PT-2026-98382

Name of the Vulnerable Software and Affected Versions WP Maps – Google Maps,OpenStreetMap,Mapbox,Store Locator,Listing,Directory & Filters versions prior to 4.9.9 Description Local File Inclusion occurs via the page parameter. Authenticated attackers with subscriber-level access or higher can...

PT-2026-98394

Name of the Vulnerable Software and Affected Versions User Profile Builder – Beautiful User Registration Forms, User Profiles & User Role Editor versions prior to 4.0.3 Description Insufficient input sanitization and output escaping allow authenticated attackers with subscriber-level access and...

PT-2026-98379

Name of the Vulnerable Software and Affected Versions GeoDirectory versions prior to 2.8.184 Description The GeoDirectory – WP Business Directory Plugin and Classified Listings Directory plugin for WordPress contains a Stored Cross-Site Scripting issue. This occurs due to insufficient input...

PT-2026-98381

Name of the Vulnerable Software and Affected Versions WP Maps – Google Maps,OpenStreetMap,Mapbox,Store Locator,Listing,Directory & Filters versions prior to 4.9.9 Description Insufficient input sanitization and output escaping allow authenticated attackers with subscriber-level access and above t...

CVE-2026-13179: Improper Neutralization of Input During Web Page Generation

The WP Maps – Google Maps,OpenStreetMap,Mapbox,Store Locator,Listing,Directory & Filters plugin for WordPress is vulnerable to Stored Cross-Site Scripting via shapesvalues Parameter in all versions up to, and including, 4.9.8 due to insufficient input sanitization and output escaping. This makes ...

WordPress Knit Pay – Cashfree, Instamojo, Razorpay, PayPal and more plugin <= 9.6.1.0 - Authenticated (Subscriber+) Privilege Escalation vulnerability

Authenticated Subscriber+ Privilege Escalation vulnerability discovered by moonge in WordPress Plugin Knit Pay versions = 9.6.1.0...

WordPress OpenStation: Desktop Windows, Dock & Virtual Desktops for WP Admin plugin <= 1.1.7 - Missing Authorization to Authenticated (Subscriber+) Sensitive Information Disclosure vulnerability

Missing Authorization to Authenticated Subscriber+ Sensitive Information Disclosure vulnerability discovered by Wordfence PRISM in WordPress Plugin Desktop Mode versions = 1.1.7...

WordPress Newsletters plugin < 4.18.1 - Unauthenticated Subscriber Record Overwrite and PII Disclosure vulnerability

Unauthenticated Subscriber Record Overwrite and PII Disclosure vulnerability discovered by Yaswanth Reddy Sunkara in WordPress Plugin Newsletters versions 4.18.1...

WordPress Directorist: AI-Powered Business Directory, Listings & Classified Ads plugin 3.1.0-8.9.4 - Subscriber+ Arbitrary Listing Deletion vulnerability

Subscriber+ Arbitrary Listing Deletion vulnerability discovered by Artus KG in WordPress Plugin Directorist versions 3.1.0-8.9.4...

WordPress WP OAuth Server ( Login with WordPress ) plugin < 6.4.0 - Subscriber+ Cross-User Account Takeover vulnerability

Subscriber+ Cross-User Account Takeover vulnerability discovered by vuxvinh in WordPress Plugin WP OAuth Server versions 6.4.0...

CVE-2026-88847

The MasterStudy LMS WordPress Plugin WordPress plugin before 3.7.50 does not verify that a user is enrolled in a course before recording lesson completions against it, allowing any authenticated user, such as a subscriber, to create course progress records for courses they have no access to...

CVE-2026-89002

The WPeMatico RSS Feed Fetcher WordPress plugin before 2.8.26 does not sanitize and escape content it retrieves from a user-supplied source before rendering it, which could allow users such as contributors to perform Stored Cross-Site Scripting attacks against higher-privileged users who review t...

CVE-2026-80338

The CMB2 WordPress plugin before 2.13.0 does not perform any capability check on one of its AJAX actions, allowing users with a role as low as Subscriber to create arbitrary WordPress options and corrupt existing ones, which can break core site settings and take the site offline. Exploitation...

CVE-2026-80513

The wpForo Forum WordPress plugin before 3.1.6 does not restrict which classes may be instantiated when it deserializes a user-supplied profile field value, allowing authenticated users with Subscriber-level access and above to inject a PHP Object. No POP chain is present in the wpForo Forum...

CVE-2026-93662 Events Manager 7.4.1 - 7.4.4 - Subscriber+ Unpublished Event and Location Disclosure via 'owner' Parameter

The Events Manager WordPress plugin before 7.4.5 does not force the scope of its logged-in event and location search when a caller supplies their own owner value, letting a low-privileged user read other accounts' unpublished, pending or trashed event and venue content, including full street...

CVE-2026-93662

The Events Manager WordPress plugin, in versions prior to 7.4.5 , is vulnerable to an unauthorized data disclosure flaw. The application fails to enforce proper scope for logged-in event and location searches when a caller provides a custom owner value . This allows a low-privileged user to read ...

EUVD-2026-85804

The MasterStudy LMS WordPress Plugin WordPress plugin before 3.7.50 does not verify that a user is enrolled in a course before recording lesson completions against it, allowing any authenticated user, such as a subscriber, to create course progress records for courses they have no access to...

CVE-2026-88845

The MasterStudy LMS WordPress Plugin versions before 3.7.50 is vulnerable to an unauthorized action due to a lack of capability or nonce checks on an administrative maintenance action. This flaw allows any authenticated user , such as a subscriber, to trigger the action and create published conte...

WordPress MasterStudy LMS WordPress Plugin plugin 2.3.0-3.7.49 - Subscriber+ Course and Lesson Creation vulnerability

Subscriber+ Course and Lesson Creation vulnerability discovered by vuxvinh in WordPress Plugin MasterStudy LMS versions 2.3.0-3.7.49...

WordPress MasterStudy LMS WordPress Plugin plugin < 3.7.50 - Subscriber+ Lesson Completion Record Creation vulnerability

Subscriber+ Lesson Completion Record Creation vulnerability discovered by Arman Kumar in WordPress Plugin MasterStudy LMS versions 3.7.50...