EUVD-2026-48218

Unauthenticated Broken Access Control in Ebook Store = 6.19 versions...

CVE-2026-65452

CVE-2026-65452 affects the WordPress Ebook Store plugin up to version 6.19, with an Unauthenticated Broken Access Control vulnerability. The description in both records confirms unauthenticated access issues that impact access control, but no technical exploit steps, root cause specifics, or reme...

CVE-2026-65453 WordPress Ebook Store plugin <= 6.19 - Broken Access Control vulnerability

Unauthenticated Broken Access Control in Ebook Store = 6.19 versions...

CVE-2026-65453

Affected product: WordPress Ebook Store plugin, versions up to 6.19. The issue is an unauthenticated Broken Access Control vulnerability in Ebook Store

CVE-2026-65452 WordPress Ebook Store plugin <= 6.19 - Broken Access Control vulnerability

Unauthenticated Broken Access Control in Ebook Store = 6.19 versions...

EUVD-2026-48211

Unauthenticated Broken Access Control in ShopLentor Pro = 2.8.5 versions...

CVE-2026-61972 WordPress ShopLentor Pro plugin <= 2.8.5 - Broken Access Control vulnerability

Unauthenticated Broken Access Control in ShopLentor Pro = 2.8.5 versions...

CVE-2026-61954 WordPress PayU India plugin <= 3.8.9 - Broken Access Control vulnerability

Unauthenticated Broken Access Control in PayU India = 3.8.9 versions...

CVE-2026-61954 WordPress PayU India plugin <= 3.8.9 - Broken Access Control vulnerability

Unauthenticated Broken Access Control in PayU India = 3.8.9 versions...

EUVD-2026-48210

Unauthenticated Broken Access Control in PayU India = 3.8.9 versions...

CVE-2026-61950 WordPress TrueBooker plugin <= 1.2.3 - SQL Injection vulnerability

Unauthenticated SQL Injection in TrueBooker = 1.2.3 versions...

CVE-2026-61949 WordPress Bookly plugin <= 27.7 - SQL Injection vulnerability

Unauthenticated SQL Injection in Bookly = 27.7 versions...

CVE-2026-61949

CVE-2026-61949 describes an unauthenticated SQL injection in the WordPress plugin Bookly (versions

CVE-2026-61947 WordPress Form Vibes – Database Manager for Forms plugin <= 1.5.2 - Cross Site Scripting (XSS) vulnerability

Unauthenticated Cross Site Scripting XSS in Form Vibes – Database Manager for Forms = 1.5.2 versions...

CVE-2026-61948

WordPress WPDM – Premium Packages plugin ≤ 6.2.0 is affected by unauthenticated SQL injection. The vulnerability is documented in CVE-2026-61948 with a CVSS v3.1 base score of 9.3 (CRITICAL) and a network attack vector, no privileges required, no user interaction. Details indicate the issue is an...

CVE-2026-61948 WordPress WPDM – Premium Packages plugin <= 6.2.0 - SQL Injection vulnerability

Unauthenticated SQL Injection in WPDM – Premium Packages = 6.2.0 versions...

CVE-2026-61946 WordPress Easy Appointments plugin <= 3.12.27 - Insecure Direct Object References (IDOR) vulnerability

Unauthenticated Insecure Direct Object References IDOR in Easy Appointments = 3.12.27 versions...

CVE-2026-61946 WordPress Easy Appointments plugin <= 3.12.27 - Insecure Direct Object References (IDOR) vulnerability

Unauthenticated Insecure Direct Object References IDOR in Easy Appointments = 3.12.27 versions...

CVE-2026-61943

CVE-2026-61943 describes an unauthenticated Broken Access Control in the WordPress WPDM – Premium Packages plugin, affected versions

CVE-2026-61943 WordPress WPDM – Premium Packages plugin <= 6.2.0 - Broken Access Control vulnerability

Unauthenticated Broken Access Control in WPDM – Premium Packages = 6.2.0 versions...