August 7, 2026CVE-2026-14223 affects Easy Appointments plugin version 3.12.26 and earlier, allowing authenticated users to cancel others' appointments. Upgrade to 3.12.27 to…
August 7, 2026CVE-2026-14226 affects the Easy Appointments plugin (up to 3.12.26) with a medium severity (CVSS 4.3) vulnerability, allowing authenticated users to…
August 7, 2026CVE-2026-14231 affects the LifterLMS plugin for WordPress (up to version 10.0.10) with a medium severity (CVSS 4.3) vulnerability allowing authenticated…
August 7, 2026CVE-2026-14305 affects the Delicious Recipes plugin for WordPress, allowing unauthorized access due to a missing capability check. Users should update…
August 7, 2026CVE-2026-15252 affects the Metasync plugin for WordPress (up to version 2.6.12) with a medium severity (CVSS 4.3) vulnerability allowing unauthorized…
August 7, 2026CVE-2026-14207 affects LifterLMS plugin versions up to 10.0.9, with a CVSS score of 6.4. Users should upgrade to version 10.0.10…
August 6, 2026CVE-2026-11907 affects the Stream plugin for WordPress (up to 4.2.0) with a medium severity (CVSS 6.5) authentication bypass. Users should…
August 6, 2026CVE-2026-61973 affects Woolentor Addons Pro (up to v2.8.5) with a medium severity CVSS score of 4.3. Authenticated users can exploit…
August 6, 2026CVE-2026-61972 affects the Woolentor Addons Pro plugin (up to v2.8.5) with a medium severity CVSS score of 5.3. Unauthenticated attackers…
August 6, 2026CVE-2026-12801 affects the Ultimate Addons For Contact Form 7 plugin (up to version 3.5.43) with a medium severity CVSS of…
August 6, 2026CVE-2026-28144 affects the WP Google Map Plugin (up to v4.9.6) with a medium severity score of 4.3. Authenticated users can…
August 6, 2026CVE-2026-66664 affects the Squirrly SEO plugin (versions 14.1.1 and earlier) with a medium severity XSS vulnerability. Users should upgrade to…
August 6, 2026CVE-2026-11881 affects Fluentform versions up to 6.2.6, exposing users to medium severity stored cross-site scripting due to poor input sanitization.…
August 6, 2026CVE-2026-61971 affects the Metronet Profile Picture plugin (up to version 2.6.3) with a medium severity (CVSS 4.3) IDOR vulnerability, allowing…
August 6, 2026CVE-2026-13345 affects Essential Addons For Elementor Lite (up to v6.6.10) with a medium severity (CVSS 5.3). Unauthenticated attackers can exploit…
August 6, 2026CVE-2026-28145 affects the MasterStudy LMS plugin (up to v3.7.39) with a medium severity (CVSS 5.3) vulnerability allowing unauthorized access. Upgrade…
August 6, 2026CVE-2026-66711 affects the Woocommerce Multilingual plugin (up to v5.5.6) with a CVSS score of 6.4, exposing users to stored XSS…
August 6, 2026CVE-2026-14310 affects the Tutor LMS plugin for WordPress (version 4.0.0) with a medium severity (CVSS 4.3). It allows authenticated users…
August 6, 2026CVE-2026-61970 affects the Auto Post Thumbnail plugin for WordPress (up to v5.0.4) with a medium severity CVSS score of 6.4.…
August 5, 2026CVE-2026-0673 affects Bdthemes Element Pack Lite plugin versions up to 8.3.15, allowing unauthenticated Email Header Injection. Upgrade to 8.3.16 to…
