CVE-2026-28168 WordPress CubeWP plugin <= 1.1.30 - SQL Injection vulnerability

Subscriber SQL Injection in CubeWP = 1.1.30 versions...

CVE-2026-28161

CVE-2026-28161 affects the WordPress Service Finder Booking plugin

EUVD-2026-57952

Subscriber Broken Access Control in Service Finder Booking = 6.2 versions...

CVE-2026-28159 WordPress Service Finder Booking plugin <= 6.2 - Broken Access Control vulnerability

Subscriber Broken Access Control in Service Finder Booking = 6.2 versions...

CVE-2026-28159 WordPress Service Finder Booking plugin <= 6.2 - Broken Access Control vulnerability

Subscriber Broken Access Control in Service Finder Booking = 6.2 versions...

CVE-2026-28159

Subscriber Broken Access Control in Service Finder Booking = 6.2 versions...

CVE-2026-28159

CVE-2026-28159 affects the WordPress plugin “Service Finder Booking” up to version 6.2. The vulnerability is described as Broken Access Control, with CVSS3.1 base metrics: AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H (medium). Impact: Unauthorized access could affect availability of the service or booking...

EUVD-2026-57950

Subscriber Path Traversal in Do Lasso = 358 versions...

CVE-2026-28157 WordPress Do Lasso plugin <= 358 - Path Traversal vulnerability

Subscriber Path Traversal in Do Lasso = 358 versions...

CVE-2026-28157 WordPress Do Lasso plugin <= 358 - Path Traversal vulnerability

Subscriber Path Traversal in Do Lasso = 358 versions...

CVE-2026-28157

Subscriber Path Traversal in Do Lasso = 358 versions...

CVE-2026-28157

CVE-2026-28157 is a path traversal vulnerability in the WordPress Do Lasso plugin, affecting versions

CVE-2026-28156 WordPress Do Lasso plugin <= 358 - SQL Injection vulnerability

Subscriber SQL Injection in Do Lasso = 358 versions...

EUVD-2026-57949

Subscriber SQL Injection in Do Lasso = 358 versions...

CVE-2026-28156 WordPress Do Lasso plugin <= 358 - SQL Injection vulnerability

Subscriber SQL Injection in Do Lasso = 358 versions...

CVE-2026-28156

Subscriber SQL Injection in Do Lasso = 358 versions...

CVE-2026-28156

CVE-2026-28156 pertains to the WordPress Do Lasso plugin

CVE-2026-27999

Subscriber Broken Access Control in Tourfic = 2.23.1 versions...

EUVD-2026-57940

Subscriber Broken Access Control in Tourfic = 2.23.1 versions...

CVE-2026-27999 WordPress Tourfic plugin <= 2.23.1 - Broken Access Control vulnerability

Subscriber Broken Access Control in Tourfic = 2.23.1 versions...