CVE-2026-96821 WordPress FluentBoards plugin <= 2.0.12 - Privilege Escalation vulnerability

Subscriber Privilege Escalation in FluentBoards = 2.0.12 versions...

CVE-2026-96820

The WordPress Awesome Support plugin (versions

CVE-2026-96820 WordPress Awesome Support plugin <= 6.3.9 - Cross Site Scripting (XSS) vulnerability

Subscriber Cross Site Scripting XSS in Awesome Support = 6.3.9 versions...

CVE-2026-96819 WordPress oik plugin <= 4.15.4 - Cross Site Scripting (XSS) vulnerability

Subscriber Cross Site Scripting XSS in oik = 4.15.4 versions...

EUVD-2026-89873

Subscriber Cross Site Scripting XSS in Awesome Support = 6.3.9 versions...

CVE-2026-96819 WordPress oik plugin <= 4.15.4 - Cross Site Scripting (XSS) vulnerability

Subscriber Cross Site Scripting XSS in oik = 4.15.4 versions...

CVE-2026-96817

The MakeCommerce for WooCommerce WordPress plugin (versions

CVE-2026-96817 WordPress MakeCommerce for WooCommerce plugin <= 4.1.0 - Broken Access Control vulnerability

Subscriber Broken Access Control in MakeCommerce for WooCommerce = 4.1.0 versions...

CVE-2026-96817 WordPress MakeCommerce for WooCommerce plugin <= 4.1.0 - Broken Access Control vulnerability

Subscriber Broken Access Control in MakeCommerce for WooCommerce = 4.1.0 versions...

EUVD-2026-89863

Subscriber Privilege Escalation in Estatik = 4.3.5 versions...

CVE-2026-96347 WordPress Bookly plugin <= 28.2 - Insecure Direct Object References (IDOR) vulnerability

Subscriber Insecure Direct Object References IDOR in Bookly = 28.2 versions...

CVE-2026-96347 WordPress Bookly plugin <= 28.2 - Insecure Direct Object References (IDOR) vulnerability

Subscriber Insecure Direct Object References IDOR in Bookly = 28.2 versions...

CVE-2026-96338 WordPress Profile Builder plugin <= 4.0.2 - Cross Site Scripting (XSS) vulnerability

Subscriber Cross Site Scripting XSS in Profile Builder = 4.0.2 versions...

CVE-2026-96338

The WordPress Profile Builder plugin versions

CVE-2026-96338 WordPress Profile Builder plugin <= 4.0.2 - Cross Site Scripting (XSS) vulnerability

Subscriber Cross Site Scripting XSS in Profile Builder = 4.0.2 versions...

CVE-2026-95531 WordPress Conversational Forms for ChatBot plugin <= 1.5.0 - PHP Object Injection vulnerability

Subscriber PHP Object Injection in Conversational Forms for ChatBot = 1.5.0 versions...

CVE-2026-95531 WordPress Conversational Forms for ChatBot plugin <= 1.5.0 - PHP Object Injection vulnerability

Subscriber PHP Object Injection in Conversational Forms for ChatBot = 1.5.0 versions...

CVE-2026-94499 WordPress FormGent plugin <= 1.12.2 - Broken Access Control vulnerability

Subscriber Broken Access Control in FormGent = 1.12.2 versions...

CVE-2026-94178 WordPress Import and export users and customers plugin <= 2.5.2 - Privilege Escalation vulnerability

Subscriber Privilege Escalation in Import and export users and customers = 2.5.2 versions...

CVE-2026-94178

The WordPress Import and export users and customers plugin, versions