CVE-2026-65561 WordPress WordPress Social Login and Register plugin <= 7.8.0 - Cross Site Scripting (XSS) vulnerability

Contributor Cross Site Scripting XSS in WordPress Social Login and Register = 7.8.0 versions...

CVE-2026-65558 WordPress AffiliateX plugin <= 2.3.5 - Server Side Request Forgery (SSRF) vulnerability

Unauthenticated Server Side Request Forgery SSRF in AffiliateX = 2.3.5 versions...

CVE-2026-65557

CVE-2026-65557 concerns the WordPress plugin Abandoned Cart Lite for WooCommerce (versions &lt;= 6.8.0), where a Cross Site Scripting (XSS) flaw affects the shop-manager context. The connected records confirm the affected product (WordPress WooCommerce plugin), the vulnerability type (XSS), and t...

CVE-2026-65435 WordPress Thrive Leads Version plugin <= 10.9.2 - Broken Access Control vulnerability

Unauthenticated Broken Access Control in Thrive Leads Version = 10.9.2 versions...

CVE-2026-65434 WordPress ЮKassa для WooCommerce plugin <= 2.16.1 - Sensitive Data Exposure vulnerability

Subscriber Sensitive Data Exposure in ЮKassa для WooCommerce = 2.16.1 versions...

CVE-2026-65433

CVE-2026-65433 concerns the WordPress plugin “RT Mega Menu – Mega Menu Builder for Elementor & Gutenberg” (versions

CVE-2026-59559

The CVE concerns a Cross-Site Scripting (XSS) vulnerability in the WordPress plugin “RT Mega Menu – Mega Menu Builder for Elementor & Gutenberg”, version

CVE-2026-59559 WordPress RT Mega Menu – Mega Menu Builder for Elementor & Gutenberg plugin <= 1.5.1 - Cross Site Scripting (XSS) vulnerability

Subscriber Cross Site Scripting XSS in RT Mega Menu – Mega Menu Builder for Elementor & Gutenberg = 1.5.1 versions...

CVE-2026-59557

CVE-2026-59557 relates to the WordPress Events Made Easy plugin, affected versions

CVE-2026-59556

CVE-2026-59556 : Unauthenticated Cross Site Scripting (XSS) in the WordPress plugin Dynamic Pricing With Discount Rules for WooCommerce (versions

CVE-2026-59556 WordPress Dynamic Pricing With Discount Rules for WooCommerce plugin <= 4.5.11 - Cross Site Scripting (XSS) vulnerability

Unauthenticated Cross Site Scripting XSS in Dynamic Pricing With Discount Rules for WooCommerce = 4.5.11 versions...

CVE-2026-59552 WordPress 3D Flipbook PDF Viewer & Embedder plugin <= 1.4.2 - Server Side Request Forgery (SSRF) vulnerability

Unauthenticated Server Side Request Forgery SSRF in 3D Flipbook PDF Viewer & Embedder = 1.4.2 versions...

CVE-2026-59550

CVE-2026-59550 affects the WordPress plugin AWP Classifieds (versions

CVE-2026-59548

The CVE concerns WordPress Byteflows Travel & Hotel Booking plugin, version

CVE-2026-59539 WordPress Paid Member Subscriptions plugin <= 3.0.7 - Insecure Direct Object References (IDOR) vulnerability

Subscriber Insecure Direct Object References IDOR in Paid Member Subscriptions = 3.0.7 versions...

CVE-2026-59546

Subscriber Broken Authentication in Hide My WP Ghost = 7.0.06 versions...

EUVD-2026-49214

Unauthenticated SQL Injection in GamiPress = 7.9.7 versions...

CVE-2026-59535

CVE-2026-59535 affects WordPress Thrive Product Manager plugin

CVE-2026-59534

The CVE-2026-59534 entry concerns the WordPress plugin Post My CF7 Form (versions

CVE-2026-59534 WordPress Post My CF7 Form plugin <= 6.2.0 - Broken Access Control vulnerability

Unauthenticated Broken Access Control in Post My CF7 Form = 6.2.0 versions...