August 16, 2026CVE-2026-15726 affects the Serious Slider plugin for WordPress (up to 1.4.0) with a medium severity CVSS score of 6.4. Update…
August 16, 2026CVE-2026-15345 affects ShortPixel Adaptive Images versions up to 3.11.5, allowing authenticated users to bypass authorization. Upgrade to 3.11.6 to mitigate…
August 16, 2026CVE-2026-15963 affects the Quiz Master Next plugin (up to version 11.2.1) with a medium severity SQL injection vulnerability (CVSS 6.5).…
August 16, 2026The WC Product Table Lite plugin for WordPress, versions up to 5.6.0, has a medium severity CSS Injection vulnerability (CVE-2026-15441)…
August 16, 2026CVE-2026-15066 affects Loco Translate versions up to 2.8.7, exposing users to a medium severity XSS vulnerability. Update to version 2.8.8…
August 16, 2026CVE-2025-10005 affects the Password Protect Page plugin (up to v1.9.20) with a medium severity (CVSS 4.3) IDOR vulnerability. Authenticated attackers…
August 16, 2026CVE-2026-15602 affects the Nex Forms Express WP Form Builder plugin (up to v9.2.4) with a medium severity SQL injection vulnerability…
August 16, 2026CVE-2026-12477 affects the Styles And Layouts For Gravity Forms plugin for WordPress (up to version 5.26) with a medium severity…
August 16, 2026CVE-2026-16779 affects the Kubio AI Page Builder plugin (up to v2.8.5) with a medium severity (CVSS 4.3) authentication bypass. Users…
August 16, 2026CVE-2026-18385 affects the ProfilePress plugin (up to v4.16.19), allowing authenticated users to execute arbitrary shortcodes. Upgrade to v4.17.0 to mitigate…
August 16, 2026CVE-2026-16079 affects Fullscreen Galleria versions up to 1.6.12, exposing a medium severity SQL injection vulnerability (CVSS 6.5). Update to 1.6.13…
August 16, 2026CVE-2026-15009 affects the File Manager Advanced plugin (up to v5.4.12) with a medium severity (CVSS 6.1) Stored XSS vulnerability. Update…
August 16, 2026CVE-2026-13358 affects Simply Schedule Appointments plugin versions up to 1.6.12.10, allowing authenticated users to access others' appointment records. Update to…
August 15, 2026CVE-2026-18347 affects the Kirki plugin for WordPress (up to 6.1.1) with a medium severity (CVSS 4.3) authentication bypass. Update to…
August 15, 2026CVE-2026-12998 affects the Forminator plugin for WordPress (up to version 1.55.0.2) with a medium severity (CVSS 5.3). Unauthenticated attackers can…
August 15, 2026CVE-2026-17604 affects the Kirki plugin (up to version 6.1.1) with a medium severity (CVSS 4.9) file upload vulnerability. Update to…
August 15, 2026CVE-2026-17608 affects the WP Compress Image Optimizer plugin (up to v7.10.09) with a medium severity CVSS of 6.5. Unauthenticated attackers…
August 15, 2026CVE-2026-15351 affects the WC Vendors plugin (up to v2.7.0) with a medium severity (CVSS 4.9) SQL injection vulnerability. Users should…
August 15, 2026CVE-2026-2283 affects the User Login History plugin for WordPress (up to v2.1.7) with a medium severity SQL injection vulnerability. Update…
August 15, 2026CVE-2026-15790 affects the Youtube Showcase plugin for WordPress (up to 4.0.4) with a medium severity XSS vulnerability. Users should update…
