CVE-2026-39595

Author Broken Access Control in W3 Total Cache = 2.9.1 versions...

CVE-2026-39539

Unauthenticated PHP Object Injection in Alloggio - Hotel Booking = 2.1.2 versions...

CVE-2026-39438

Unauthenticated SQL Injection in ListingPro = 2.9.10 versions...

CVE-2026-27400

Unauthenticated Arbitrary File Deletion in BookPro = 1.1.0 versions...

CVE-2026-24575

Subscriber Broken Access Control in WishList Member X = 3.29.0 versions...

CVE-2026-22332

Unauthenticated SQL Injection in Tutor LMS Pro = 3.9.6 versions...

CVE-2026-22340

Unauthenticated SQL Injection in WPJobster = 6.3.5 versions...

CVE-2026-22334

Subscriber Arbitrary File Download in Woocommerce Book Price = 1.3 versions...

CVE-2026-22330

Unauthenticated Local File Inclusion in Right Way = 4.0 versions...

CVE-2026-22329

Unauthenticated Cross Site Scripting XSS in Skillate = 1.2.10 versions...

CVE-2026-12199

A vulnerability in nltk.app.wordnetapp up to version 3.9.3 allows unauthenticated remote shutdown of the local WordNet Browser HTTP server when started in its default mode. The server listens on all interfaces and processes a specific unauthenticated GET request /SHUTDOWN%20THE%20SERVER to...

CVE-2025-69173

Unauthenticated Local File Inclusion in Tipsy = 1.1 versions...

CVE-2025-69150

Unauthenticated Local File Inclusion in Medeus = 1.14 versions...

CVE-2025-69148

Unauthenticated Local File Inclusion in Quirky = 1.23 versions...

CVE-2025-69136

Unauthenticated Local File Inclusion in Wanium = 1.9.8 versions...

CVE-2025-69143

Unauthenticated Local File Inclusion in Mission = 1.22 versions...

CVE-2025-69137

Subscriber Broken Access Control in Genemy = 1.6.6 versions...

CVE-2025-69121

Unauthenticated Local File Inclusion in Deliciosa = 1.10.0 versions...

CVE-2025-69125

Unauthenticated Local File Inclusion in Food Drop = 1.3 versions...

CVE-2025-69112

Unauthenticated Local File Inclusion in Planty = 1.14.0 versions...