CVE-2026-66478 WordPress Church Admin plugin <= 5.1.1 - SQL Injection vulnerability

Unauthenticated SQL Injection in Church Admin = 5.1.1 versions...

EUVD-2026-57891

Unauthenticated SQL Injection in Church Admin = 5.1.1 versions...

CVE-2026-66472

CVE-2026-66472 affects the WordPress Everest Backup plugin up to version 2.3.12, with an unauthenticated SQL injection vulnerability reported. The connected sources confirm the affected product (Everest Backup plugin) and the vulnerability class (SQL injection) but do not provide technical detail...

CVE-2026-66471

CVE-2026-66471 affects the WordPress Accordion plugin (versions

CVE-2026-66471 WordPress Accordion plugin <= 3.0.6 - Cross Site Scripting (XSS) vulnerability

Subscriber Cross Site Scripting XSS in Accordion = 3.0.6 versions...

CVE-2026-66471

Subscriber Cross Site Scripting XSS in Accordion = 3.0.6 versions...

CVE-2026-66469

The CVE-2026-66469 entry concerns Unauthenticated Broken Access Control in WordPress plugin Arvow AI SEO Writer (versions

CVE-2026-66469

Unauthenticated Broken Access Control in Arvow AI SEO Writer = 1.5.3 versions...

EUVD-2026-57888

Unauthenticated Broken Access Control in Arvow AI SEO Writer = 1.5.3 versions...

CVE-2026-66469 WordPress Arvow AI SEO Writer plugin <= 1.5.3 - Broken Access Control vulnerability

Unauthenticated Broken Access Control in Arvow AI SEO Writer = 1.5.3 versions...

CVE-2026-66468 WordPress Local Delivery Drivers for WooCommerce plugin <= 3.0.0 - Cross Site Scripting (XSS) vulnerability

Unauthenticated Cross Site Scripting XSS in Local Delivery Drivers for WooCommerce = 3.0.0 versions...

CVE-2026-66468

The CVE-2026-66468 entry concerns the WordPress plugin Local Delivery Drivers for WooCommerce (

CVE-2026-66466

The CVE concerns the WordPress StoreGrowth: Smart Sales Booster for WooCommerce | BOGO, Upsells, Direct Checkout, Quick View, Side Cart plugin (versions

CVE-2026-66467

Subscriber Cross Site Scripting XSS in FluentCommunity = 2.7.5 versions...

CVE-2026-66466 WordPress StoreGrowth: Smart Sales Booster for WooCommerce | BOGO, Upsells, Direct Checkout, Quick View, Side Cart plugin <= 2.1.1 - Broken Access Control vulnerability

Unauthenticated Broken Access Control in StoreGrowth: Smart Sales Booster for WooCommerce | BOGO, Upsells, Direct Checkout, Quick View, Side Cart = 2.1.1 versions...

CVE-2026-66467 WordPress FluentCommunity plugin <= 2.7.5 - Cross Site Scripting (XSS) vulnerability

Subscriber Cross Site Scripting XSS in FluentCommunity = 2.7.5 versions...

CVE-2026-66465

CVE-2026-66465 affects WordPress Cartify theme (Cartify Multipurpose) versions up to and including 1.3.0.1, with unauthenticated broken authentication that can lead to account takeover. The connected documents confirm the vulnerability type and the affected version range but do not provide remedi...

CVE-2026-66465

Unauthenticated Broken Authentication in Cartify = 1.3.0.1 versions...

CVE-2026-66464 WordPress Internal Link Optimiser plugin <= 5.2.7 - Broken Access Control vulnerability

Unauthenticated Broken Access Control in Internal Link Optimiser = 5.2.7 versions...

CVE-2026-66464

CVE-2026-66464 affects the WordPress plugin Internal Link Optimiser up to version 5.2.7. The vulnerability is described as unauthenticated broken access control, enabling access checks to be bypassed without user authentication. The connected records confirm the product, plugin/component, and the...