PT-2026-71519

Subscriber Privilege Escalation in Service Finder Booking = 6.2 versions...

PT-2026-71546

Subscriber Arbitrary File Download in AI Hub = 1.3.10 versions...

CVE-2026-28159: Missing Authorization

Subscriber Broken Access Control in Service Finder Booking = 6.2 versions...

CVE-2026-27535: Missing Authorization

Subscriber Broken Access Control in Solace Extra = 1.6.0 versions...

CVE-2026-28157: Path Traversal: '.../...//'

Subscriber Path Traversal in Do Lasso = 358 versions...

CVE-2026-28156: Improper Neutralization of Special Elements used in an SQL Command

Subscriber SQL Injection in Do Lasso = 358 versions...

CVE-2026-66467: Improper Neutralization of Input During Web Page Generation

Subscriber Cross Site Scripting XSS in FluentCommunity = 2.7.5 versions...

CVE-2026-66456: Improper Neutralization of Input During Web Page Generation

Subscriber Cross Site Scripting XSS in Profile Extra Fields by BestWebSoft = 1.3.4 versions...

CVE-2026-66455: Missing Authorization

Subscriber Broken Access Control in ReactPress = 3.4.0 versions...

CVE-2026-66444: Exposure of Sensitive System Information to an Unauthorized Control Sphere

Subscriber Sensitive Data Exposure in Payment Forms for Paystack = 4.0.5 versions...

CVE-2026-66432: Exposure of Sensitive System Information Due to Uncleared Debug Information

Subscriber Sensitive Data Exposure in WPJAM Basic = 7.0.2.1 versions...

CVE-2026-66430: Improper Neutralization of Special Elements used in an SQL Command

Subscriber SQL Injection in Visitor Traffic Real Time Statistics Pro = 11.10 versions...

CVE-2026-65582: Improper Limitation of a Pathname to a Restricted Directory

Subscriber Arbitrary File Download in AI Hub = 1.3.10 versions...

CVE-2026-61966: Improper Neutralization of Special Elements used in an SQL Command

Subscriber SQL Injection in WPJAM Basic = 7.0.1 versions...

CVE-2026-28182: Improper Neutralization of Input During Web Page Generation

Subscriber Cross Site Scripting XSS in AcyMailing SMTP Newsletter = 10.11.1 versions...

CVE-2026-66693: Missing Authorization

Subscriber Broken Access Control in Motors = 1.4.113 versions...

CVE-2026-66661: Incorrect Privilege Assignment

Subscriber Privilege Escalation in Directories Pro = 2.0.5 versions...

CVE-2026-66658: Improper Neutralization of Special Elements used in an SQL Command

Subscriber SQL Injection in Reviewer = 3.14.2 versions...

CVE-2026-66654: Server-Side Request Forgery (SSRF)

Subscriber Server Side Request Forgery SSRF in Vehica Core = 1.0.104 versions...

CVE-2026-66471: Improper Neutralization of Input During Web Page Generation

Subscriber Cross Site Scripting XSS in Accordion = 3.0.6 versions...