CVE-2026-65453

Affected product: WordPress Ebook Store plugin, versions up to 6.19. The issue is an unauthenticated Broken Access Control vulnerability in Ebook Store

EUVD-2026-48211

Unauthenticated Broken Access Control in ShopLentor Pro = 2.8.5 versions...

EUVD-2026-48210

Unauthenticated Broken Access Control in PayU India = 3.8.9 versions...

CVE-2026-61949

CVE-2026-61949 describes an unauthenticated SQL injection in the WordPress plugin Bookly (versions

CVE-2026-61948

WordPress WPDM – Premium Packages plugin ≤ 6.2.0 is affected by unauthenticated SQL injection. The vulnerability is documented in CVE-2026-61948 with a CVSS v3.1 base score of 9.3 (CRITICAL) and a network attack vector, no privileges required, no user interaction. Details indicate the issue is an...

CVE-2026-61943

CVE-2026-61943 describes an unauthenticated Broken Access Control in the WordPress WPDM – Premium Packages plugin, affected versions

EUVD-2026-48202

Unauthenticated Broken Access Control in WPDM – Premium Packages = 6.2.0 versions...

EUVD-2026-48201

Unauthenticated Arbitrary File Deletion in Participants Database = 2.7.8.3 versions...

CVE-2026-59547

CVE-2026-59547 describes an unauthenticated Broken Access Control in the WordPress Payment Gateway for PayPal on WooCommerce plugin, versions

EUVD-2026-48199

Unauthenticated Broken Access Control in Payment Gateway for PayPal on WooCommerce = 9.1.4 versions...

CVE-2026-59544

The CVE covers WordPress Thrive Quiz Builder plugin versions

EUVD-2026-48197

Unauthenticated PHP Object Injection in Thrive Quiz Builder = 10.9.3.0 versions...

EUVD-2026-48198

Unauthenticated Broken Authentication in miniOrange Discord Integration = 2.2.4 versions...

EUVD-2026-48193

Unauthenticated Privilege Escalation in SMS Alert Order Notifications = 3.9.6 versions...

EUVD-2026-48191

Unauthenticated SQL Injection in Participants Database = 2.7.8.3 versions...

EUVD-2026-48190

Unauthenticated Broken Authentication in Easy Digital Downloads = 3.6.7 versions...

CVE-2026-59514

The CVE-2026-59514 entry concerns the WordPress Buddyboss Platform plugin, affected versions

CVE-2026-57717

CVE-2026-57717 corresponds to an unauthenticated broken access control vulnerability in the WordPress Knit Pay plugin, affecting versions

EUVD-2026-48175

Unauthenticated Cross Site Scripting XSS in Smart Manager = 8.90.0 versions...

CVE-2026-57704

CVE-2026-57704 : Unauthenticated Cross Site Scripting (XSS) in the WordPress Smart Manager plugin for WP e‑commerce, versions ≤ 8.90.0. Root cause and specific exploit path are not detailed in the provided documents. CVSSv3.1 base score 7.1 (HIGH) with network attack vector and user interaction r...