July 1, 2026CVE-2026-13251 affects the Perfmatters plugin for WordPress (up to version 2.6.4) with a CVSS score of 7.5. Unauthenticated attackers can…
July 1, 2026CVE-2026-14249 affects the Request A Quote plugin for WordPress (up to version 2.5.5) with a CVSS score of 7.5. Unauthenticated…
July 1, 2026CVE-2026-5821 affects the Image Optimization plugin (up to v1.7.4) with a CVSS score of 8.1. Authenticated attackers can exploit a…
June 30, 2026CVE-2026-12142 affects the Nex Forms Express WP Form Builder plugin (up to 9.2.2) with a high severity CVSS score of…
June 30, 2026CVE-2026-13228 affects the LatePoint plugin (up to version 5.6.3) with a CVSS score of 8.8. Authenticated attackers can escalate privileges…
June 30, 2026CVE-2026-12158 affects the Custom Registration Form Builder With Submission Manager plugin (up to 6.0.9.1) with a CVSS of 8.8. This…
June 30, 2026CVE-2026-12224 affects Dokan Pro plugin versions up to 5.0.4, allowing authenticated attackers to escalate privileges to administrator. This high-severity vulnerability…
June 30, 2026CVE-2026-1239 affects Ninja Forms plugin version 3.14.1 with a CVSS score of 7.5. Unauthenticated attackers can access sensitive form submissions.…
June 30, 2026CVE-2026-11823 affects BookingPress Appointment Booking Pro plugin versions up to 5.7.1, allowing unauthenticated SQL injection with a CVSS score of…
June 29, 2026CVE-2026-12240 affects the Export User Data plugin for WordPress (up to 2.2.6) with a CVSS score of 8.0. Authenticated attackers…
June 29, 2026CVE-2026-8141 affects the Ajax Load More Filters plugin for WordPress, with a high severity CVSS score of 7.2. Users should…
June 28, 2026CVE-2026-54829 affects WP Photo Album Plus versions up to 9.1.13.005 with a high severity CVSS score of 7.5. Unauthenticated SQL…
June 28, 2026CVE-2026-54825 reveals a high-severity SQL injection vulnerability in the wpDataTables plugin for WordPress, affecting versions up to 7.4. Unauthenticated attackers…
June 28, 2026CVE-2026-54812 affects the Motors Car Dealership Classified Listings plugin for WordPress (up to version 1.4.109) with a CVSS score of…
June 28, 2026CVE-2026-54814 affects the Motors Car Dealership Classified Listings plugin (up to v1.4.109) with a CVSS score of 7.5. Patch to…
June 28, 2026CVE-2026-54808 affects WP Travel Blocks plugin versions up to 3.9.4 with a CVSS score of 7.5. Unauthenticated SQL Injection allows…
June 28, 2026CVE-2026-54815 reveals a high severity SQL injection vulnerability in the Cargo Shipping Location for WooCommerce plugin, affecting versions up to…
June 28, 2026CVE-2026-54816 affects the Advanced Ads plugin for WordPress (up to version 2.0.21) with a CVSS score of 8.3. Authenticated attackers…
June 28, 2026CVE-2026-54831 affects the GeoDirectory plugin (up to version 2.8.162) with a high severity SQL injection vulnerability (CVSS 7.5). Update to…
June 28, 2026CVE-2026-54820 affects the Jet Booking plugin for WordPress (up to v4.0.4.1) with a high severity CVSS score of 7.5. Unauthenticated…
