EUVD-2026-63338

Unauthenticated Broken Access Control in WP Data Access = 5.5.80 versions...

CVE-2026-66594 WordPress WordPress Persistent Login plugin <= 3.1.0 - SQL Injection vulnerability

Subscriber SQL Injection in WordPress Persistent Login = 3.1.0 versions...

CVE-2026-66594

The WordPress Persistent Login plugin (versions ≤ 3.1.0) has a subscriber-level SQL injection vulnerability exploitable over the network with low privileges. CVSS 8.5 (HIGH) reflects high confidentiality impact and low availability impact. No in-the-wild exploitation is reported. Upgrade to a ver...

CVE-2026-66595

The WordPress WP Data Access plugin (versions ≤ 5.5.80) has an unauthenticated broken access control flaw allowing remote, no-auth access to restricted functionality with HIGH confidentiality impact (CVSS 5.9). No patch version or exploitation details are provided; monitor Patchstack's advisory f...

CVE-2026-66593

CVE-2026-66593 is an unauthenticated SQL injection vulnerability in the WordPress plugin Security & Malware scan by CleanTalk , affecting versions ≤ 2.184 . The flaw allows a remote attacker to execute arbitrary SQL queries without authentication, leading to high confidentiality impact and low av...

EUVD-2026-63336

Unauthenticated SQL Injection in Security & Malware scan by CleanTalk = 2.184 versions...

CVE-2026-66593 WordPress Security & Malware scan by CleanTalk plugin <= 2.184 - SQL Injection vulnerability

Unauthenticated SQL Injection in Security & Malware scan by CleanTalk = 2.184 versions...

EUVD-2026-63335

Unauthenticated SQL Injection in rtMedia for WordPress, BuddyPress and bbPress = 4.7.11 versions...

CVE-2026-66592 WordPress rtMedia for WordPress, BuddyPress and bbPress plugin <= 4.7.11 - SQL Injection vulnerability

Unauthenticated SQL Injection in rtMedia for WordPress, BuddyPress and bbPress = 4.7.11 versions...

CVE-2026-66592

An unauthenticated SQL injection vulnerability affects the rtMedia plugin for WordPress, BuddyPress, and bbPress at versions 4.7.11 and below. With a CVSS 3.1 base score of 9.3 (Critical), it allows remote attackers with no credentials to execute arbitrary SQL queries, potentially exposing sensit...

CVE-2026-66590 WordPress Tagembed plugin <= 7.4 - Cross Site Scripting (XSS) vulnerability

Unauthenticated Cross Site Scripting XSS in Tagembed = 7.4 versions...

CVE-2026-66586

WordPress WP Cafe Pro plugin (versions below 3.0.15) has a Local File Inclusion vulnerability, discovered by Ananda Dhakal of Patchstack. An authenticated author with high privileges can exploit it over the network to read sensitive server files, potentially compromising confidentiality, integrit...

CVE-2026-66583 WordPress Forminator plugin <= 1.57.0 - PHP Object Injection vulnerability

Unauthenticated PHP Object Injection in Forminator = 1.57.0 versions...

CVE-2026-66582 WordPress TranslatePress plugin <= 3.3.2 - Cross Site Scripting (XSS) vulnerability

Unauthenticated Cross Site Scripting XSS in TranslatePress = 3.3.2 versions...

CVE-2026-28150 WordPress Golo Framework plugin < 1.7.5 - Local File Inclusion vulnerability

Unauthenticated Local File Inclusion in Golo Framework 1.7.5 versions...

CVE-2026-66581 WordPress JetEngine plugin <= 3.8.14.1 - Cross Site Scripting (XSS) vulnerability

Unauthenticated Cross Site Scripting XSS in JetEngine = 3.8.14.1 versions...

CVE-2025-53999 WordPress Altair theme <= 5.2.2 - Broken Access Control vulnerability

Unauthenticated Broken Access Control in Altair = 5.2.2 versions...

CVE-2025-15688 WordPress Capella theme <= 2.5.5 - SQL Injection vulnerability

Unauthenticated SQL Injection in Capella = 2.5.5 versions...

CVE-2025-15689 WordPress Capella theme <= 2.5.5 - Privilege Escalation vulnerability

Unauthenticated Privilege Escalation in Capella = 2.5.5 versions...

CVE-2025-15637

CVE-2025-15637 is an unauthenticated Local File Inclusion (LFI) vulnerability in the WordPress Shuffle theme , affecting versions 1.8 and earlier . The flaw allows a remote attacker with no prior access to include arbitrary local files, potentially leading to full compromise of confidentiality, i...