WordPress affiliate-toolkit plugin <= 3.8.8 - Authenticated (Administrator+) SQL Injection via 'orderby' Parameter vulnerability

Authenticated Administrator+ SQL Injection via 'orderby' Parameter vulnerability discovered by Wordfence PRISM - Wordfence in WordPress Plugin affiliate-toolkit versions = 3.8.8...

GHSA-38GX-CFQF-F652 vulnerabilities

Vulnerabilities for packages: wazuh-dashboard-fips, awx, lerna, librechat, nextcloud-server, opensearch-dashboards-fips, redisinsight, prism, langfuse-fips, kubeflow-centraldashboard, semaphore, wazuh-dashboard, opensearch-dashboards, langfuse, jitsucom-jitsu, kibana...

CVE-2026-67314 vulnerabilities

Vulnerabilities for packages: wazuh-dashboard-fips, awx, lerna, librechat, nextcloud-server, gitlab-rails-ce-fips, opensearch-dashboards-fips, redisinsight, prism, langfuse-fips, kubeflow-centraldashboard, semaphore, gitlab-rails-ce, wazuh-dashboard, opensearch-dashboards, langfuse, jitsucom-jits...

GHSA-38GX-CFQF-F652 vulnerabilities

Vulnerabilities for packages: langfuse, nextcloud-server, jitsucom-jitsu, opensearch-dashboards, kubeflow-centraldashboard, prism, lerna...

CVE-2026-67314 vulnerabilities

Vulnerabilities for packages: langfuse, nextcloud-server, jitsucom-jitsu, opensearch-dashboards, kubeflow-centraldashboard, prism, lerna...

WordPress Subscriptions for WooCommerce plugin <= 2.0.0 - Missing Authorization to Authenticated (Shop Manager+) Arbitrary Plugin Installation vulnerability

Missing Authorization to Authenticated Shop Manager+ Arbitrary Plugin Installation vulnerability discovered by Wordfence PRISM in WordPress Plugin Subscriptions for WooCommerce versions = 2.0.0...

WordPress WPBot – AI ChatBot for Live Support, Lead Generation, AI Services plugin <= 8.5.9 - Missing Authorization to Unauthenticated Email Relay vulnerability

Missing Authorization to Unauthenticated Email Relay vulnerability discovered by Wordfence PRISM in WordPress Plugin ChatBot versions = 8.5.9...

WordPress WP Encryption – Lifetime Free SSL Cert & HTTPS, Force SSL / HTTPS Redirect, SSL Security plugin <= 7.8.6.6 - Authenticated (Administrator+) Arbitrary File Write vulnerability

Authenticated Administrator+ Arbitrary File Write vulnerability discovered by Wordfence PRISM - Wordfence in WordPress Plugin WP Encryption – One Click Free SSL Certificate & SSL / HTTPS Redirect to fix Insecure Content versions = 7.8.6.6...

WordPress Grid/List View for WooCommerce plugin <= 3.0.9 - Authenticated (Contributor+) Stored Cross-Site Scripting vulnerability

Authenticated Contributor+ Stored Cross-Site Scripting vulnerability discovered by Wordfence PRISM - Wordfence in WordPress Plugin Grid List View for WooCommerce versions = 3.0.9...

GHSA-52CP-R559-CP3M vulnerabilities

Vulnerabilities for packages: argo-workflows, eslint, prism, opensearch-dashboards, sqlpad, code-server, kubeflow-centraldashboard, pulumi, ts-patch, kubeflow-katib, lerna, vitess...

CVE-2026-59869 vulnerabilities

Vulnerabilities for packages: argo-workflows, eslint, prism, opensearch-dashboards, sqlpad, code-server, kubeflow-centraldashboard, pulumi, ts-patch, kubeflow-katib, lerna, vitess...

WordPress Booking Package plugin <= 1.7.20 - Unauthenticated SQL Injection vulnerability

Unauthenticated SQL Injection vulnerability discovered by PRISM in WordPress Plugin Booking Package versions = 1.7.20...

WordPress Themify Builder plugin <= 7.7.6 - Authenticated (Contributor+) Stored Cross-Site Scripting vulnerability

Authenticated Contributor+ Stored Cross-Site Scripting vulnerability discovered by PRISM in WordPress Plugin Themify Builder versions = 7.7.6...

WordPress Themify Builder plugin <= 7.7.6 - Authenticated (Contributor+) Stored Cross-Site Scripting vulnerability

Authenticated Contributor+ Stored Cross-Site Scripting vulnerability discovered by PRISM in WordPress Plugin Themify Builder versions = 7.7.6...

WordPress KiviCare plugin <= 4.5.0 - SQL Injection vulnerability

SQL Injection vulnerability discovered by PRISM - Wordfence in WordPress Plugin KiviCare versions = 4.5.0...

WordPress Mail Mint – Email Marketing, Newsletter, Email Automation & WooCommerce Emails plugin <= 1.24.1 - Authenticated (Administrator+) SQL Injection vulnerability

Authenticated Administrator+ SQL Injection vulnerability discovered by PRISM in WordPress Plugin Mail Mint versions = 1.24.1...

WordPress JoomSport – for Sports: Team & League, Football, Hockey & more plugin <= 5.7.9 - Authenticated (Contributor+) SQL Injection vulnerability

Authenticated Contributor+ SQL Injection vulnerability discovered by PRISM in WordPress Plugin JoomSport versions = 5.7.9...

WordPress Cookie Banner for GDPR / CCPA – WPLP Cookie Consent plugin <= 4.3.6 - Authenticated (Administrator+) SQL Injection vulnerability

Authenticated Administrator+ SQL Injection vulnerability discovered by PRISM in WordPress Plugin WP Cookie Notice for GDPR, CCPA & ePrivacy Consent versions = 4.3.6...

WordPress Cookie Banner for GDPR / CCPA – WPLP Cookie Consent plugin <= 4.3.6 - Missing Authorization to Authenticated (Subscriber+) Scan Schedule Modification vulnerability

Missing Authorization to Authenticated Subscriber+ Scan Schedule Modification vulnerability discovered by PRISM in WordPress Plugin WP Cookie Notice for GDPR, CCPA & ePrivacy Consent versions = 4.3.6...

WordPress BetterDocs – AI Documentation, Knowledge Base, Docs, Wikis, FAQ with Chatbot plugin <= 4.6.0 - Authenticated (Custom+) SQL Injection vulnerability

Authenticated Custom+ SQL Injection vulnerability discovered by PRISM in WordPress Plugin BetterDocs versions = 4.6.0...