WordPress User Registration plugin <= 5.2.7 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by Ananda Dhakal Patchstack in WordPress Plugin User Registration versions = 5.2.7...

WordPress Progress Planner plugin <= 1.10.0 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by Asim Alshaya in WordPress Plugin Progress Planner versions = 1.10.0...

WordPress Sassy Social Share plugin <= 3.3.79 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by ChuongVN in WordPress Plugin Sassy Social Share versions = 3.3.79...

WordPress NEX-Forms plugin <= 9.3.1 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by Ahmed Hassan in WordPress Plugin NEX-Forms versions = 9.3.1...

WordPress PDF for Contact Form 7 plugin <= 7.1.0 - Arbitrary File Download vulnerability

Arbitrary File Download vulnerability discovered by Eunho Kim in WordPress Plugin PDF for Contact Form 7 versions = 7.1.0...

WordPress Simple Payment plugin <= 2.5.4 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by V1T in WordPress Plugin Simple Payment versions = 2.5.4...

WordPress BEAR plugin <= 1.2.2 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by Sakri Koskimies in WordPress Plugin BEAR versions = 1.2.2...

WordPress Payflex Payment Gateway plugin <= 2.7.1 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by Ananda Dhakal Patchstack in WordPress Plugin Payflex Payment Gateway versions = 2.7.1...

WordPress Salon booking system plugin <= 10.31.5 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by Ananda Dhakal Patchstack in WordPress Plugin Salon booking system versions = 10.31.5...

WordPress JetReviews plugin <= 3.1.2 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by nh4tvd in WordPress Plugin JetReviews versions = 3.1.2...

WordPress Classified Listing plugin <= 6.1.2 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by Zein in WordPress Plugin Classified Listing versions = 6.1.2...

WordPress ProfileGrid plugin <= 6.0.0.2 - SQL Injection vulnerability

SQL Injection vulnerability discovered by neurotx in WordPress Plugin ProfileGrid versions = 6.0.0.2...

CVE-2026-93549

The CoCart WordPress plugin before 4.9.7 does not scope its REST API authentication filter to its own endpoints, which disables WordPress core's REST nonce protection for every route, allowing an attacker to perform a cross-site request forgery attack that creates a new administrator account usin...

CVE-2026-97332

The User Private Files WordPress plugin before 2.2.0 does not properly protect its stored private files on multisite installations, where the rewrite rule it relies on to route file requests through its access check is never reached, allowing unauthenticated users to retrieve other users' private...

CVE-2026-17005

The Horizontal scrolling announcements WordPress plugin through 2.6 does not sanitise and escape one of its announcement settings before outputting it into an attribute context on the front end, allowing users granted access to the announcement management page Contributor and above, once permitte...

CVE-2026-104119

The Simple Shopping Cart WordPress plugin before 5.2.6 does not escape some of its settings field values before outputting them on an admin settings page, allowing high-privilege users such as administrators to perform Stored Cross-Site Scripting attacks, which is notably impactful on multisite...

CVE-2026-103354

The Gutenberg Blocks by Kadence Blocks plugin for WordPress (versions up to and including 3.7.11.1 ) is vulnerable to Stored Cross-Site Scripting (XSS) . This flaw is caused by the Improper Neutralization of Input During Web Page Generation . While the technical root cause is not specified in det...

WordPress User Private Files plugin < 2.2.0 - Unauthenticated Private File Disclosure vulnerability

Unauthenticated Private File Disclosure vulnerability discovered by Akshat Parikh SN1PER in WordPress Plugin User Private Files versions 2.2.0...

CVE-2026-97332 User Private Files < 2.2.0 - Unauthenticated Private File Disclosure via .htaccess Rewrite Rule Bypass (Multisite)

The User Private Files WordPress plugin before 2.2.0 does not properly protect its stored private files on multisite installations, where the rewrite rule it relies on to route file requests through its access check is never reached, allowing unauthenticated users to retrieve other users' private...

CVE-2026-97332 User Private Files < 2.2.0 - Unauthenticated Private File Disclosure via .htaccess Rewrite Rule Bypass (Multisite)

The User Private Files WordPress plugin before 2.2.0 does not properly protect its stored private files on multisite installations, where the rewrite rule it relies on to route file requests through its access check is never reached, allowing unauthenticated users to retrieve other users' private...