CVE-2026-66601: Improper Neutralization of Input During Web Page Generation

Subscriber Cross Site Scripting XSS in Media LIbrary Assistant = 3.39 versions...

PT-2026-78978

Name of the Vulnerable Software and Affected Versions Leyka versions prior to 3.32.4 Description Broken authentication exists for subscribers, allowing potential unauthorized access to accounts. Recommendations Update to a version newer than 3.32.3...

PT-2026-78986

Subscriber SQL Injection in WP w3all phpBB = 3.0.5 versions...

PT-2026-78958

Subscriber SQL Injection in WordPress Persistent Login = 3.1.0 versions...

CVE-2026-66594: Improper Neutralization of Special Elements used in an SQL Command

Subscriber SQL Injection in WordPress Persistent Login = 3.1.0 versions...

CVE-2026-73992: Improper Control of Generation of Code

Subscriber Remote Code Execution RCE in Query Wrangler = 1.5.57 versions...

PT-2026-78984

Subscriber Remote Code Execution RCE in Query Wrangler = 1.5.57 versions...

PT-2026-78983

Subscriber Cross Site Scripting XSS in WP BASE Booking = 6.3.2 versions...

CVE-2026-74018: Unrestricted Upload of File with Dangerous Type

Subscriber Arbitrary File Upload in Warehouse Cargo = 2.6.9 versions...

PT-2026-78990

Name of the Vulnerable Software and Affected Versions Smart Cleaning versions prior to 4.8.7 Description An arbitrary file upload issue exists that allows users with subscriber privileges to upload unauthorized files to the system. Recommendations Update to a version newer than 4.8.6...

PT-2026-78989

Name of the Vulnerable Software and Affected Versions IT Residence versions prior to 3.2.2 Description An arbitrary file upload issue exists that allows a subscriber to upload unauthorized files to the system. Recommendations Update to a version newer than 3.2.1...

CVE-2026-66668

Subscriber SQL Injection in Community by PeepSo = 9.0.5.2 versions...

CVE-2026-32552

Subscriber SQL Injection in YITH WooCommerce Membership Premium = 2.33.0 versions...

EUVD-2026-62376

Subscriber SQL Injection in Community by PeepSo = 9.0.5.2 versions...

CVE-2026-66668 WordPress Community by PeepSo plugin <= 9.0.5.2 - SQL Injection vulnerability

Subscriber SQL Injection in Community by PeepSo = 9.0.5.2 versions...

CVE-2026-66668 WordPress Community by PeepSo plugin <= 9.0.5.2 - SQL Injection vulnerability

Subscriber SQL Injection in Community by PeepSo = 9.0.5.2 versions...

CVE-2026-66668

CVE-2026-66668 is a Subscriber SQL Injection vulnerability in the Community by PeepSo WordPress plugin, affecting versions ≤ 9.0.5.2 . The vulnerability was discovered by Yukusawa18 and reported via Patchstack. The CVSS 3.1 base score is 8.5 (HIGH) , with a network attack vector, low complexity, ...

EUVD-2026-62372

Subscriber SQL Injection in YITH WooCommerce Membership Premium = 2.33.0 versions...

CVE-2026-32552 WordPress YITH WooCommerce Membership Premium plugin <= 2.33.0 - SQL Injection vulnerability

Subscriber SQL Injection in YITH WooCommerce Membership Premium = 2.33.0 versions...

CVE-2026-32552

A SQL Injection vulnerability exists in the YITH WooCommerce Membership Premium WordPress plugin, affecting versions 2.33.0 and earlier . The flaw is in the Subscriber functionality and was discovered by dutafi . The CVSS 3.1 score is 8.5 (HIGH) , with a network attack vector, low complexity, and...