EUVD-2026-66990

Subscriber SQL Injection in ACPT Pro - Custom Post Types Plugin for WordPress = 2.0.63 versions...

CVE-2026-32564 WordPress ACPT (Pro) - Custom Post Types Plugin for WordPress plugin <= 2.0.63 - SQL Injection vulnerability

Subscriber SQL Injection in ACPT Pro - Custom Post Types Plugin for WordPress = 2.0.63 versions...

CVE-2026-32479 WordPress Visitor Traffic Real Time Statistics Pro plugin <= 11.17 - SQL Injection vulnerability

Unauthenticated SQL Injection in Visitor Traffic Real Time Statistics Pro = 11.17 versions...

EUVD-2026-66988

Unauthenticated SQL Injection in Visitor Traffic Real Time Statistics Pro = 11.17 versions...

PT-2026-82469

Editor Broken Access Control in FluentPlayer Pro = 1.3.2 versions...

PT-2026-82457

Editor Arbitrary File Deletion in Fluent Boards Pro = 2.0.11 versions...

PT-2026-82442

Unauthenticated SQL Injection in Visitor Traffic Real Time Statistics Pro = 11.17 versions...

PT-2026-82444

Subscriber SQL Injection in ACPT Pro - Custom Post Types Plugin for WordPress = 2.0.63 versions...

PT-2026-82458

Editor PHP Object Injection in Fluent Boards Pro = 2.0.11 versions...

PT-2026-82445

Name of the Vulnerable Software and Affected Versions ACPT Pro - Custom Post Types Plugin for WordPress versions prior to 2.0.64 Description An unauthenticated privilege escalation issue allows an attacker to create a WordPress administrator account. This flaw has been exploited in the wild via t...

PT-2026-82455

Subscriber Cross Site Scripting XSS in Fluent Boards Pro = 2.0.11 versions...

PT-2026-82454

Editor Privilege Escalation in FluentCRM Pro = 3.1.12 versions...

PT-2026-82456

Editor Arbitrary File Upload in Fluent Boards Pro = 2.0.11 versions...

PT-2026-82470

Unauthenticated Cross Site Request Forgery CSRF in FluentBooking Pro = 2.2.4 versions...

CVE-2025-61479

An issue in Vanderbilt Industries, Acre Security SPC5300.000 Main Board v.3.14.1 allows a physically proximate attacker to cause a denial of service via the SPC Connect Pro software accepts replayed application-layer payloads injected into an active TCP session...

WordPress FluentBooking Pro plugin <= 2.2.4 - Cross Site Request Forgery (CSRF) vulnerability

Cross Site Request Forgery CSRF vulnerability discovered by Ananda Dhakal Patchstack in WordPress Plugin FluentBooking Pro versions = 2.2.4...

WordPress FluentPlayer Pro plugin <= 1.3.2 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by Ananda Dhakal Patchstack in WordPress Plugin FluentPlayer Pro versions = 1.3.2...

WordPress Fluent Boards Pro plugin <= 2.0.11 - PHP Object Injection vulnerability

PHP Object Injection vulnerability discovered by Ananda Dhakal Patchstack in WordPress Plugin Fluent Boards Pro versions = 2.0.11...

WordPress Fluent Boards Pro plugin <= 2.0.11 - Arbitrary File Deletion vulnerability

Arbitrary File Deletion vulnerability discovered by Ananda Dhakal Patchstack in WordPress Plugin Fluent Boards Pro versions = 2.0.11...

WordPress Fluent Boards Pro plugin <= 2.0.11 - Arbitrary File Upload vulnerability

Arbitrary File Upload vulnerability discovered by Ananda Dhakal Patchstack in WordPress Plugin Fluent Boards Pro versions = 2.0.11...