EUVD-2026-68777

Subscriber SQL Injection in Charitable = 1.8.12.1 versions...

CVE-2026-81280 WordPress Print Barcode Labels for your WooCommerce products/orders plugin <= 4.0.0 - Sensitive Data Exposure vulnerability

Subscriber Sensitive Data Exposure in Print Barcode Labels for your WooCommerce products/orders = 4.0.0 versions...

EUVD-2026-68776

Subscriber Sensitive Data Exposure in Print Barcode Labels for your WooCommerce products/orders = 4.0.0 versions...

CVE-2026-81280 WordPress Print Barcode Labels for your WooCommerce products/orders plugin <= 4.0.0 - Sensitive Data Exposure vulnerability

Subscriber Sensitive Data Exposure in Print Barcode Labels for your WooCommerce products/orders = 4.0.0 versions...

CVE-2026-81280

Print Barcode Labels for your WooCommerce products/orders is a WordPress plugin vulnerable to Sensitive Data Exposure in versions 4.0.0 and below . The vulnerability requires Subscriber-level privileges (low) and can be exploited over the network with low complexity and no user interaction, resul...

WordPress Support Genix plugin <= 1.4.52 - Authenticated (Subscriber+) Authentication Bypass to Administrator Account Takeover via 'p' Parameter Forged Guest Token vulnerability

Authenticated Subscriber+ Authentication Bypass to Administrator Account Takeover via 'p' Parameter Forged Guest Token vulnerability discovered by Supakiad S. m3ez - E-CQURITY Thailand in WordPress Plugin Support Genix versions = 1.4.52...

WordPress Frontend Admin by DynamiApps plugin < 3.29.11 - Subscriber+ Arbitrary Membership Plan Deletion vulnerability

Subscriber+ Arbitrary Membership Plan Deletion vulnerability discovered by Sai Praneeth Koti in WordPress Plugin Frontend Admin by DynamiApps versions 3.29.11...

WordPress MStore API plugin < 4.21.1 - Subscriber+ Arbitrary Order Payment Bypass vulnerability

Subscriber+ Arbitrary Order Payment Bypass vulnerability discovered by Erwan LR WPScan in WordPress Plugin MStore API versions 4.21.1...

WordPress SureFeedback Client Site plugin has a vulnerability related to information leakage

The WordPress SureFeedback Client Site plugin is a plugin that allows customers to leave visual feedback directly on their WordPress web pages. The WordPress SureFeedback Client Site plugin has a vulnerability related to information leakage, which stems from the exposure of sensitive data...

CVE-2026-81762: Missing Authorization

Subscriber Broken Access Control in Booking and Rental Manager = 2.7.6 versions...

PT-2026-84002

Subscriber SQL Injection in Charitable = 1.8.12.1 versions...

PT-2026-84010

Subscriber Broken Access Control in OwnerRez API = 1.2.6 versions...

CVE-2026-81287: Improper Neutralization of Special Elements used in an SQL Command

Subscriber SQL Injection in Charitable = 1.8.12.1 versions...

PT-2026-84001

Name of the Vulnerable Software and Affected Versions Print Barcode Labels for your WooCommerce products/orders versions prior to 4.0.1 Description This issue involves the exposure of sensitive subscriber data within the plugin. Recommendations Update to a version newer than 4.0.0...

CVE-2026-81778: Improper Neutralization of Input During Web Page Generation

Subscriber Cross Site Scripting XSS in Kalles Addons = 1.0.6 versions...

CVE-2026-81758: Missing Authorization

Subscriber Broken Access Control in OwnerRez API = 1.2.6 versions...

PT-2026-84016

Name of the Vulnerable Software and Affected Versions Kalles Addons versions prior to 1.0.7 Description Cross Site Scripting XSS exists in the subscriber functionality, allowing an attacker to execute malicious scripts in the browser of other users. Recommendations Update Kalles Addons to version...

PT-2026-84011

Name of the Vulnerable Software and Affected Versions Booking and Rental Manager versions prior to 2.7.7 Description Broken access control allows users with the subscriber role to perform unauthorized actions. Recommendations Update to a version newer than 2.7.6...

PT-2026-84007

Subscriber Privilege Escalation in Fluent Forms Pro Add On Pack = 6.2.12 versions...

CVE-2026-81280: Insertion of Sensitive Information Into Sent Data

Subscriber Sensitive Data Exposure in Print Barcode Labels for your WooCommerce products/orders = 4.0.0 versions...