CVE-2026-49080: Improper Neutralization of Special Elements used in an SQL Command

Unauthenticated SQL Injection in wpDataTables = 7.3.6 versions...

CVE-2026-49079: Improper Neutralization of Special Elements used in an SQL Command

Unauthenticated SQL Injection in JetSearch = 3.5.17 versions...

CVE-2026-49058: Incorrect Privilege Assignment

Unauthenticated Privilege Escalation in LoginPress Pro = 6.2.2 versions...

CVE-2026-48967: Improper Neutralization of Special Elements used in an SQL Command

Subscriber SQL Injection in Geo Mashup = 1.13.19 versions...

CVE-2026-49074: Improper Neutralization of Input During Web Page Generation

Unauthenticated Cross Site Scripting XSS in JetEngine = 3.8.9.1 versions...

CVE-2026-48875: Improper Neutralization of Special Elements used in an SQL Command

Unauthenticated SQL Injection in JetSmartFilters = 3.8.1 versions...

CVE-2026-42629: Authentication Bypass Using an Alternate Path or Channel

Unauthenticated Broken Authentication in PowerPack Pro for Elementor v2.13.0 versions...

CVE-2026-42380: Deserialization of Untrusted Data

Unauthenticated PHP Object Injection in AI Lab 5.4.2 versions...

CVE-2026-41557: Improper Neutralization of Input During Web Page Generation

Unauthenticated Cross Site Scripting XSS in Kapee 1.7.1 versions...

CVE-2026-40765: Improper Neutralization of Input During Web Page Generation

Unauthenticated Cross Site Scripting XSS in collectchat = 2.4.9 versions...

CVE-2026-40768: Authorization Bypass Through User-Controlled Key

Unauthenticated Insecure Direct Object References IDOR in Salon booking system = 10.30.24 versions...

CVE-2026-40760: Deserialization of Untrusted Data

Unauthenticated PHP Object Injection in Behold = 1.5 versions...

CVE-2026-40755: Deserialization of Untrusted Data

Unauthenticated PHP Object Injection in TechLink = 1.3 versions...

CVE-2026-40751: Deserialization of Untrusted Data

Unauthenticated PHP Object Injection in Ashtanga = 1.2 versions...

CVE-2026-40749: Unrestricted Upload of File with Dangerous Type

Subscriber Arbitrary File Upload in Charity Zone = 1.1.1 versions...

CVE-2026-40747: Unrestricted Upload of File with Dangerous Type

Subscriber Arbitrary File Upload in Ecommerce Zone = 0.9.7 versions...

CVE-2026-40746: Unrestricted Upload of File with Dangerous Type

Subscriber Arbitrary File Upload in Restaurant Zone = 0.7.8 versions...

CVE-2026-40739: Deserialization of Untrusted Data

Unauthenticated PHP Object Injection in LuxeDrive = 1.4 versions...

CVE-2026-40736: Deserialization of Untrusted Data

Unauthenticated PHP Object Injection in Laurits = 1.5.1 versions...

CVE-2026-40735: Deserialization of Untrusted Data

Unauthenticated PHP Object Injection in Reina = 2.1 versions...