CVE-2026-66630

SQL Injection vulnerability in the WordPress PublishPress Series plugin (versions ≤ 3.1.3 ), discovered by Ananda Dhakal via Patchstack . The flaw requires administrator-level privileges but changes scope, allowing an authenticated admin to inject SQL and achieve high confidentiality impact and l...

CVE-2026-66631 WordPress MC Woocommerce Wishlist plugin <= 1.9.21 - SQL Injection vulnerability

Administrator SQL Injection in MC Woocommerce Wishlist = 1.9.21 versions...

CVE-2026-57628

Administrator SQL Injection in WP All Import = 4.0.1 versions...