CVE-2026-66681 WordPress theme My Login plugin <= 7.1.14 - Cross Site Request Forgery (CSRF) vulnerability

Unauthenticated Cross Site Request Forgery CSRF in Theme My Login = 7.1.14 versions...

EUVD-2026-53891

Unauthenticated Arbitrary File Upload in Type Hub = 2.0.6 versions...

EUVD-2026-53892

Contributor Broken Access Control in Advanced Custom Fields: Font Awesome Field = 6.1.1 versions...

CVE-2026-66678

Contributor Broken Access Control in Advanced Custom Fields: Font Awesome Field = 6.1.1 versions...

CVE-2026-66665

CVE-2026-66665 affects the WordPress Type Hub plugin (versions

CVE-2026-66678

CVE-2026-66678 concerns a Broken Access Control issue in the WordPress plugin Advanced Custom Fields: Font Awesome Field , affecting versions up to and including 6.1.1 . The connected sources consistently describe the vulnerability class and affected plugin/version but do not provide technical de...

CVE-2026-66664

Unauthenticated Cross Site Scripting XSS in SEO Plugin by Squirrly SEO = 14.2.0 versions...

EUVD-2026-53889

Unauthenticated Cross Site Scripting XSS in WP Data Access = 5.5.79 versions...

EUVD-2026-53888

Unauthenticated Privilege Escalation in Frontend Admin by DynamiApps = 3.29.10 versions...

EUVD-2026-53887

Subscriber Broken Access Control in Frontend Admin by DynamiApps = 3.29.10 versions...

CVE-2026-66470 WordPress Frontend Admin by DynamiApps plugin <= 3.29.10 - Broken Access Control vulnerability

Subscriber Broken Access Control in Frontend Admin by DynamiApps = 3.29.10 versions...

CVE-2026-66452

Unauthenticated Broken Access Control in Legal Text Connector of the IT-Recht Kanzlei = 1.0.13 versions...

CVE-2026-66457

CVE-2026-66457 describes an unauthenticated cross-site scripting (XSS) vulnerability in the WordPress Events Manager plugin version ≤ 7.4.1. The issue is identified as an XSS flaw; no root-cause specifics are provided in the documents. Exploitation status and precise impact vectors are not detail...

CVE-2026-66452

CVE-2026-66452 affects the WordPress plugin “Legal Text Connector” by IT-Recht Kanzlei, versions

CVE-2026-66452 WordPress Legal Text Connector of the IT-Recht Kanzlei plugin <= 1.0.13 - Broken Access Control vulnerability

Unauthenticated Broken Access Control in Legal Text Connector of the IT-Recht Kanzlei = 1.0.13 versions...

EUVD-2026-53885

Unauthenticated Broken Access Control in Legal Text Connector of the IT-Recht Kanzlei = 1.0.13 versions...

CVE-2026-66451

Unauthenticated Broken Authentication in WP Event SOlution = 4.1.9 versions...

EUVD-2026-53884

Unauthenticated Broken Authentication in WP Event SOlution = 4.1.9 versions...

CVE-2026-66439 WordPress Advanced AJAX Product Filters plugin <= 3.2.0.3 - Cross Site Scripting (XSS) vulnerability

Unauthenticated Cross Site Scripting XSS in Advanced AJAX Product Filters = 3.2.0.3 versions...

CVE-2026-66440

The CVE-2026-66440 entry documents an Unauthenticated Cross-Site Scripting (XSS) vulnerability in the WPIDE – File Manager & Code Editor WordPress plugin up to version 3.5.7. Affected component is the plugin’s WPIDE File Manager/Code Editor functionality; the flaw is an XSS issue exploitable with...