June 26, 2026CVE-2026-13331 affects the Groundhogg plugin (up to v4.5.5) with a medium severity CVSS score of 6.5. Authenticated attackers can exploit…
June 26, 2026CVE-2026-13245 affects the MaxButtons plugin for WordPress (up to version 9.8.5) with a medium severity CVSS score of 6.1. Users…
June 26, 2026CVE-2026-3462 affects the Reepay Checkout Gateway plugin (up to version 1.8.9) with a CVSS score of 6.5. Authenticated attackers can…
June 25, 2026CVE-2026-13226 affects the Groundhogg plugin for WordPress (up to 4.5.4) with a medium severity SQL injection (CVSS 6.5). Patch to…
June 25, 2026CVE-2026-1869 affects the User Registration plugin (up to version 5.2.0), allowing unauthenticated users to bypass payment processing. Update to version…
June 25, 2026CVE-2026-11614 affects the Xpro Elementor Addons plugin (up to v1.7.2) with a medium severity CVSS score of 6.4. Authenticated attackers…
June 25, 2026CVE-2026-10530 affects the Pie Register plugin for WordPress, allowing unauthorized access due to a missing capability check. Users should update…
June 25, 2026CVE-2026-7859 affects the Motors Car Dealership Classified Listings plugin for WordPress, with a medium severity CVSS score of 4.3. Ensure…
June 25, 2026CVE-2026-56013 affects the License Manager for WooCommerce plugin (up to v3.0.15) with a CVSS score of 5.3. Unauthenticated attackers can…
June 25, 2026CVE-2026-9822 affects the WP Hotel Booking plugin (up to version 2.3.1) with a medium severity score of 4.3. Ensure you…
June 25, 2026CVE-2026-56005 affects the WP Security Audit Log plugin (up to version 5.6.3.1) with a medium severity CVSS score of 6.4.…
June 25, 2026CVE-2026-54844 affects the CheckView plugin for WordPress (up to version 2.1.0) due to a missing capability check, allowing unauthorized access.…
June 25, 2026CVE-2026-56023 affects the UPI QR Code Payment For WooCommerce plugin (up to v1.6.2) with a CVSS score of 4.3. Patch…
June 25, 2026CVE-2026-56025 affects the Paymob for WooCommerce plugin (up to version 4.1.2) with a medium severity CVSS score of 5.3. Unauthenticated…
June 25, 2026CVE-2026-54840 affects the Newsletters Lite plugin for WordPress (up to v4.13) with a medium severity (CVSS 5.3) vulnerability allowing unauthorized…
June 24, 2026CVE-2026-2508 affects the Gf Bookings Premium plugin (up to 2.7.1) with a medium severity (CVSS 6.5) SQL injection vulnerability. Authenticated…
June 24, 2026CVE-2026-10833 affects the Essential Blocks plugin for WordPress (up to version 6.1.4) with a CVSS score of 6.4. Patch to…
June 24, 2026CVE-2026-12079 affects the Dokan Pro plugin for WordPress (up to v5.0.4) with a medium severity (CVSS 6.5) SQL injection vulnerability.…
June 24, 2026CVE-2026-8614 affects the Assistio WordPress plugin (up to version 1.1.2) with a CVSS score of 4.3. Authenticated users can delete…
June 24, 2026The Osiris Signature Banner plugin for WordPress (CVE-2026-8905) is vulnerable to cross-site request forgery, allowing unauthenticated attackers to inject scripts.…
