WordPress rtMedia for WordPress, BuddyPress and bbPress plugin < 4.7.12 - Subscriber+ Arbitrary Activity Privacy Modification vulnerability

Subscriber+ Arbitrary Activity Privacy Modification vulnerability discovered by JunHee CHO in WordPress Plugin rtMedia for WordPress, BuddyPress and bbPress versions 4.7.12...

WordPress ProfilePress plugin < 4.16.17 - Subscriber+ Subscription Cancellation via IDOR vulnerability

Subscriber+ Subscription Cancellation via IDOR vulnerability discovered by Haitam Lazaar in WordPress Plugin ProfilePress versions 4.16.17...

CVE-2026-18960 Block User Account < 2.0.1 - Subscriber+ Account Block Bypass via Application Passwords

The Block User Account WordPress plugin before 2.0.1 does not enforce its account block on every authentication path, allowing a blocked user who holds an application password created before the block to retain their full role-level read and write access through the REST API...

WordPress Football Pool plugin <= 2.13.4 - Authenticated (Subscriber+) Reflected Cross-Site Scripting vulnerability

Authenticated Subscriber+ Reflected Cross-Site Scripting vulnerability discovered by whitesector in WordPress Plugin Football Pool versions = 2.13.4...

WordPress Academy LMS plugin <= 3.8.2 - Subscriber+ Sensitive Information Disclosure vulnerability

Subscriber+ Sensitive Information Disclosure vulnerability discovered by Stefan Spasic in WordPress Plugin Academy LMS versions = 3.8.2...

CVE-2026-16035

The miniOrange 2FA WordPress plugin versions prior to 6.2.7 is vulnerable to an Arbitrary-Recipient OTP Send flaw. The plugin fails to restrict who can trigger second-factor configuration OTP emails or bind the recipient address to the enrolling user. This allows a low-privileged user to send one...

WordPress ProfileGrid plugin < 5.9.9.8 - Subscriber+ Arbitrary Notification Deletion vulnerability

Subscriber+ Arbitrary Notification Deletion vulnerability discovered by Meher Sudhakar Abbireddi in WordPress Plugin ProfileGrid versions 5.9.9.8...

WordPress FluentBoards plugin < 1.95.3 - Subscriber+ Cross-Board Task Disclosure vulnerability

Subscriber+ Cross-Board Task Disclosure vulnerability discovered by Diogo Pinto in WordPress Plugin FluentBoards versions 1.95.3...

WordPress BuddyPress plugin < 14.5.0 - Subscriber+ Private Messages Disclosure vulnerability

Subscriber+ Private Messages Disclosure vulnerability discovered by Mustafa Ahmed in WordPress Plugin BuddyPress versions 14.5.0...

WordPress JS Help Desk plugin < 3.1.4 - Subscriber+ Ticket Reply Modification vulnerability

Subscriber+ Ticket Reply Modification vulnerability discovered by Yaswanth Reddy Sunkara in WordPress Plugin JS Help Desk versions 3.1.4...

WordPress Paid Membership Subscriptions plugin < 3.0.7 - Subscriber+ Payment Data Disclosure vulnerability

Subscriber+ Payment Data Disclosure vulnerability discovered by WEI HSIANG WANG in WordPress Plugin Paid Member Subscriptions versions 3.0.7...

WordPress LifterLMS plugin < 10.0.10 - Subscriber+ Sensitive Information Disclosure vulnerability

Subscriber+ Sensitive Information Disclosure vulnerability discovered by Daniel Púa - devploit in WordPress Plugin LifterLMS versions 10.0.10...

WordPress Easy Appointments plugin <= 3.12.26 - Subscriber+ Sensitive Information Disclosure vulnerability

Subscriber+ Sensitive Information Disclosure vulnerability discovered by Phyo Ko Ko in WordPress Plugin Easy Appointments versions = 3.12.26...

WordPress FluentCart A New Era of eCommerce plugin < 1.4.0 - Subscriber+ Subscription Payment-Method Tampering vulnerability

Subscriber+ Subscription Payment-Method Tampering vulnerability discovered by Sanjorn Keeratirungsan in WordPress Plugin FluentCart versions 1.4.0...

WordPress WP Foodbakery plugin <= 4.9 - Authenticated (Subscriber+) Arbitrary File Deletion vulnerability

Authenticated Subscriber+ Arbitrary File Deletion vulnerability discovered by Rafie Muhammad - Awesome Motive, Inc. in WordPress Plugin FoodBakery versions = 4.9...

WordPress Import and export users and customers plugin <= 2.4.0 - Missing Authorization to Authenticated (Subscriber+) Sensitive Information Exposure vulnerability

Missing Authorization to Authenticated Subscriber+ Sensitive Information Exposure vulnerability discovered by Tiago Ventura perses in WordPress Plugin Import and export users and customers versions = 2.4.0...

WordPress Taskbuilder – Project Management & Task Management Tool With Kanban Board plugin <= 5.0.8 - Authenticated (Subscriber+) SQL Injection vulnerability

Authenticated Subscriber+ SQL Injection vulnerability discovered by d.v4ns3c in WordPress Plugin Taskbuilder versions = 5.0.8...

WordPress WP Maps plugin < 4.9.3 - Subscriber+ Local File Inclusion vulnerability

Subscriber+ Local File Inclusion vulnerability discovered by Mustafa Ahmed in WordPress Plugin WP Maps versions 4.9.3...

WordPress WP Mail Gateway plugin <= 1.8 - Missing Authorization to Authenticated (Subscriber+) SMTP Configuration Modification vulnerability

Missing Authorization to Authenticated Subscriber+ SMTP Configuration Modification vulnerability discovered by Nabil Irawan - Heroes Cyber Security in WordPress Plugin WP Mail Gateway versions = 1.8...

WordPress Gravity SMTP plugin <= 2.1.4 - Missing Authorization to Authenticated (Subscriber+) Plugin Uninstall vulnerability

Missing Authorization to Authenticated Subscriber+ Plugin Uninstall vulnerability discovered by Osvaldo Noe Gonzalez Del Rio Os - krei.dev | ogbuilders.io in WordPress Plugin Gravity SMTP versions = 2.1.4...