CVE-2026-86311: Improper Neutralization of Input During Web Page Generation

The Photo Gallery by 10Web – Mobile-Friendly Image Gallery plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Shortcode Attributes in all versions up to, and including, 1.8.44 due to insufficient input sanitization and output escaping. This makes it possible for authenticat...

PT-2026-94138

Name of the Vulnerable Software and Affected Versions The Photo Gallery by 10Web – Mobile-Friendly Image Gallery plugin for WordPress versions prior to 1.8.45 Description Stored Cross-Site Scripting occurs due to insufficient input sanitization and output escaping within the shortcode attributes...

WordPress 7.0.0 < 7.1.1

WordPress versions 7.0.0 7.1.1 are affected by one or more vulnerabilities %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from WordPress Security Advisory wordpress-7-1-1-maintenance-and-security-release. include'compat.inc'; if descripti...

CVE-2026-86709: Improper Authentication

The Pressengine WordPress plugin through 1.0 does not stop its login handler from issuing a session when authentication fails, allowing unauthenticated attackers to log in as any user, including administrators...

CVE-2026-92579 AVideo through 29.0 Broken Access Control via CSRF Exemption Basename Collision

In AVideo through 29.0, the autoCSRFGuard function maintains a hardcoded allowlist of exempt basenames tested without directory context, allowing plugin files matching core filenames to inherit CSRF exemptions. The LoginWordPress plugin file login.json.php inherits an exemption and unconditionall...

WordPress Easy Invoice plugin <= 2.3.8 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by Rahul Yadav in WordPress Plugin Easy Invoice versions = 2.3.8...

WordPress Simple Membership plugin <= 4.8.2 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by Ananda Dhakal Patchstack in WordPress Plugin Simple Membership versions = 4.8.2...

WordPress Cooked plugin <= 1.16.0 - Insecure Direct Object References (IDOR) vulnerability

Insecure Direct Object References IDOR vulnerability discovered by Nixxies in WordPress Plugin Cooked versions = 1.16.0...

WordPress Booking Calendar plugin <= 11.7 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by Ananda Dhakal Patchstack in WordPress Plugin Booking Calendar versions = 11.7...

WordPress User Registration plugin <= 5.2.7 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by asdqgggg in WordPress Plugin User Registration versions = 5.2.7...

WordPress PublishPress Series plugin <= 3.1.3 - Cross Site Request Forgery (CSRF) vulnerability

Cross Site Request Forgery CSRF vulnerability discovered by benzdeus in WordPress Plugin PublishPress Series versions = 3.1.3...

WordPress Xagio SEO plugin <= 7.1.0.43 - Cross Site Request Forgery (CSRF) vulnerability

Cross Site Request Forgery CSRF vulnerability discovered by Matheo Beuve in WordPress Plugin Xagio SEO versions = 7.1.0.43...

WordPress Geo Mashup plugin <= 1.13.21 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by JunHee CHO in WordPress Plugin Geo Mashup versions = 1.13.21...

WordPress WPFunnels plugin <= 3.12.13 - Insecure Direct Object References (IDOR) vulnerability

Insecure Direct Object References IDOR vulnerability discovered by Aditya Gurav in WordPress Plugin WPFunnels versions = 3.12.13...

WordPress BerqWP plugin <= 4.1.15 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by z3r0s in WordPress Plugin BerqWP versions = 4.1.15...

WordPress Multi Uploader for Gravity Forms plugin <= 1.1.9 - Unauthenticated Arbitrary File Upload vulnerability

Unauthenticated Arbitrary File Upload vulnerability discovered by Adam Rayyan Aryasatya in WordPress Plugin Multi Uploader for Gravity Forms versions = 1.1.9...

WordPress Paid Downloads plugin <= 3.15 - Unauthenticated Arbitrary File Upload vulnerability

Unauthenticated Arbitrary File Upload vulnerability discovered by Spy0x7 in WordPress Plugin Paid Downloads versions = 3.15...

WordPress GiveWP plugin 4.16.6-4.16.8.0 - Unauthenticated Account Takeover vulnerability

Unauthenticated Account Takeover vulnerability discovered by Jakub Herman in WordPress Plugin GiveWP versions 4.16.6-4.16.8.0...

WordPress Ni WooCommerce Sales Report plugin < 4.2.0 - Unauthenticated SQLi vulnerability

Unauthenticated SQLi vulnerability discovered by Erwan LR WPScan in WordPress Plugin Ni WooCommerce Sales Report versions 4.2.0...

WordPress Tutor LMS plugin < 4.0.8 - Read-Only API Key Privilege Escalation vulnerability

Read-Only API Key Privilege Escalation vulnerability discovered by Charles Vosburgh in WordPress Plugin Tutor LMS versions 4.0.8...