August 16, 2026CVE-2026-13358 affects Simply Schedule Appointments plugin versions up to 1.6.12.10, allowing authenticated users to access others' appointment records. Update to…
August 15, 2026CVE-2026-18347 affects the Kirki plugin for WordPress (up to 6.1.1) with a medium severity (CVSS 4.3) authentication bypass. Update to…
August 15, 2026CVE-2026-12998 affects the Forminator plugin for WordPress (up to version 1.55.0.2) with a medium severity (CVSS 5.3). Unauthenticated attackers can…
August 15, 2026CVE-2026-17604 affects the Kirki plugin (up to version 6.1.1) with a medium severity (CVSS 4.9) file upload vulnerability. Update to…
August 15, 2026CVE-2026-17608 affects the WP Compress Image Optimizer plugin (up to v7.10.09) with a medium severity CVSS of 6.5. Unauthenticated attackers…
August 15, 2026CVE-2026-15351 affects the WC Vendors plugin (up to v2.7.0) with a medium severity (CVSS 4.9) SQL injection vulnerability. Users should…
August 15, 2026CVE-2026-2283 affects the User Login History plugin for WordPress (up to v2.1.7) with a medium severity SQL injection vulnerability. Update…
August 15, 2026CVE-2026-18402 affects SureDash plugin versions up to 1.10.3 with a medium severity CVSS score of 6.4. Authenticated attackers can exploit…
August 15, 2026CVE-2026-9767 affects the School Management System plugin for WordPress (up to v5.4) with a medium severity (CVSS 6.5) SQL injection…
August 15, 2026CVE-2026-15790 affects the Youtube Showcase plugin for WordPress (up to 4.0.4) with a medium severity XSS vulnerability. Users should update…
August 15, 2026CVE-2026-10035 affects the Weaver For Bbpress plugin (up to 1.7.1) with a medium severity (CVSS 6.6) PHP Object Injection vulnerability.…
August 15, 2026CVE-2026-16775 affects the Custom Facebook Feed plugin (up to v4.9.0) with a medium severity (CVSS 6.4) Stored XSS vulnerability. Users…
August 15, 2026CVE-2026-15604 affects the Toocheke Companion plugin (up to v2.10) with a medium severity CVSS score of 6.4. Update to v2.11…
August 15, 2026CVE-2026-17582 affects the Slider Hero plugin for WordPress (up to v9.1.7) with a medium severity score of 4.9. Authenticated admins…
August 15, 2026CVE-2026-16758 affects the Shortcode Variables plugin for WordPress (up to version 5.2.0) with a medium severity CVSS score of 6.4.…
August 14, 2026CVE-2026-16146 affects the Gdpr Compliant Recaptcha For All Forms plugin (up to version 5.1) with a medium severity SQL injection…
August 14, 2026CVE-2026-18387 affects the Groundhogg plugin for WordPress (up to 4.5.14) with a medium severity (CVSS 6.5) SQL injection vulnerability. Update…
August 14, 2026CVE-2026-15948 affects the Hydra Booking plugin for WordPress (up to v1.2.2) with a medium severity (CVSS 6.4) stored XSS vulnerability.…
August 14, 2026CVE-2026-17090 affects Beaver Builder Lite up to version 2.10.2.2, allowing authenticated users to exploit stored XSS vulnerabilities. Upgrade to 2.10.3.2…
August 14, 2026CVE-2026-15453 affects the Kivicare Clinic Management System (up to version 4.5.1) with a medium severity SQL injection vulnerability. Users should…
