July 26, 2026CVE-2026-57331 affects the Ppv Live Webcams plugin (up to version 7.4.8) with a high severity CVSS score of 8.1. Authenticated…
July 26, 2026CVE-2026-57625 affects the Admin Site Enhancements Pro plugin for WordPress (up to v8.8.5) with a CVSS score of 7.2. Unauthenticated…
July 26, 2026CVE-2026-56068 affects the Jet Engine plugin for WordPress (up to version 3.8.10.2) with a CVSS score of 7.5. This high-severity…
July 26, 2026CVE-2026-57677 reveals a high-severity PHP Object Injection vulnerability in the Novalnet Payment Gateway for WooCommerce (up to 12.10.3). Unauthenticated attackers…
July 26, 2026CVE-2026-56049 affects the Post Snippets plugin (up to version 4.0.19) with a CVSS score of 8.8, allowing remote code execution…
July 26, 2026CVE-2026-56045 affects the WordPress Automatic Plugin (up to version 3.135.1) with a high severity CVSS score of 7.2. Unauthenticated stored…
