CVE-2026-19613

The ECS WordPress plugin before 4.3.10 lacks ownership and post-status checks in its dynamic repeater data source, letting contributor-level accounts read custom field values and metadata from private/draft posts they do not own (CVSS 6.5, MEDIUM). No in-the-wild exploitation or exploit code is d...

WordPress theme Divi security vulnerability

WordPress is a blogging platform developed in PHP by the WordPress Foundation. The platform supports personal blog sites on servers running PHP and MySQL.WordPress theme is a theme for WordPress. A security vulnerability exists in WordPress theme Divi version 4.23.1 and earlier versions, which...