Skip to main content
Skip to footer
Opens in a new tab
Home
CVE Analysis
How it Works
Resources
Pricing
Log in
Create Account
Home
CVE Analysis
How it Works
Resources
Pricing
Log in
Create Account
Severity:
medium
CVE-2026-65537: Cyr to Lat Reloaded – Transliteration of Links and File Names <= 1.3.3 Missing Authorization PoC, Patch Analysis & Rule
August 10, 2026
CVE-2026-65537 affects the Cyr And Lat plugin for WordPress (up to v1.3.3) with a medium severity CVSS score of 4.3.…
CVE-2026-65532: افزونه پیامک ووکامرس Persian WooCommerce SMS <= 7.2.2 Authenticated (Shop manager+) SQL Injection PoC, Patch Analysis & Rule
August 10, 2026
CVE-2026-65532 affects the Persian WooCommerce SMS plugin (up to 7.2.2) with a medium severity score of 4.9. Authenticated attackers can…
CVE-2026-59528: ShipTime: Discount Shipping <= 1.1.1 Authenticated (Subscriber+) Information Exposure PoC, Patch Analysis & Rule
August 10, 2026
CVE-2026-59528 affects the Shiptime Discount Shipping plugin (versions
CVE-2026-65539: Kwayy HTML Sitemap <= 4.0 Cross-Site Request Forgery PoC, Patch Analysis & Rule
August 10, 2026
CVE-2026-65539 affects the Kwayy HTML Sitemap plugin for WordPress (up to version 4.0) with a medium severity CVSS score of…
CVE-2026-65547: Creative Mail – Easier WordPress & WooCommerce Email Marketing <= 1.6.9 Authenticated (Subscriber+) SQL Injection PoC, Patch Analysis & Rule
August 9, 2026
CVE-2026-65547 affects the Creative Mail By Constant Contact plugin (up to 1.6.9) with a medium severity CVSS of 6.5. Authenticated…
CVE-2026-25403: Ultimate Store Kit – Addon For WooCommerce, EDD and Elementor <= 3.0.5 Missing Authorization PoC, Patch Analysis & Rule
August 9, 2026
CVE-2026-25403 affects the Ultimate Store Kit plugin for WordPress (up to v3.0.5), allowing remote code execution due to missing capability…
CVE-2026-65541: Staff Training <= 1.0.7 Missing Authorization PoC, Patch Analysis & Rule
August 9, 2026
CVE-2026-65541 affects the Staff Training plugin for WordPress (up to v1.0.7) with a medium severity (CVSS 5.3). Unauthenticated attackers can…
CVE-2026-65504: BOX NOW Delivery Croatia <= 3.3.0 Missing Authorization PoC, Patch Analysis & Rule
August 9, 2026
CVE-2026-65504 affects the Box Now Delivery Croatia plugin (up to version 3.3.0) with a medium severity CVSS score of 5.3.…
CVE-2026-65523: Formidable Forms Signature Online Contract Automation <= 2.0.1 Unauthenticated Insecure Direct Object Reference PoC, Patch Analysis & Rule
August 9, 2026
CVE-2026-65523 affects the Formidable Forms Signature plugin (up to v2.0.1) with a CVSS score of 5.3. Unauthenticated users can exploit…
CVE-2026-65543: Vimeo <= 1.2.2 Authenticated (Subscriber+) Information Exposure PoC, Patch Analysis & Rule
August 9, 2026
CVE-2026-65543 affects the Vimeo plugin for WordPress (up to 1.2.2), exposing sensitive data to authenticated users. With a CVSS score…
CVE-2026-65568: Visual Composer Website Builder <= 45.15.0 Missing Authorization PoC, Patch Analysis & Rule
August 9, 2026
CVE-2026-65568 affects the Visual Composer plugin for WordPress (up to 45.15.0) with a medium severity (CVSS 4.3). Ensure you update…
CVE-2026-59529: Ebook Store <= 6.19 Unauthenticated Information Exposure PoC, Patch Analysis & Rule
August 9, 2026
CVE-2026-59529 affects the Ebook Store plugin for WordPress (up to 6.19) with a CVSS score of 5.3. Unauthenticated attackers can…
CVE-2026-59557: Events Made Easy <= 3.1.3 Missing Authorization PoC, Patch Analysis & Rule
August 9, 2026
CVE-2026-59557 affects the Events Made Easy plugin for WordPress (up to version 3.1.3) with a medium severity (CVSS 5.3). Unauthenticated…
CVE-2026-65521: WP Social Ninja – Embed Social Feeds, User Reviews & Chat Widgets <= 4.3.0 Unauthenticated Information Exposure PoC, Patch Analysis & Rule
August 9, 2026
CVE-2026-65521 affects the WP Social Reviews plugin (up to version 4.3.0) with a CVSS score of 5.3, allowing unauthenticated access…
CVE-2026-59532: Booking and Rental Manager for Bike | Car | Resort | Appointment | Dress | Equipment <= 2.7.2 Unauthenticated Price Maniputlation PoC, Patch Analysis & Rule
August 9, 2026
CVE-2026-59532 affects the Booking And Rental Manager For Woocommerce plugin (up to v2.7.2), allowing unauthenticated price manipulation. With a CVSS…
CVE-2026-66701: User Profile Builder – Beautiful User Registration Forms, User Profiles & User Role Editor <= 3.16.5 Missing Authorization PoC, Patch Analysis & Rule
August 8, 2026
CVE-2026-66701 affects the Profile Builder plugin for WordPress (up to 3.16.5) due to a missing capability check, allowing unauthorized access.…
CVE-2026-66692: Colissimo shipping methods for WooCommerce <= 2.10.0 Authenticated (Customer+) Insecure Direct Object Reference PoC, Patch Analysis & Rule
August 8, 2026
CVE-2026-66692 affects the Colissimo Shipping Methods for WooCommerce plugin (up to version 2.10.0) with a CVSS score of 4.3. Authenticated…
CVE-2026-66696: Kadence Blocks — Page Builder Toolkit for Gutenberg Editor <= 3.7.8 Authenticated (Contributor+) Information Exposure PoC, Patch Analysis & Rule
August 8, 2026
CVE-2026-66696 affects Kadence Blocks plugin (up to 3.7.8) with a medium severity (CVSS 4.3). Authenticated attackers can exploit it to…
CVE-2026-14224: Easy Appointments <= 3.12.26 Authenticated (Subscriber+) Insecure Direct Object Reference PoC, Patch Analysis & Rule
August 8, 2026
CVE-2026-14224 affects the Easy Appointments plugin (up to version 3.12.26) with a medium severity CVSS score of 4.3. Authenticated attackers…
CVE-2026-66699: Dokan: AI Powered WooCommerce Multivendor Marketplace Solution – Build Your Own Amazon, eBay, Etsy <= 5.0.10 Missing Authorization PoC, Patch Analysis & Rule
August 8, 2026
CVE-2026-66699 affects Dokan Lite plugin versions up to 5.0.10, allowing authenticated users to execute unauthorized actions. Update to 5.0.11 to…
←
1
…
4
5
6
7
8
…
120
→