PT-2026-71523

Customer Sensitive Data Exposure in WP Event SOlution = 4.1.18 versions...

PT-2026-71512

Unauthenticated Bypass Vulnerability in Headless Single Sign On = 1.6 versions...

PT-2026-71498

Subscriber Broken Access Control in Solace Extra = 1.6.0 versions...

PT-2026-71557

Subscriber SQL Injection in If-So Dynamic Content Personalization = 1.10 versions...

PT-2026-71500

Unauthenticated Cross Site Scripting XSS in Popup by Supsystic = 1.11.2 versions...

PT-2026-71502

Unauthenticated Cross Site Scripting XSS in Welcart e-Commerce = 2.11.31 versions...

PT-2026-71570

Unauthenticated Broken Access Control in Internal Link Optimiser = 5.2.7 versions...

PT-2026-71505

Subscriber Broken Access Control in Tourfic = 2.23.1 versions...

PT-2026-71497

Editor PHP Object Injection in Car Rental Manager = 1.3.9 versions...

PT-2026-71592

Unauthenticated Cross Site Scripting XSS in SureDash = 1.10.1 versions...

PT-2026-71521

Unauthenticated Cross Site Scripting XSS in Blog Floating Button = 1.4.20 versions...

PT-2026-71604

Donor Cross Site Scripting XSS in GiveWP 4.16.6 versions...

PT-2026-71501

Unauthenticated SQL Injection in WP Directory Kit = 1.5.4 versions...

PT-2026-71518

Subscriber Broken Access Control in Service Finder Booking = 6.2 versions...

PT-2026-71496

Unauthenticated Broken Access Control in Taxi Booking Manager for WooCommerce = 2.0.3 versions...

PT-2026-71506

Unauthenticated SQL Injection in WP Directory Kit = 1.5.4 versions...

PT-2026-71507

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Arraytics Booktics allows Blind SQL Injection. This issue affects Booktics: from n/a through 1.0.22...

PT-2026-71559

Unauthenticated Local File Inclusion in Geo Mashup = 1.13.18 versions...

CVE-2026-49466

Draft List is a WordPress plugin to manage and promote unpublished content. Versions 2.6.3 and below are vulnerable to stored Cross-Site Scripting XSS in the drafts shortcode and Draft List widget when the documented custom template option places the draft placeholder inside an HTML attribute. Th...

EUVD-2026-57514

Draft List is a WordPress plugin to manage and promote unpublished content. Versions 2.6.3 and below are vulnerable to stored Cross-Site Scripting XSS in the drafts shortcode and Draft List widget when the documented custom template option places the draft placeholder inside an HTML attribute. Th...