CVE-2026-66424

CVE-2026-66424 affects the WordPress plugin SMS Alert Order Notifications (versions

CVE-2026-66426

CVE-2026-66426 affects the WordPress WP-Stats plugin (versions

CVE-2026-66424 WordPress SMS Alert Order Notifications plugin <= 3.9.7 - Privilege Escalation vulnerability

Unauthenticated Privilege Escalation in SMS Alert Order Notifications = 3.9.7 versions...

EUVD-2026-57860

Unauthenticated Privilege Escalation in SMS Alert Order Notifications = 3.9.7 versions...

CVE-2026-66424

Unauthenticated Privilege Escalation in SMS Alert Order Notifications = 3.9.7 versions...

EUVD-2026-57861

Unauthenticated Cross Site Scripting XSS in WP-Stats = 2.56 versions...

CVE-2026-66426 WordPress WP-Stats plugin <= 2.56 - Cross Site Scripting (XSS) vulnerability

Unauthenticated Cross Site Scripting XSS in WP-Stats = 2.56 versions...

CVE-2026-65582

CVE-2026-65582 affects the WordPress AI Hub theme (versions &lt;= 1.3.10). The available documents describe a Subscriber Arbitrary File Download vulnerability in AI Hub

EUVD-2026-57980

Subscriber Arbitrary File Download in AI Hub = 1.3.10 versions...

CVE-2026-65582 WordPress AI Hub theme <= 1.3.10 - Arbitrary File Download vulnerability

Subscriber Arbitrary File Download in AI Hub = 1.3.10 versions...

CVE-2026-61984 WordPress WPMobile.App plugin <= 11.77 - Broken Access Control vulnerability

Unauthenticated Broken Access Control in WPMobile.App = 11.77 versions...

CVE-2026-65580

CVE-2026-65580 describes an unauthenticated Reflected Cross Site Scripting (XSS) vulnerability in the WordPress Agrion theme , affecting versions

EUVD-2026-57979

Unauthenticated Cross Site Scripting XSS in Agrion = 1.0.0 versions...

CVE-2026-61984

CVE-2026-61984 affects the WordPress WordPress WP Mobile App plugin (WPMobile.App) for versions

CVE-2026-65580 WordPress Agrion theme <= 1.0.0 - Reflected Cross Site Scripting (XSS) vulnerability

Unauthenticated Cross Site Scripting XSS in Agrion = 1.0.0 versions...

EUVD-2026-57978

Unauthenticated Broken Access Control in WPMobile.App = 11.77 versions...

CVE-2026-65580

Unauthenticated Cross Site Scripting XSS in Agrion = 1.0.0 versions...

CVE-2026-61984

Unauthenticated Broken Access Control in WPMobile.App = 11.77 versions...

CVE-2026-61980 WordPress OMGF Pro plugin <= 5.2.7 - Arbitrary File Download vulnerability

Unauthenticated Arbitrary File Download in OMGF Pro = 5.2.7 versions...

CVE-2026-61980

CVE-2026-61980 describes an Unauthenticated Arbitrary File Download in OMGF Pro plugin for WordPress, version