June 29, 2026CVE-2026-57643 affects the WP Post Author plugin (up to version 3.9.1) with a medium severity score of 6.5. Authenticated attackers…
June 28, 2026CVE-2026-54818 affects the SlimStat Analytics plugin for WordPress (up to 5.4.11) with a medium severity CVSS score of 6.5. Authenticated…
June 28, 2026CVE-2026-54817 affects the Mstore Api plugin for WordPress (up to version 4.18.4) with a medium severity CVSS score of 5.3.…
June 28, 2026CVE-2026-54821 affects the Visual Link Preview plugin (up to version 2.3.1) with a CVSS score of 4.3. Authenticated attackers can…
June 28, 2026CVE-2026-54826 affects the SupportCandy plugin (up to v3.4.6) with a CVSS score of 4.3. Authenticated users can exploit this IDOR…
June 28, 2026CVE-2026-54824 affects Quick Adsense Reloaded plugin versions up to 3.0.3 with a medium severity (CVSS 5.3). Patch to version 3.0.4…
June 28, 2026CVE-2026-54830 affects the Restaurant Reservations plugin (up to v2.7.19) with a CVSS score of 5.3. Unauthenticated attackers can exploit this…
June 28, 2026CVE-2026-54813 affects the SureDash plugin for WordPress (up to v1.8.0) with a medium severity (CVSS 6.5) SQL injection vulnerability. Users…
June 28, 2026CVE-2026-54822 affects the SALESmanago plugin (up to version 3.11.2) with a medium severity (CVSS 6.5) SQL injection vulnerability. Users should…
June 28, 2026CVE-2026-54828 affects the Motors Car Dealership Classified Listings plugin (up to v1.4.109) with a medium severity (CVSS 5.3) vulnerability. Patch…
June 28, 2026CVE-2026-54834 affects Object Cache 4 Everyone plugin versions up to 2.3.2, exposing sensitive data to unauthenticated attackers. Upgrade to 2.3.3…
June 27, 2026CVE-2026-56024 affects WP Easy Pay plugin versions up to 4.5.0, with a CVSS score of 4.3. This medium-severity CSRF vulnerability…
June 27, 2026CVE-2026-56012 affects the Media Library Assistant plugin for WordPress (up to version 3.35) with a medium severity (CVSS 6.5) SQL…
June 27, 2026CVE-2026-54846 affects the Syncee Global Dropshipping plugin (up to v1.0.27) with a CVSS score of 5.3. Unauthenticated attackers can exploit…
June 27, 2026CVE-2026-54848 affects the Woosquare plugin (up to v4.7.3) with a CVSS score of 5.3, allowing unauthenticated access to sensitive data.…
June 27, 2026CVE-2026-54842 affects the Royal MCP plugin for WordPress (up to version 1.4.25) with a medium severity (CVSS 4.3) vulnerability allowing…
June 27, 2026CVE-2026-54847 affects the Stylish Cost Calculator plugin for WordPress (up to v8.3.9) due to a missing capability check, allowing unauthorized…
June 27, 2026CVE-2026-54841 affects the Vitepos Lite plugin for WordPress (up to version 3.4.2) with a CVSS score of 5.3. Unauthenticated attackers…
June 27, 2026CVE-2026-56006 affects the H5P plugin for WordPress (up to version 1.17.6) with a medium severity (CVSS 6.1) XSS vulnerability. Upgrade…
June 27, 2026CVE-2026-54839 affects the Trinity Backup plugin (up to v2.0.9) with a CVSS score of 5.3, exposing sensitive data to unauthenticated…
