CVE-2026-65491

Subscriber Broken Access Control in Query Wrangler = 1.5.57 versions...

EUVD-2026-48099

Unauthenticated Cross Site Request Forgery CSRF in LA-Studio Element Kit for Elementor = 1.6.2 versions...

CVE-2026-65488

Unauthenticated Cross Site Request Forgery CSRF in LA-Studio Element Kit for Elementor = 1.6.2 versions...

CVE-2026-65484 WordPress Style Kits plugin <= 2.6.5 - Broken Access Control vulnerability

Contributor Broken Access Control in Style Kits = 2.6.5 versions...

CVE-2026-65484

Contributor Broken Access Control in Style Kits = 2.6.5 versions...

CVE-2026-65483

CVE-2026-65483 describes a Cross Site Scripting (XSS) vulnerability in the WordPress plugin HashThemes Demo Importer, version

CVE-2026-65483 WordPress HashThemes Demo Importer plugin <= 1.4.2 - Cross Site Scripting (XSS) vulnerability

Author Cross Site Scripting XSS in HashThemes Demo Importer = 1.4.2 versions...

CVE-2026-65481 WordPress Vino theme <= 1.9 - Local File Inclusion vulnerability

Contributor Local File Inclusion in Vino = 1.9 versions...

EUVD-2026-48091

Contributor Cross Site Scripting XSS in TheGem = 5.11.1 versions...

CVE-2026-65478

Subscriber Broken Access Control in ListingPro = 2.9.10 versions...

CVE-2026-65476

Unauthenticated Broken Access Control in Civi = 2.2.4 versions...

CVE-2026-65473 WordPress Virtue/Ascend/Pinnacle Toolkit plugin <= 4.9.12 - Cross Site Scripting (XSS) vulnerability

Contributor Cross Site Scripting XSS in Virtue/Ascend/Pinnacle Toolkit = 4.9.12 versions...

CVE-2026-65473

CVE-2026-65473 affects the WordPress Virtue/Ascend/Pinnacle Toolkit plugin (versions

CVE-2026-65467

CVE-2026-65467 corresponds to a Server Side Request Forgery (SSRF) vulnerability in the WordPress JetEngine plugin, affecting versions up to 3.8.11. The issue is described as SSRF in JetEngine

EUVD-2026-48076

Unauthenticated Cross Site Request Forgery CSRF in GiveWP = 4.16.3 versions...

CVE-2026-65463

CVE-2026-65463 affects the WordPress Masteriyo LMS plugin, versioned up to 2.3.1, with an Insecure Direct Object References (IDOR) vulnerability in Subscriber scope. The entry provides a CVSS 3.1 base score of 5.4 (Medium) with network attack vector, low attack complexity, and requires low privil...

CVE-2026-65455 WordPress MapSVG plugin <= 8.14.0 - Arbitrary File Upload vulnerability

Administrator Arbitrary File Upload in MapSVG = 8.14.0 versions...

EUVD-2026-48214

Contributor Cross Site Scripting XSS in MapSVG = 8.14.0 versions...

CVE-2026-65450 WordPress MapSVG plugin <= 8.14.0 - SQL Injection vulnerability

Contributor SQL Injection in MapSVG = 8.14.0 versions...

EUVD-2026-48215

Contributor SQL Injection in MapSVG = 8.14.0 versions...