CVE-2026-65494

Subscriber SQL Injection in Dokan Pro = 5.0.2 versions...

CVE-2026-65490 WordPress Create by Mediavine plugin <= 2.6.0 - Sensitive Data Exposure vulnerability

Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in John-Michael L'Allier Create mediavine-create allows Retrieve Embedded Sensitive Data.This issue affects Create: from n/a through 2.6.0...

CVE-2026-65490

Unauthenticated Sensitive Data Exposure in Create by Mediavine = 2.5.3 versions...

EUVD-2026-48096

Unauthenticated Broken Access Control in Content Control = 2.6.5 versions...

CVE-2026-65485

Unauthenticated Broken Access Control in Content Control = 2.6.5 versions...

CVE-2026-65478 WordPress ListingPro plugin <= 2.9.10 - Broken Access Control vulnerability

Subscriber Broken Access Control in ListingPro = 2.9.10 versions...

EUVD-2026-48089

Subscriber Broken Access Control in ListingPro = 2.9.10 versions...

EUVD-2026-48087

Unauthenticated Broken Access Control in Civi = 2.2.4 versions...

CVE-2026-65474 WordPress Ninja Tables plugin <= 5.2.10 - Sensitive Data Exposure vulnerability

Unauthenticated Sensitive Data Exposure in Ninja Tables = 5.2.10 versions...

CVE-2026-65474

Unauthenticated Sensitive Data Exposure in Ninja Tables = 5.2.10 versions...

CVE-2026-65470

Contributor Cross Site Scripting XSS in Fluent Support = 2.3.0 versions...

CVE-2026-65466

CVE-2026-65466 concerns a Server Side Request Forgery (SSRF) in the WordPress JetBooking plugin &lt;= 4.1.2 . The description specifies a custom role -driven SSRF vulnerability affecting JetBooking versions up to 4.1.2. The CVSSv3.1 metrics (source: Patchstack) indicate a network attack vector , ...

EUVD-2026-48078

Custom role Server Side Request Forgery SSRF in JetBooking = 4.1.2 versions...

CVE-2026-65462 WordPress Uncanny Automator plugin <= 7.3.2 - SQL Injection vulnerability

Administrator SQL Injection in Uncanny Automator = 7.3.2 versions...

EUVD-2026-48222

Subscriber Broken Access Control in ЮKassa для WooCommerce = 2.16.1 versions...

CVE-2026-65454 WordPress Quiz And Survey Master plugin <= 11.2.0 - SQL Injection vulnerability

Contributor SQL Injection in Quiz And Survey Master = 11.2.0 versions...

CVE-2026-61948

WordPress WPDM – Premium Packages plugin ≤ 6.2.0 is affected by unauthenticated SQL injection. The vulnerability is documented in CVE-2026-61948 with a CVSS v3.1 base score of 9.3 (CRITICAL) and a network attack vector, no privileges required, no user interaction. Details indicate the issue is an...

CVE-2026-61948 WordPress WPDM – Premium Packages plugin <= 6.2.0 - SQL Injection vulnerability

Unauthenticated SQL Injection in WPDM – Premium Packages = 6.2.0 versions...

CVE-2026-61943

CVE-2026-61943 describes an unauthenticated Broken Access Control in the WordPress WPDM – Premium Packages plugin, affected versions

CVE-2026-59545 WordPress miniOrange Discord Integration plugin <= 2.2.4 - Broken Authentication vulnerability

Unauthenticated Broken Authentication in miniOrange Discord Integration = 2.2.4 versions...