June 27, 2026CVE-2026-54849 affects the Premmerce WooCommerce Wishlist plugin (up to 1.1.11) with a high severity SQL injection vulnerability (CVSS 7.5). Users…
June 26, 2026CVE-2026-54188 affects the Jet Engine plugin for WordPress (up to version 3.8.10) with a high severity CVSS score of 7.2.…
June 25, 2026CVE-2026-3652 affects the ARForms plugin for WordPress (up to version 7.1.3) with a high severity CVSS score of 7.2. Unauthenticated…
June 25, 2026CVE-2026-7761 affects the Ultimate Member plugin (versions
June 25, 2026CVE-2026-12242 affects the AdRotate plugin (up to v5.17.7) with a CVSS score of 8.8. This high-severity PHP code injection vulnerability…
June 25, 2026CVE-2026-10091 affects the Email Javascript Cloaker plugin (v1.03) with a CVSS score of 7.2. It allows stored XSS via unsanitized…
June 25, 2026CVE-2026-56011 affects MapPress Google Maps for WordPress versions up to 2.97.3, with a CVSS score of 7.2. Users should upgrade…
June 25, 2026CVE-2026-56014 affects the Master Slider plugin for WordPress (up to version 3.11.2) with a CVSS score of 7.2. Unauthenticated attackers…
June 25, 2026CVE-2026-6858 affects the Transbank Webpay Plus Rest plugin (up to version 1.14.0) with a CVSS score of 7.2. This high-severity…
June 25, 2026CVE-2026-56010 affects the WooCommerce Abandon Cart Pro plugin (up to version 10.4.0) with a CVSS score of 8.8. Authenticated users…
June 24, 2026CVE-2026-12077 affects the Dokan Pro plugin for WordPress (up to v5.0.4) with a CVSS score of 7.5. This high-severity SQL…
June 24, 2026CVE-2026-9179 affects the WP Forms Connector plugin (up to version 1.8) with a high severity CVSS score of 7.5. Unauthenticated…
June 24, 2026CVE-2026-9178 affects the WP Forms Connector plugin (up to v1.8) with a CVSS score of 7.5. Unauthenticated attackers can access…
June 24, 2026CVE-2026-12937 affects the Tourfic plugin for WordPress (up to version 2.22.7), allowing unauthenticated SQL injection with a CVSS score of…
June 24, 2026CVE-2026-8705 affects the ClearSale Total plugin for WordPress (up to 3.4.2) with a CVSS score of 7.5. This high-severity SQL…
June 24, 2026CVE-2026-10092 affects the Video Playlist And Gallery Plugin for WordPress (up to 1.163) with a CVSS score of 7.2. Unauthenticated…
June 23, 2026CVE-2026-12095 affects the Kargo Takip plugin for WordPress (up to version 1.2) with a CVSS score of 7.2. Unauthenticated SSRF…
June 23, 2026CVE-2026-4297 affects the Newscred Publishing plugin (up to 0.0.31) with a CVSS score of 8.8. Authenticated attackers can exploit this…
June 23, 2026CVE-2026-9643 affects the WP Meta SEO plugin (up to v4.5.18) with a CVSS score of 7.2. This high-severity XSS vulnerability…
June 23, 2026CVE-2026-12100 affects the Link Preview plugin for WordPress (version 1.0) with a CVSS score of 7.2. Unauthenticated SSRF vulnerabilities can…
