CVE-2026-57356 WordPress MC Woocommerce Wishlist plugin <= 1.9.19 - Cross Site Scripting (XSS) vulnerability

Unauthenticated Cross Site Scripting XSS in MC Woocommerce Wishlist = 1.9.19 versions...

CVE-2026-57356

Unauthenticated Cross Site Scripting XSS in MC Woocommerce Wishlist = 1.9.19 versions...

CVE-2026-57355

Subscriber Broken Access Control in Classified Listing = 5.4.2 versions...

CVE-2026-57349

Unauthenticated Cross Site Scripting XSS in WPeMatico RSS Feed Fetcher = 2.8.17 versions...

CVE-2026-57348 WordPress Paid Member Subscriptions plugin <= 3.0.4 - Server Side Request Forgery (SSRF) vulnerability

Unauthenticated Server Side Request Forgery SSRF in Paid Member Subscriptions = 3.0.4 versions...

CVE-2026-57347

Subscriber Sensitive Data Exposure in Hotel Booking Lite = 6.0.3 versions...

EUVD-2026-41342

Subscriber Cross Site Scripting XSS in ShortPixel Adaptive Images = 3.11.3 versions...

EUVD-2026-41341

Customer Path Traversal in Tax Exempt for WooCommerce = 1.9.3 versions...

CVE-2026-42382 WordPress Audrey theme <= 1.5 - Local File Inclusion vulnerability

Unauthenticated Local File Inclusion in Audrey = 1.5 versions...

EUVD-2026-41339

Unauthenticated Broken Access Control in NOWPayments for WooCommerce = 1.4.0 versions...

CVE-2026-39448

Unauthenticated Broken Access Control in NOWPayments for WooCommerce = 1.4.0 versions...

EUVD-2026-41337

Unauthenticated Broken Access Control in Motors = 5.6.80 versions...

CVE-2026-27419

CVE-2026-27419 affects WordPress Zegen theme versions

CVE-2026-27419

Subscriber Arbitrary File Upload in Zegen = 1.1.9 versions...

CVE-2026-27060 WordPress ARMember Premium plugin < 7.6 - PHP Object Injection vulnerability

Deserialization of Untrusted Data vulnerability in Repute Infosystems ARMember Premium allows Object Injection. This issue affects ARMember Premium: from n/a before 7.6...

CVE-2025-69153

Unauthenticated Cross Site Scripting XSS in Trendy Travel = 6.7 versions...

EUVD-2025-210405

Unauthenticated Cross Site Scripting XSS in Trendy Travel = 6.7 versions...

EUVD-2025-210403

Unauthenticated Arbitrary Content Deletion in OpenAI Chatbot for WordPress – Helper = 1.1.4 versions...

CVE-2025-69132

Subscriber Sensitive Data Exposure in Corpkit = 1.0.5 versions...

EUVD-2025-210401

Subscriber Sensitive Data Exposure in Corpkit = 1.0.5 versions...