July 26, 2026CVE-2025-66076 affects the Woostify Sites Library plugin for WordPress (up to v1.6.2) with a medium severity (CVSS 5.3) vulnerability due…
July 26, 2026CVE-2026-57688 affects the POS Entegratör plugin for WordPress (up to version 3.7.103) with a medium severity score of 5.3. Users…
July 26, 2026CVE-2025-69134 affects the Helper plugin for WordPress (up to 1.1.4) with a medium severity CVSS score of 5.3. Unauthenticated attackers…
July 26, 2026CVE-2026-57429 affects Slim SEO plugin versions up to 4.6.2, allowing authenticated attackers to perform unauthorized actions. Update to version 4.7.0…
July 26, 2026CVE-2026-57756 affects the Nicen Localize Image plugin for WordPress (up to 1.4.9) with a medium severity SQL injection vulnerability (CVSS…
July 26, 2026CVE-2026-49779 affects the WooCommerce Tax Exempt Plugin (up to v1.9.3) with a medium severity CVSS score of 4.3. Authenticated attackers…
July 26, 2026CVE-2026-56060 affects the Print Invoice & Delivery Notes for WooCommerce plugin (up to v7.1.1) with a medium severity CVSS score…
July 26, 2026CVE-2026-56064 affects the Tourfic plugin (up to version 2.22.5) with a medium severity SQL injection vulnerability (CVSS 6.5). Users should…
July 26, 2026CVE-2026-56063 affects the Block for Mailchimp plugin (up to v1.1.15) with a CVSS score of 5.3. It allows unauthorized access;…
July 26, 2026CVE-2026-56066 affects the ShortPixel Adaptive Images plugin (up to v3.11.4) with a CVSS score of 5.3. Unauthenticated attackers can delete…
July 26, 2026CVE-2026-57619 affects Elementor versions up to 4.1.3, exposing sensitive data to authenticated attackers with Contributor access. Upgrade to 4.1.4 to…
July 26, 2026CVE-2026-57312 affects the Everest Forms plugin for WordPress (up to version 3.4.8) with a medium severity score of 6.1. Users…
July 21, 2026CVE-2026-57334 affects the Wp User Frontend plugin (up to version 4.3.7) with a medium severity CVSS score of 5.3. Unauthenticated…
July 21, 2026CVE-2026-39448 affects the Nowpayments For WooCommerce plugin (versions 1.4.0 and below) with a medium severity CVSS score of 5.3. Unauthenticated…
July 20, 2026CVE-2026-57352 affects the Woo Alidropship plugin (up to version 2.2.0) with a medium severity (CVSS 5.3) remote code execution vulnerability.…
July 20, 2026CVE-2026-57357 affects the Metasync plugin (versions up to 2.6.6) with a medium severity cross-site scripting vulnerability. Users should upgrade to…
July 20, 2026CVE-2026-57720 affects the Image Sizes plugin for WordPress (up to 6.3.2) with a CVSS score of 4.3. It allows authenticated…
July 20, 2026CVE-2026-57721 affects the Apply Online plugin (up to v2.6.7.6) with a CVSS score of 5.3. Unauthenticated attackers can exploit missing…
July 20, 2026CVE-2026-57669 affects the Advanced Cf7 Db plugin (up to v2.0.9) with a CVSS score of 4.3. Authenticated attackers can access…
July 20, 2026CVE-2026-57681 affects the GeoDirectory plugin for WordPress (up to version 2.8.161) with a medium severity CVSS score of 6.4. Authenticated…
