EUVD-2026-37046

Unauthenticated SQL Injection in InPost Gallery = 2.1.4.6 versions...

PT-2026-49644

Unauthenticated SQL Injection in GEO my WordPress = 4.5.5 versions...

PT-2026-50079

Unauthenticated Local File Inclusion in Learnify = 1.15.0 versions...

PT-2026-50105

Unauthenticated Local File Inclusion in Mr. SEO = 2.0 versions...

PT-2026-50114

Unauthenticated PHP Object Injection in TechLink = 1.3 versions...

PT-2026-50102

Unauthenticated PHP Object Injection in Fidalgo = 1.2.2 versions...

PT-2026-49646

Unauthenticated Broken Access Control in Envira Photo Gallery = 1.12.5 versions...

PT-2026-50106

Unauthenticated PHP Object Injection in Playroom = 1.4.1 versions...

EUVD-2026-36990

Unauthenticated Cross Site Scripting XSS in Quiz And Survey Master = 11.0.0 versions...

EUVD-2026-36989

Subscriber Broken Authentication in AutomatorWP = 5.6.7 versions...

EUVD-2026-36987

Unauthenticated Broken Authentication in ReviewX = 2.3.6 versions...

EUVD-2026-36981

Unauthenticated Arbitrary File Upload in GeekyBot = 1.2.2 versions...

EUVD-2026-36963

Unauthenticated Broken Access Control in WP Directory Kit = 1.5.0 versions...

EUVD-2026-36968

Unauthenticated Privilege Escalation in WP BASE Booking = 5.9.0 versions...

EUVD-2026-36948

Unauthenticated Broken Access Control in Easy Digital Downloads = 3.6.5 versions...

EUVD-2026-36943

Unauthenticated SQL Injection in WP Maps = 4.9.1 versions...

EUVD-2026-36929

Subscriber Broken Authentication in FunnelKit Automations = 3.7.3 versions...

EUVD-2026-36942

Subscriber Cross Site Scripting XSS in JupiterX Core = 4.14.1 versions...

EUVD-2026-36932

Editor Remote Code Execution RCE in Responsive Slider by MetaSlider = 3.106.0 versions...

EUVD-2026-36956

Unauthenticated SQL Injection in GeekyBot = 1.2.0 versions...