EUVD-2026-89910

Subscriber PHP Object Injection in ShortPixel Image Optimizer = 6.5.5 versions...

CVE-2026-97246 WordPress ShortPixel Image Optimizer plugin <= 6.5.5 - PHP Object Injection vulnerability

Subscriber PHP Object Injection in ShortPixel Image Optimizer = 6.5.5 versions...

CVE-2026-97246

The ShortPixel Image Optimizer plugin for WordPress (versions

CVE-2026-97243

The AllAble Connector WordPress plugin, in versions

CVE-2026-97239

The WordPress MCP Content Manager Lite plugin (versions

CVE-2026-97239 WordPress MCP Content Manager Lite plugin <= 1.1.0 - Broken Access Control vulnerability

Subscriber Broken Access Control in MCP Content Manager Lite = 1.1.0 versions...

CVE-2026-97238 WordPress JetEngine plugin <= 3.8.14.3 - Cross Site Scripting (XSS) vulnerability

Subscriber Cross Site Scripting XSS in JetEngine = 3.8.14.3 versions...

EUVD-2026-89902

Subscriber Cross Site Scripting XSS in JetEngine = 3.8.14.3 versions...

CVE-2026-97238 WordPress JetEngine plugin <= 3.8.14.3 - Cross Site Scripting (XSS) vulnerability

Subscriber Cross Site Scripting XSS in JetEngine = 3.8.14.3 versions...

CVE-2026-97236 WordPress ThemeREX Addons plugin < 2.45.0 - Cross Site Scripting (XSS) vulnerability

Subscriber Cross Site Scripting XSS in ThemeREX Addons 2.45.0 versions...

EUVD-2026-89900

Subscriber Cross Site Scripting XSS in ThemeREX Addons 2.45.0 versions...

CVE-2026-97236

The WordPress ThemeREX Addons plugin, in versions

CVE-2026-97079

The Webba Booking WordPress plugin (versions

EUVD-2026-89897

Subscriber Insecure Direct Object References IDOR in Webba Booking = 6.5.0 versions...

CVE-2026-97074

The Newsletters, Email Marketing, SMS and Popups by Omnisend WordPress plugin versions

CVE-2026-96834

The WordPress GiveWP plugin versions

CVE-2026-96825 WordPress All In One WP Security & Firewall plugin <= 5.4.8 - Bypass Vulnerability vulnerability

Subscriber Bypass Vulnerability in All In One WP Security & Firewall = 5.4.8 versions...

EUVD-2026-89878

Subscriber Bypass Vulnerability in All In One WP Security & Firewall = 5.4.8 versions...

CVE-2026-96825 WordPress All In One WP Security & Firewall plugin <= 5.4.8 - Bypass Vulnerability vulnerability

Subscriber Bypass Vulnerability in All In One WP Security & Firewall = 5.4.8 versions...

CVE-2026-96825

The All In One WP Security & Firewall WordPress plugin, in versions