CVE-2026-57687

Contributor SQL Injection in Custom Field Template = 2.7.8 versions...

CVE-2026-57684

Contributor Cross Site Scripting XSS in TheFox = 3.9.70 versions...

CVE-2026-57670

Unauthenticated Cross Site Scripting XSS in Google Maps CP = 1.2.5 versions...

CVE-2026-57621

Unauthenticated PHP Object Injection in Booktics = 1.0.21 versions...

CVE-2026-57623

Unauthenticated Arbitrary Code Execution in W3 Total Cache = 2.9.4 versions...

CVE-2026-57356

Unauthenticated Cross Site Scripting XSS in MC Woocommerce Wishlist = 1.9.19 versions...

CVE-2025-69132

Subscriber Sensitive Data Exposure in Corpkit = 1.0.5 versions...

CVE-2025-58902

Unauthenticated Local File Inclusion in Lighthouse = 1.2.12 versions...

WordPress MeetingHub plugin <= 1.26.1 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by Nabil Irawan in WordPress Plugin MeetingHub versions = 1.26.1...

CVE-2026-57760 WordPress Sendcloud Shipping plugin <= 1.0.29 - Broken Access Control vulnerability

Missing Authorization vulnerability in Sendcloud Sendcloud Shipping allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects Sendcloud Shipping: from n/a through 1.0.29...

CVE-2026-57765 WordPress WP EasyCart plugin <= 5.9.0 - SQL Injection vulnerability

Contributor SQL Injection in WP EasyCart = 5.9.0 versions...

CVE-2026-57762

Author Cross Site Scripting XSS in Simple URLs = 151 versions...

CVE-2026-57762 WordPress Simple URLs plugin <= 151 - Cross Site Scripting (XSS) vulnerability

Author Cross Site Scripting XSS in Simple URLs = 151 versions...

CVE-2026-57762

CVE-2026-57762: A Cross Site Scripting (XSS) vulnerability affects WordPress Simple URLs plugin versions

CVE-2026-57761

CVE-2026-57761 concerns the WordPress theme SEOWP, affected in versions &lt;= 3.12.2. The vulnerability is described as Unauthenticated CSRF . Several connected sources also frame the issue as a CSRF leading to Stored XSS in SEOWP

CVE-2026-57756

Contributor SQL Injection in nicen-localize-image = 1.4.9 versions...

CVE-2026-57755

Contributor Cross Site Scripting XSS in Mosaic Gallery - Advanced Gallery = 1.2.0 versions...

CVE-2026-57754

CVE-2026-57754 is a cross-site scripting (XSS) vulnerability in the WordPress plugin Livemesh Addons for WPBakery Page Builder

EUVD-2026-41310

Contributor Cross Site Scripting XSS in Livemesh Addons for WPBakery Page Builder = 3.9.4 versions...

CVE-2026-57753 WordPress Kit (formerly ConvertKit) for WooCommerce plugin <= 2.1.5 - Sensitive Data Exposure vulnerability

Unauthenticated Sensitive Data Exposure in Kit formerly ConvertKit for WooCommerce = 2.1.5 versions...