July 1, 2026CVE-2026-9188 affects the Wappointment plugin for WordPress (up to 2.7.6) with a CVSS score of 5.3. Unauthenticated users can exploit…
July 1, 2026CVE-2026-10104 affects the Product Video Gallery Slider for WooCommerce plugin (v1.5.1.8) with a medium severity (CVSS 4.4) XSS vulnerability. Update…
July 1, 2026CVE-2026-12657 affects LatePoint plugin versions up to 5.6.2, allowing unauthenticated users to create unauthorized bookings. Update to version 5.6.3 to…
July 1, 2026CVE-2026-12122 affects the Kirki plugin (up to version 6.0.11) with a medium severity (CVSS 5.3) vulnerability allowing unauthenticated access to…
July 1, 2026CVE-2026-12134 affects the Joomsport Sports League Results Management plugin (up to v5.7.8) with a medium severity (CVSS 4.3) authentication bypass.…
July 1, 2026CVE-2026-14029 affects Groundhogg plugin versions up to 4.5.8, allowing SQL injection by authenticated users with custom roles. Update to version…
July 1, 2026CVE-2026-11896 affects the My Calendar plugin for WordPress (up to version 3.7.14) with a CVSS score of 5.3. Unauthenticated attackers…
July 1, 2026CVE-2026-13459 affects JetFormBuilder plugin versions up to 3.6.3, allowing unauthenticated access to sensitive WooCommerce PII due to an authentication bypass.…
July 1, 2026CVE-2026-11592 affects the Email Subscribers plugin (up to version 5.9.27) with a CVSS score of 4.3. Authenticated attackers can exploit…
July 1, 2026CVE-2026-10089 affects the Insert Pages plugin for WordPress (up to version 3.11.4) with a medium severity XSS vulnerability. Update to…
July 1, 2026CVE-2026-12472 affects the Kirki plugin (up to v6.0.11) with a medium severity (CVSS 5.3) authentication bypass. Update to v6.0.12 to…
July 1, 2026CVE-2026-13704 affects the GiveWP plugin (up to version 4.16.1) with a medium severity CVSS score of 6.4. Patch to version…
July 1, 2026CVE-2026-13357 affects the Houzez Property Feed plugin (up to version 2.5.46) with a medium severity SQL injection vulnerability (CVSS 4.9).…
June 30, 2026CVE-2026-10095 affects the WP Photo Album Plus plugin (up to 9.1.13.005) with a CVSS score of 6.4. Authenticated users can…
June 30, 2026CVE-2026-12408 affects the Slim SEO plugin (versions up to 4.9.8) with a CVSS score of 4.3. Authenticated users can access…
June 30, 2026CVE-2026-13454 affects the Motopress Appointment Lite plugin (up to v2.4.5) with a medium severity SQL injection vulnerability. Users should upgrade…
June 30, 2026CVE-2026-12754 affects the Vikbooking plugin (up to 1.8.12) with a CVSS score of 6.1. This medium severity XSS vulnerability allows…
June 30, 2026CVE-2026-12435 affects the Motors Car Dealership Classified Listings plugin for WordPress (up to 1.4.111). This medium severity vulnerability allows authenticated…
June 30, 2026CVE-2026-10096 affects the Qi Blocks plugin for WordPress (up to version 1.4.9) with a medium severity (CVSS 4.3) IDOR vulnerability.…
June 30, 2026CVE-2026-13733 affects the Download Manager plugin for WordPress (up to 3.3.60) with a medium severity (CVSS 6.4) Stored XSS vulnerability.…
