August 14, 2026CVE-2026-16586 affects the Contest Gallery plugin (up to version 30.0.7) with a medium severity rating of 6.5. Authenticated attackers can…
August 14, 2026CVE-2026-12128 affects the Pinpoint Booking System plugin for WordPress (up to version 2.9.9.6.8) allowing unauthenticated price manipulation. Users should patch…
August 14, 2026CVE-2026-8840 affects the Booking Calendar plugin for WordPress (up to v3.2.36) with a medium severity (CVSS 5.3) authentication bypass. Unauthenticated…
August 14, 2026CVE-2026-16080 affects the Image Uploader for Welcart plugin (up to version 1.4.6) with a medium severity CVSS score of 6.5.…
August 13, 2026CVE-2026-73403 affects the User Registration plugin for WordPress, versions up to 5.2.6, with a medium severity CVSS score of 5.3.…
August 13, 2026CVE-2026-16810 affects the Bit Form plugin (up to v3.2.0) with a medium severity SQL injection vulnerability (CVSS 6.5). Update to…
August 13, 2026CVE-2026-14922 affects WP Photo Album Plus versions up to 9.2.04.003, posing a medium severity risk (CVSS 6.4) due to Stored…
August 13, 2026CVE-2026-12743 affects the Affiliate Toolkit Starter plugin (up to v3.8.8) with a medium severity SQL injection vulnerability. Update to v3.8.9…
August 13, 2026CVE-2026-13612 affects the Kivicare Clinic Management System plugin (up to version 4.5.2) with a CVSS score of 4.3. Authenticated attackers…
August 13, 2026CVE-2026-73401 affects the InstaWP Connect plugin (up to v0.1.3.7) with a medium severity (CVSS 5.3) vulnerability allowing unauthorized access. Update…
August 13, 2026CVE-2026-13168 affects the Wp Event Solution plugin (up to version 4.1.20) with a medium severity (CVSS 4.3). Authenticated attackers can…
August 13, 2026CVE-2026-12976 affects the LearnPress plugin (up to version 4.4.4) with a CVSS score of 4.3. Authenticated attackers can exploit this…
August 13, 2026CVE-2026-73349 affects the GiveWP Donation Plugin (up to version 4.16.6) allowing unauthorized access due to a missing capability check. Users…
August 13, 2026CVE-2026-13177 affects the Wp Event Solution plugin (up to version 4.1.20) with a medium severity CVSS score of 4.3, allowing…
August 13, 2026CVE-2025-10308 affects the Astro Booking Engine plugin (up to v1.4.0) with a medium severity (CVSS 4.3) CSRF vulnerability. Update to…
August 13, 2026CVE-2026-73357 affects the GiveWP Donation Plugin for WordPress, allowing authenticated attackers to exploit a Stored XSS vulnerability. Users should update…
August 13, 2026CVE-2026-73346 affects the Mailchimp for WooCommerce plugin (up to version 6.2) with a medium severity SQL injection vulnerability. Admins should…
August 13, 2026CVE-2026-73353 affects the Revolut Gateway for WooCommerce plugin, allowing unauthorized access due to a missing capability check. Users should update…
August 13, 2026CVE-2026-66660 affects the Contact Form 7 Paypal Add On (up to version 2.5.1) with a medium severity (CVSS 5.3) vulnerability…
August 13, 2026CVE-2026-27999 affects the Tourfic plugin (up to version 2.23.1) with a medium severity (CVSS 4.3) vulnerability allowing unauthorized actions by…
