EUVD-2024-55628

Subscriber Arbitrary File Upload in Grip = 1.0.9 versions...

EUVD-2025-210222

Subscriber Privilege Escalation in Sonaar = 4.27.4 versions...

EUVD-2025-210224

Subscriber Arbitrary File Upload in PT Luxa Addons = 1.2.2 versions...

CVE-2026-54804

Subscriber Broken Authentication in Melhor Envio = 2.16.3 versions...

CVE-2026-54805

Subscriber Privilege Escalation in Falang multilanguage = 1.4.2 versions...

CVE-2026-54196

Subscriber Privilege Escalation in JetFormBuilder = 3.6.1 versions...

CVE-2026-52698

Subscriber Sensitive Data Exposure in PushEngage – Web Push Notifications, eCommerce Automation & Chat Widget = 4.2.3 versions...

CVE-2026-54185

Subscriber SQL Injection in Cornerstone 7.8.8 versions...

CVE-2026-49113

Subscriber Arbitrary Code Execution in Cornerstone 7.8.8 versions...

CVE-2026-48967

Subscriber SQL Injection in Geo Mashup = 1.13.19 versions...

CVE-2026-45436

Subscriber Broken Access Control in WPBakery Page Builder = 8.7.2 versions...

CVE-2026-40747

Subscriber Arbitrary File Upload in Ecommerce Zone = 0.9.7 versions...

CVE-2026-40749

Subscriber Arbitrary File Upload in Charity Zone = 1.1.1 versions...

CVE-2026-40746

Subscriber Arbitrary File Upload in Restaurant Zone = 0.7.8 versions...

CVE-2026-40748

Subscriber Arbitrary File Upload in Kids Gift Shop = 0.5.4 versions...

CVE-2026-39589

Subscriber Arbitrary File Upload in Webenvo = 0.0.6 versions...

CVE-2026-39546

Subscriber Privilege Escalation in MultiLoca = 4.2.15 versions...

CVE-2026-39433

Subscriber Arbitrary Content Deletion in WPAMS 49.5.3 versions...

CVE-2026-25446

Subscriber Arbitrary File Upload in WishList Member X = 3.29.0 versions...

CVE-2026-24575

Subscriber Broken Access Control in WishList Member X = 3.29.0 versions...