CVE-2026-41555

The Newsletter Subscription Form – User Subscriptions Form, Capture Email WordPress plugin (versions

EUVD-2026-93044

Unauthenticated Cross Site Scripting XSS in CF7 Views Complete Entry Management for Contact Form 7 = 3.2.6 versions...

CVE-2026-41555 WordPress Newsletter Subscription Form – User Subscriptions Form, Capture Email plugin <= 1.5.9 - SQL Injection vulnerability

Unauthenticated SQL Injection in Newsletter Subscription Form – User Subscriptions Form, Capture Email = 1.5.9 versions...

EUVD-2026-93045

Unauthenticated SQL Injection in Newsletter Subscription Form – User Subscriptions Form, Capture Email = 1.5.9 versions...

CVE-2026-40807

The CF7 Views – Complete Entry Management for Contact Form 7 plugin for WordPress, version 3.2.6 and below , is vulnerable to an unauthenticated Cross Site Scripting (XSS) vulnerability. The issue is rooted in the improper neutralization of input during web page generation (CWE-79). Successful ex...

EUVD-2026-93254

Unauthenticated Cross Site Scripting XSS in Contact Form to DB by BestWebSoft = 1.7.6 versions...

CVE-2026-39745 WordPress Contact Form to DB by BestWebSoft plugin <= 1.7.6 - Cross Site Scripting (XSS) vulnerability

Unauthenticated Cross Site Scripting XSS in Contact Form to DB by BestWebSoft = 1.7.6 versions...

CVE-2026-39745

The Contact Form to DB by BestWebSoft plugin for WordPress, version 1.7.6 and below , is vulnerable to an unauthenticated Cross Site Scripting (XSS) vulnerability. This issue stems from the improper neutralization of input during web page generation (CWE-79). The vulnerability allows an attacker ...

CVE-2026-39745 WordPress Contact Form to DB by BestWebSoft plugin <= 1.7.6 - Cross Site Scripting (XSS) vulnerability

Unauthenticated Cross Site Scripting XSS in Contact Form to DB by BestWebSoft = 1.7.6 versions...

PT-2026-106466

Unauthenticated Cross Site Scripting XSS in CF7 Views Complete Entry Management for Contact Form 7 = 3.2.6 versions...

CVE-2026-105857: Improper Control of Generation of Code

Payload is a free and open source headless content management system. In @payloadcms/plugin-form-builder versions before 3.90.0 and canary versions before 4.0.0-canary.34, an attacker can craft a form submission that executes code remotely on the server. This issue is fixed in versions 3.90.0 and...

PT-2026-106790

Name of the Vulnerable Software and Affected Versions @payloadcms/plugin-form-builder versions prior to 3.90.0 @payloadcms/plugin-form-builder versions prior to 4.0.0-canary.34 Description An issue exists where the plugin mishandles crafted form submission payloads, allowing an unauthenticated...

Linux Distros Unpatched Vulnerability : CVE-2026-59788

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The email media type OAuth form passes the Authorization endpoint value to window.open without validating the URL scheme, so a javascript: URL is executed in th...

CVE-2026-39745: Improper Neutralization of Input During Web Page Generation

Unauthenticated Cross Site Scripting XSS in Contact Form to DB by BestWebSoft = 1.7.6 versions...

CVE-2026-41555: Improper Neutralization of Special Elements used in an SQL Command

Unauthenticated SQL Injection in Newsletter Subscription Form – User Subscriptions Form, Capture Email = 1.5.9 versions...

PT-2026-106382

Unauthenticated Cross Site Scripting XSS in Form Block = 1.8.1 versions...

PT-2026-106467

Unauthenticated SQL Injection in Newsletter Subscription Form – User Subscriptions Form, Capture Email = 1.5.9 versions...

CVE-2026-40807: Improper Neutralization of Input During Web Page Generation

Unauthenticated Cross Site Scripting XSS in CF7 Views – Complete Entry Management for Contact Form 7 = 3.2.6 versions...

CVE-2026-104814: Improper Neutralization of Input During Web Page Generation

Unauthenticated Cross Site Scripting XSS in Form Block = 1.8.1 versions...

PT-2026-106419

Name of the Vulnerable Software and Affected Versions Contact Form to DB versions prior to 1.7.7 Description An unauthenticated Cross Site Scripting XSS issue exists, which allows an attacker to execute malicious scripts in the browser of a user by injecting code into the contact form...