CVE-2026-66710

Unauthenticated Local File Inclusion in e2pdf = 1.32.40 versions...

CVE-2026-66706

Author Cross Site Scripting XSS in Subscribe to Comments = 2.3.1 versions...

CVE-2026-66692

Customer Insecure Direct Object References IDOR in Colissimo Officiel : Méthodes de livraison pour WooCommerce = 2.10.0 versions...

CVE-2026-66688

Contributor Cross Site Scripting XSS in Ultimate Addons for Elementor = 1.45.2 versions...

CVE-2026-66696

Contributor Sensitive Data Exposure in Gutenberg Blocks by Kadence Blocks = 3.7.8 versions...

CVE-2026-66683

Unauthenticated Sensitive Data Exposure in Custom CSS and JavaScript = 2.0.16 versions...

CVE-2026-65575

Unauthenticated PHP Object Injection in Accalia = 1.5.3 versions...

CVE-2026-65576

Unauthenticated PHP Object Injection in Adrena = 1.2.14 versions...

CVE-2026-65543

Subscriber Sensitive Data Exposure in Vimeo = 1.2.2 versions...

CVE-2026-65515

Unauthenticated Cross Site Scripting XSS in AffiliateWP = 2.35.0 versions...

CVE-2026-65513

Unauthenticated Cross Site Scripting XSS in Simply Schedule Appointments = 1.6.12.10 versions...

CVE-2026-61959

Subscriber Cross Site Scripting XSS in Business Directory = 6.4.24 versions...

EUVD-2026-53913

Unauthenticated Local File Inclusion in e2pdf = 1.32.40 versions...

CVE-2026-66710

Technical details are not publicly available in the provided documents. The CVE-2026-66710 entry states an Unauthenticated Local File Inclusion in WordPress e2pdf plugin

CVE-2026-66708 WordPress Total Upkeep plugin <= 1.17.2 - Broken Access Control vulnerability

Unauthenticated Broken Access Control in Total Upkeep = 1.17.2 versions...

CVE-2026-66707

Unauthenticated Cross Site Scripting XSS in Facebook for WooCommerce = 3.7.5 versions...

CVE-2026-66702 WordPress Rank Math SEO plugin <= 1.0.274.1 - Cross Site Scripting (XSS) vulnerability

Unauthenticated Cross Site Scripting XSS in Rank Math SEO = 1.0.274.1 versions...

CVE-2026-66703

CVE-2026-66703 describes a Contributor Cross Site Scripting (XSS) vulnerability in the WordPress MailOptin plugin versions

CVE-2026-66701 WordPress Profile Builder plugin <= 3.16.5 - Broken Access Control vulnerability

Unauthenticated Broken Access Control in Profile Builder = 3.16.5 versions...

EUVD-2026-53905

Unauthenticated Broken Access Control in Profile Builder = 3.16.5 versions...