PT-2026-71513

Unauthenticated PHP Object Injection in Headless Single Sign On = 1.6 versions...

PT-2026-71521

Unauthenticated Cross Site Scripting XSS in Blog Floating Button = 1.4.20 versions...

PT-2026-71531

Unauthenticated Cross Site Scripting XSS in Knowledge Base for Documentation, FAQs with AI Assistance = 17.211.0 versions...

PT-2026-71511

Unauthenticated SQL Injection in Web Directory Free = 1.7.13 versions...

PT-2026-71505

Subscriber Broken Access Control in Tourfic = 2.23.1 versions...

PT-2026-71604

Donor Cross Site Scripting XSS in GiveWP 4.16.6 versions...

PT-2026-71501

Unauthenticated SQL Injection in WP Directory Kit = 1.5.4 versions...

PT-2026-71496

Unauthenticated Broken Access Control in Taxi Booking Manager for WooCommerce = 2.0.3 versions...

PT-2026-71592

Unauthenticated Cross Site Scripting XSS in SureDash = 1.10.1 versions...

PT-2026-71518

Subscriber Broken Access Control in Service Finder Booking = 6.2 versions...

PT-2026-71570

Unauthenticated Broken Access Control in Internal Link Optimiser = 5.2.7 versions...

PT-2026-71559

Unauthenticated Local File Inclusion in Geo Mashup = 1.13.18 versions...

PT-2026-71507

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Arraytics Booktics allows Blind SQL Injection. This issue affects Booktics: from n/a through 1.0.22...

PT-2026-71566

Subscriber Cross Site Scripting XSS in AfterShip Tracking = 1.18.1 versions...

PT-2026-71497

Editor PHP Object Injection in Car Rental Manager = 1.3.9 versions...

PT-2026-71506

Unauthenticated SQL Injection in WP Directory Kit = 1.5.4 versions...

CVE-2026-49466

Draft List is a WordPress plugin to manage and promote unpublished content. Versions 2.6.3 and below are vulnerable to stored Cross-Site Scripting XSS in the drafts shortcode and Draft List widget when the documented custom template option places the draft placeholder inside an HTML attribute. Th...

CVE-2026-49466 Draft List - Contributor Stored Cross-Site Scripting via Draft Title in Custom Drafts Template Attributes

Draft List is a WordPress plugin to manage and promote unpublished content. Versions 2.6.3 and below are vulnerable to stored Cross-Site Scripting XSS in the drafts shortcode and Draft List widget when the documented custom template option places the draft placeholder inside an HTML attribute. Th...

EUVD-2026-57514

Draft List is a WordPress plugin to manage and promote unpublished content. Versions 2.6.3 and below are vulnerable to stored Cross-Site Scripting XSS in the drafts shortcode and Draft List widget when the documented custom template option places the draft placeholder inside an HTML attribute. Th...

CVE-2026-49466

Draft List is a WordPress plugin to manage and promote unpublished content. Versions 2.6.3 and below are vulnerable to stored Cross-Site Scripting XSS in the drafts shortcode and Draft List widget when the documented custom template option places the draft placeholder inside an HTML attribute. Th...