WordPress Deema Payment Gateway plugin <= 1.1.2 - Unauthenticated Payment Confirmation Forgery vulnerability

Unauthenticated Payment Confirmation Forgery vulnerability discovered by Enrico Marcolini - Claudio Marchesini - Dottor Marc in WordPress Plugin Deema Payment Gateway versions = 1.1.2...

CVE-2026-41559

Unauthenticated Sensitive Data Exposure in SafeSnap – Verified WordPress Backup & Restore = 2.1.2 versions...

CVE-2026-39775

Subscriber Privilege Escalation in JobZilla - Job Board WordPress Theme = 2.2 versions...

CVE-2026-39752

Contributor Arbitrary File Deletion in Jobs for WordPress = 2.8.2 versions...

CVE-2026-32579

Unauthenticated Arbitrary File Upload in Kognetiks Chatbot for WordPress = 2.4.9 versions...

CVE-2026-105059

Missing Authorization vulnerability in royalnavneet Delete All Comments of wordpress delete-all-comments-of-website allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Delete All Comments of wordpress: from n/a through 7.1...

CVE-2026-105070

The WordPress Salon booking system plugin versions

CVE-2026-105059

The Delete All Comments of wordpress plugin for WordPress versions

CVE-2026-105059 WordPress Delete All Comments of wordpress plugin <= 7.1 - Broken Access Control vulnerability

Missing Authorization vulnerability in royalnavneet Delete All Comments of wordpress delete-all-comments-of-website allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Delete All Comments of wordpress: from n/a through 7.1...

CVE-2026-105059 WordPress Delete All Comments of wordpress plugin <= 7.1 - Broken Access Control vulnerability

Missing Authorization vulnerability in royalnavneet Delete All Comments of wordpress delete-all-comments-of-website allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Delete All Comments of wordpress: from n/a through 7.1...

EUVD-2026-93085

Subscriber Broken Access Control in Delete All Comments of wordpress = 7.1 versions...

CVE-2026-104814

The Form Block WordPress plugin in versions

CVE-2026-104814 WordPress Form Block plugin <= 1.8.1 - Cross Site Scripting (XSS) vulnerability

Unauthenticated Cross Site Scripting XSS in Form Block = 1.8.1 versions...

CVE-2026-104757

The WordPress Import and export users and customers plugin (versions

CVE-2026-104672 WordPress GiveWP plugin <= 4.17.0 - Cross Site Scripting (XSS) vulnerability

Unauthenticated Cross Site Scripting XSS in GiveWP = 4.17.0 versions...

CVE-2026-104670 WordPress LearnPress plugin <= 4.4.9 - Cross Site Scripting (XSS) vulnerability

Unauthenticated Cross Site Scripting XSS in LearnPress = 4.4.9 versions...

CVE-2026-104406

The WordPress picu plugin (versions

CVE-2026-104406 WordPress picu plugin <= 3.10.1 - Broken Access Control vulnerability

Unauthenticated Broken Access Control in picu = 3.10.1 versions...

CVE-2026-104405 WordPress GiveWP plugin <= 4.17.0 - Privilege Escalation vulnerability

Unauthenticated Privilege Escalation in GiveWP = 4.17.0 versions...

CVE-2026-104406 WordPress picu plugin <= 3.10.1 - Broken Access Control vulnerability

Unauthenticated Broken Access Control in picu = 3.10.1 versions...