June 27, 2026CVE-2026-56007 affects the Ocean Product Sharing plugin (up to 2.2.2) with a medium severity (CVSS 4.4) Stored XSS vulnerability. Patch…
June 27, 2026CVE-2026-54838 affects the WC Vendors plugin (up to version 2.6.8) with a medium severity SQL injection vulnerability (CVSS 6.5). Update…
June 27, 2026CVE-2026-56009 affects the Bricksable plugin for WordPress (up to 1.6.83) with a medium severity (CVSS 6.4) stored XSS vulnerability. Update…
June 27, 2026CVE-2026-54837 affects the All In One Intranet plugin for WordPress (up to version 1.8.1) with a medium severity (CVSS 5.3).…
June 26, 2026CVE-2026-11597 affects the Surbma Infusionsoft Shortcode plugin (up to 2.0.1) with a CVSS score of 6.4. Authenticated users can exploit…
June 26, 2026CVE-2026-9242 affects the Custom Registration Form Builder plugin (up to version 6.0.8.6) with a CVSS score of 5.3. Unauthenticated attackers…
June 26, 2026CVE-2026-9233 affects the Quiz Master Next plugin (up to version 11.1.4) with a medium severity (CVSS 4.3) authentication bypass. Update…
June 26, 2026CVE-2026-11364 affects the Product Specifications plugin for WooCommerce (up to v0.8.9) with a CVSS score of 4.3. Patch to v0.8.10…
June 26, 2026CVE-2026-12432 affects WP Full Stripe Free plugin versions up to 8.4.3, with a medium severity score of 5.3. Unauthenticated attackers…
June 26, 2026CVE-2026-12399 affects Gutenverse plugin versions 3.8.0 and below, with a CVSS score of 4.4. Authenticated users can exploit this cross-site…
June 26, 2026CVE-2026-11783 affects Dokan Lite plugin versions up to 5.0.4, allowing stored XSS due to insufficient input sanitization. Update to 5.0.5…
June 26, 2026CVE-2026-11987 affects Dokan Lite plugin versions up to 5.0.4, allowing authenticated users to access other vendors' unpublished products. Upgrade to…
June 26, 2026CVE-2026-11773 affects the Masteriyo LMS plugin (up to v2.2.1) with a medium severity CVSS score of 4.3. Authenticated users can…
June 26, 2026CVE-2026-13295 affects the Siteorigin Panels plugin (up to v2.34.3) with a medium severity (CVSS 6.4) Stored XSS vulnerability. Users should…
June 26, 2026CVE-2026-13422 affects the HD Quiz plugin for WordPress (versions 2.2.0 to 2.2.1) with a CVSS score of 4.3. Patch to…
June 26, 2026CVE-2026-13335 affects the CodePeople Post Map plugin (up to version 1.2.6) with a CVSS score of 6.4. Authenticated attackers can…
June 26, 2026CVE-2026-13333 affects the Groundhogg plugin for WordPress (up to version 4.5.5) with a medium severity CVSS score of 6.5. Authenticated…
June 26, 2026CVE-2026-12404 affects Nex Forms Express WP Form Builder versions up to 9.2.2, allowing unauthenticated users to access sensitive data. Upgrade…
June 26, 2026CVE-2026-3462 affects the Reepay Checkout Gateway plugin (up to version 1.8.9) with a CVSS score of 6.5. Authenticated attackers can…
June 26, 2026CVE-2026-11356 affects the Ivory Search plugin for WordPress (up to version 5.5.15) with a medium severity (CVSS 4.4) stored XSS…
