CVE-2026-61949

CVE-2026-61949 describes an unauthenticated SQL injection in the WordPress plugin Bookly (versions

CVE-2026-61948

WordPress WPDM – Premium Packages plugin ≤ 6.2.0 is affected by unauthenticated SQL injection. The vulnerability is documented in CVE-2026-61948 with a CVSS v3.1 base score of 9.3 (CRITICAL) and a network attack vector, no privileges required, no user interaction. Details indicate the issue is an...

CVE-2026-61943

CVE-2026-61943 describes an unauthenticated Broken Access Control in the WordPress WPDM – Premium Packages plugin, affected versions

EUVD-2026-48202

Unauthenticated Broken Access Control in WPDM – Premium Packages = 6.2.0 versions...

EUVD-2026-48201

Unauthenticated Arbitrary File Deletion in Participants Database = 2.7.8.3 versions...

CVE-2026-59547

CVE-2026-59547 describes an unauthenticated Broken Access Control in the WordPress Payment Gateway for PayPal on WooCommerce plugin, versions

EUVD-2026-48199

Unauthenticated Broken Access Control in Payment Gateway for PayPal on WooCommerce = 9.1.4 versions...

CVE-2026-59544

The CVE covers WordPress Thrive Quiz Builder plugin versions

EUVD-2026-48197

Unauthenticated PHP Object Injection in Thrive Quiz Builder = 10.9.3.0 versions...

EUVD-2026-48198

Unauthenticated Broken Authentication in miniOrange Discord Integration = 2.2.4 versions...

EUVD-2026-48193

Unauthenticated Privilege Escalation in SMS Alert Order Notifications = 3.9.6 versions...

EUVD-2026-48191

Unauthenticated SQL Injection in Participants Database = 2.7.8.3 versions...

EUVD-2026-48190

Unauthenticated Broken Authentication in Easy Digital Downloads = 3.6.7 versions...

CVE-2026-59514

The CVE-2026-59514 entry concerns the WordPress Buddyboss Platform plugin, affected versions

CVE-2026-57717

CVE-2026-57717 corresponds to an unauthenticated broken access control vulnerability in the WordPress Knit Pay plugin, affecting versions

EUVD-2026-48175

Unauthenticated Cross Site Scripting XSS in Smart Manager = 8.90.0 versions...

CVE-2026-57704

CVE-2026-57704 : Unauthenticated Cross Site Scripting (XSS) in the WordPress Smart Manager plugin for WP e‑commerce, versions ≤ 8.90.0. Root cause and specific exploit path are not detailed in the provided documents. CVSSv3.1 base score 7.1 (HIGH) with network attack vector and user interaction r...

CVE-2026-57427

CVE-2026-57427 documents an unauthenticated Cross-Site Scripting (XSS) vulnerability affecting the WordPress Download Monitor — WPForms Lock plugin, version

CVE-2026-57425

CVE-2026-57425 affects the WordPress plugin Autopay dla WooCommerce (versions

EUVD-2026-48168

Unauthenticated Broken Access Control in Autopay dla WooCommerce = 2.2.27 versions...