August 5, 2026CVE-2026-0673 affects Bdthemes Element Pack Lite plugin versions up to 8.3.15, allowing unauthenticated Email Header Injection. Upgrade to 8.3.16 to…
August 5, 2026CVE-2026-18400 affects the Ml Slider plugin for WordPress (up to v3.111.0) with a medium severity CVSS score of 6.4. Authenticated…
August 5, 2026CVE-2026-5158 affects the Ultimate Post plugin (up to v5.0.13) with a medium severity (CVSS 6.4) Stored XSS vulnerability. Users should…
August 5, 2026CVE-2026-11983 affects the Ad Inserter plugin for WordPress (up to 2.8.16) with a medium severity (CVSS 5.3) authentication bypass. Update…
August 5, 2026CVE-2026-5391 affects the LatePoint plugin for WordPress (up to version 5.3.2) with a medium severity CVSS of 6.4. Users should…
August 5, 2026CVE-2026-15235 affects the MotoPress Hotel Booking Lite plugin (up to version 6.0.4), exposing sensitive user data to authenticated attackers. Ensure…
August 5, 2026CVE-2026-61976 affects the Jet Blocks plugin for WordPress (up to version 1.5.0) with a CVSS score of 5.3. Unauthenticated attackers…
August 5, 2026CVE-2026-61975 affects the Jet Reviews plugin for WordPress (up to version 3.0.1) with a CVSS score of 5.3. Unauthenticated attackers…
August 5, 2026CVE-2026-61977 affects the Jet Search plugin for WordPress (up to v3.6.1.2), exposing sensitive information to unauthenticated attackers. Update to the…
August 5, 2026CVE-2026-7726 affects the Layouts For WPBakery plugin (up to v1.1.3) with a CVSS score of 6.5. This medium severity vulnerability…
August 5, 2026CVE-2026-5651 affects the Askeet plugin for WordPress (up to v3.0) with a medium severity (CVSS 4.9) SQL Injection vulnerability. Update…
August 5, 2026CVE-2026-5116 affects the Contact Form 7 Dynamic Text Extension plugin (up to version 5.0.5) with a medium severity CVSS score…
August 5, 2026CVE-2026-5062 affects the Pretty Link plugin for WordPress (up to version 3.6.20) with a CVSS score of 4.9. Admins should…
August 5, 2026CVE-2026-7441 affects the Simple Yearly Archive plugin (up to v2.2.4) with a medium severity (CVSS 6.4) Stored XSS vulnerability. Update…
August 5, 2026CVE-2026-5108 affects the Super Progressive Web Apps plugin for WordPress (up to 2.2.43) with a medium severity (CVSS 4.4) Stored…
August 5, 2026CVE-2026-15941 affects Relevanssi Premium version 2.30.2 with a medium severity CVSS score of 6.5. Authenticated users can exploit a SQL…
August 5, 2026CVE-2026-7753 affects the Cost Calculator Builder plugin (up to v3.6.17) with a medium severity (CVSS 6.5) vulnerability allowing unauthorized data…
August 5, 2026CVE-2026-11421 affects the ERP: Complete HR, Accounting & CRM Suite plugin for WordPress, allowing SQL injection in versions up to…
August 5, 2026CVE-2026-15941 affects Relevanssi versions 4.27.1 and earlier, allowing SQL injection via the Admin Search AJAX handler. Update to version 4.27.2…
August 5, 2026CVE-2026-8790 affects the Football Pool plugin for WordPress (up to 2.13.4) with a medium severity (CVSS 6.1) reflected XSS vulnerability.…
