CVE-2026-65449 WordPress MapSVG plugin <= 8.14.0 - Cross Site Scripting (XSS) vulnerability

Contributor Cross Site Scripting XSS in MapSVG = 8.14.0 versions...

CVE-2026-61981 WordPress Simple Link Directory Pro plugin <= 15.0.8 - Cross Site Request Forgery (CSRF) vulnerability

Unauthenticated Cross Site Request Forgery CSRF in Simple Link Directory Pro = 15.0.8 versions...

CVE-2026-61973

CVE-2026-61973 applies to the WordPress ShopLentor Pro plugin, affected

CVE-2026-61973 WordPress ShopLentor Pro plugin <= 2.8.5 - Broken Access Control vulnerability

Subscriber Broken Access Control in ShopLentor Pro = 2.8.5 versions...

CVE-2026-61954

CVE-2026-61954 affects the WordPress PayU India plugin up to version 3.8.9, with an Unauthenticated Broken Access Control vulnerability. The available documents identify the affected product (WordPress PayU India plugin) and the vulnerable version range (

EUVD-2026-48209

Unauthenticated Privilege Escalation in TrueBooker = 1.2.3 versions...

CVE-2026-61950

CVE-2026-61950 : Unauthenticated SQL injection in the WordPress plugin TrueBooker (versions &lt;= 1.2.3). The CVE entry indicates a high-severity, network-exposed vulnerability with low attack complexity and no privileges required. The impact is highlighted as high confidentiality impact and low ...

CVE-2026-61951 WordPress TrueBooker plugin <= 1.2.3 - Privilege Escalation vulnerability

Unauthenticated Privilege Escalation in TrueBooker = 1.2.3 versions...

EUVD-2026-48207

Unauthenticated SQL Injection in Bookly = 27.7 versions...

EUVD-2026-48206

Unauthenticated SQL Injection in WPDM – Premium Packages = 6.2.0 versions...

CVE-2026-59554 WordPress Ziina plugin <= 1.2.21 - Broken Authentication vulnerability

Unauthenticated Broken Authentication in Ziina = 1.2.21 versions...

EUVD-2026-48200

Unauthenticated Broken Authentication in Ziina = 1.2.21 versions...

CVE-2026-59542

The vulnerability CVE-2026-59542 affects the WordPress Kali Forms plugin

CVE-2026-59540 WordPress SMS Alert Order Notifications plugin <= 3.9.6 - Privilege Escalation vulnerability

Unauthenticated Privilege Escalation in SMS Alert Order Notifications = 3.9.6 versions...

CVE-2026-59524 WordPress Easy Digital Downloads plugin <= 3.6.7 - Broken Authentication vulnerability

Unauthenticated Broken Authentication in Easy Digital Downloads = 3.6.7 versions...

CVE-2026-59514 WordPress Buddyboss Platform plugin <= 3.0.5 - SQL Injection vulnerability

Unauthenticated SQL Injection in Buddyboss Platform = 3.0.5 versions...

CVE-2026-57785 WordPress ApusListing theme <= 1.2.63 - Cross Site Request Forgery (CSRF) vulnerability

Unauthenticated Cross Site Request Forgery CSRF in ApusListing = 1.2.63 versions...

EUVD-2026-48181

Unauthenticated Cross Site Request Forgery CSRF in Ninja Forms File Uploads Extension = 3.3.26 versions...

EUVD-2026-48168

Unauthenticated Broken Access Control in Autopay dla WooCommerce = 2.2.27 versions...

CVE-2026-57384 WordPress WishList Member X plugin <= 3.32.0 - Cross Site Scripting (XSS) vulnerability

Subscriber Cross Site Scripting XSS in WishList Member X = 3.32.0 versions...