CVE-2026-66447

Unauthenticated SQL Injection in WordPress File Upload = 5.1.7 versions...

CVE-2026-66457

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Pixelite Events Manager events-manager allows Reflected XSS.This issue affects Events Manager: from n/a through 7.4.2...

CVE-2026-65578

Unauthenticated PHP Object Injection in Agora = 1.9 versions...

CVE-2026-65574

Unauthenticated PHP Object Injection in Abogado = 1.18 versions...

CVE-2026-28178

Contributor Cross Site Scripting XSS in Powerkit = 3.1.0 versions...

CVE-2026-34191 Apache Portable Runtime Utility: SQL Injection in apr_dbd_oracle

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Apache Portable Runtime Utility via aprdbdoracle provider. This issue affects Apache Portable Runtime Utility: from 1.6.0 through 1.6.3...

CVE-2026-34501

Heap-based Buffer Overflow vulnerability in Apache Portable Runtime Utility redis client. This issue affects Apache Portable Runtime Utility: from 1.6.0 through 1.6.3. Users are recommended to upgrade to version 1.6.4, which fixes the issue...

CVE-2026-66706

CVE-2026-66706 affects the WordPress plugin “Subscribe to Comments” (versions

CVE-2026-66706

Author Cross Site Scripting XSS in Subscribe to Comments = 2.3.1 versions...

CVE-2026-66705 WordPress Facebook for WordPress plugin <= 5.2.1 - Cross Site Scripting (XSS) vulnerability

Unauthenticated Cross Site Scripting XSS in Facebook for WordPress = 5.2.1 versions...

CVE-2026-66705

Unauthenticated Cross Site Scripting XSS in Facebook for WordPress = 5.2.1 versions...

CVE-2026-66681 WordPress theme My Login plugin <= 7.1.14 - Cross Site Request Forgery (CSRF) vulnerability

Unauthenticated Cross Site Request Forgery CSRF in Theme My Login = 7.1.14 versions...

EUVD-2026-53893

Unauthenticated Cross Site Request Forgery CSRF in Theme My Login = 7.1.14 versions...

CVE-2026-66681

Unauthenticated Cross Site Request Forgery CSRF in Theme My Login = 7.1.14 versions...

CVE-2026-66678

CVE-2026-66678 concerns a Broken Access Control issue in the WordPress plugin Advanced Custom Fields: Font Awesome Field , affecting versions up to and including 6.1.1 . The connected sources consistently describe the vulnerability class and affected plugin/version but do not provide technical de...

CVE-2026-66457

The Pixelite Events Manager plugin for WordPress (versions n/a through 7.4.2 ) is vulnerable to Reflected Cross-site Scripting (XSS) due to the improper neutralization of input during web page generation. This vulnerability allows an unauthenticated attacker to inject malicious scripts into web p...

EUVD-2026-53886

Unauthenticated Cross Site Scripting XSS in Events Manager = 7.4.1 versions...

CVE-2026-66447

Unauthenticated SQL Injection in WordPress File Upload = 5.1.7 versions...

CVE-2026-65578

Unauthenticated PHP Object Injection in Agora = 1.9 versions...

CVE-2026-65553 WordPress Spider Analyser – WordPress搜索引擎蜘蛛分析插件 plugin <= 2.1.3 - Remote Code Execution (RCE) vulnerability

Unauthenticated Remote Code Execution RCE in Spider Analyser WordPress搜索引擎蜘蛛分析插件 = 2.1.3 versions...