CVE-2026-65540

Unauthenticated Cross Site Request Forgery CSRF in Popup for CF7 with Sweet Alert = 1.6.5 versions...

CVE-2026-65540 WordPress Popup for CF7 with Sweet Alert plugin <= 1.6.5 - Cross Site Request Forgery (CSRF) vulnerability

Unauthenticated Cross Site Request Forgery CSRF in Popup for CF7 with Sweet Alert = 1.6.5 versions...

CVE-2026-65540 WordPress Popup for CF7 with Sweet Alert plugin <= 1.6.5 - Cross Site Request Forgery (CSRF) vulnerability

Unauthenticated Cross Site Request Forgery CSRF in Popup for CF7 with Sweet Alert = 1.6.5 versions...

CVE-2026-65540

CVE-2026-65540 affects the WordPress plugin “Popup for CF7 with Sweet Alert” (versions &lt;= 1.6.5). The vulnerability is a reported unauthenticated Cross Site Request Forgery (CSRF) weakness in this plugin. The CVSS data indicate: AV:N, AC:L, PR:N, UI:R, S:C, C:L, I:L, A:L, base score 7.1 (HIGH)...

EUVD-2026-48141

Unauthenticated Cross Site Request Forgery CSRF in Popup for CF7 with Sweet Alert = 1.6.5 versions...

CVE-2026-59540 WordPress SMS Alert Order Notifications plugin <= 3.9.6 - Privilege Escalation vulnerability

Unauthenticated Privilege Escalation in SMS Alert Order Notifications = 3.9.6 versions...

CVE-2026-59540 WordPress SMS Alert Order Notifications plugin <= 3.9.6 - Privilege Escalation vulnerability

Unauthenticated Privilege Escalation in SMS Alert Order Notifications = 3.9.6 versions...

EUVD-2026-48193

Unauthenticated Privilege Escalation in SMS Alert Order Notifications = 3.9.6 versions...

CVE-2026-59540

The CVE concerns WordPress plugin SMS Alert Order Notifications, affected in versions

CVE-2026-15015

creationtimestamp| type| source ---|---|--- 2026-07-23 10:30:27+00:00| seen| https://infosec.exchange/users/offseq/statuses/116968824938837459 2026-07-23 10:30:29+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3mrcmzeb6it2i 2026-07-23 13:58:05+00:00| seen|...

WordPress Popup for CF7 with Sweet Alert plugin <= 1.6.5 - Cross Site Request Forgery (CSRF) vulnerability

Cross Site Request Forgery CSRF vulnerability discovered by testoun in WordPress Plugin Popup for CF7 with Sweet Alert versions = 1.6.5...

PT-2026-63954

Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in MultiVendorX WooCommerce Product Stock Alert allows Retrieve Embedded Sensitive Data. This issue affects WooCommerce Product Stock Alert: from n/a through 3.0.6...

CVE-2026-61945: Exposure of Sensitive System Information to an Unauthorized Control Sphere

Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in MultiVendorX WooCommerce Product Stock Alert allows Retrieve Embedded Sensitive Data. This issue affects WooCommerce Product Stock Alert: from n/a through 3.0.6...

CVE-2026-59540: Incorrect Privilege Assignment

Unauthenticated Privilege Escalation in SMS Alert Order Notifications = 3.9.6 versions...

CVE-2026-65540: Cross-Site Request Forgery (CSRF)

Unauthenticated Cross Site Request Forgery CSRF in Popup for CF7 with Sweet Alert = 1.6.5 versions...

PT-2026-63951

Unauthenticated Cross Site Request Forgery CSRF in Popup for CF7 with Sweet Alert = 1.6.5 versions...

CGA-6GPJ-CX7R-432J

Bulletin has no description...

CERTFR-2026-ALE-008

creationtimestamp| type| source ---|---|--- 2026-07-22 15:03:13+00:00| seen| https://social.numerique.gouv.fr/users/certfr/statuses/116964235036563174...

WordPress SMS Alert Order Notifications plugin <= 3.9.6 - Privilege Escalation vulnerability

Privilege Escalation vulnerability discovered by Taylsec in WordPress Plugin SMS Alert Order Notifications versions = 3.9.6...

BELL-CVE-2026-64043

Bulletin has no description...