CVE-2026-15180

The Tracking Code Manager plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via 'TCMErrorMessages' POST Parameter in all versions up to, and including, 2.6.0 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inje...

CVE-2026-15090

The Link Library plugin for WordPress is vulnerable to time-based SQL Injection via the 'linkurl' parameter in all versions up to, and including, 7.9.2 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it possible...

CVE-2026-17031

The Checkout Field Manager Checkout Manager for WooCommerce plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 7.9.6 This is due to the plugin not properly verifying that a user is authorized to perform an action. This makes it possible for...

CVE-2026-17001

The Import and export users and customers plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Custom Column User Meta Profile Fields in all versions up to, and including, 2.4.5 due to insufficient input sanitization and output escaping. This makes it possible for authenticated...

WordPress WholesaleX – All-in-One B2B Solution with Wholesale Pricing plugin <= 3.0.8 - Unauthenticated Limited Privilege Escalation vulnerability

Unauthenticated Limited Privilege Escalation vulnerability discovered by Ronnachai Chaipha rxnr in WordPress Plugin WholesaleX versions = 3.0.8...

CVE-2026-96537

The Tutor LMS WordPress plugin, in versions prior to 4.1.1 , contains a vulnerability where it fails to perform a capability check during the routine that regenerates managed pages. This flaw allows unauthenticated users to force-publish unpublished pages, overwrite existing content, create new p...

EUVD-2026-101852

The User Rights Access Manager WordPress plugin through 1.1.3 does not restrict access to one of its AJAX account-registration handlers and assigns newly registered accounts a role that was created as a copy of the administrator role, allowing unauthenticated attackers to register an...

EUVD-2026-101853

The Document Gallery WordPress plugin through 5.1.1 does not properly sanitise and escape user input before reflecting it inside an HTML attribute in the response of an unauthenticated AJAX action, leading to a Reflected Cross-Site Scripting vulnerability which can be exploited against any visito...

CVE-2026-96537 Tutor LMS < 4.1.1 - Unauthenticated Tutor Page Force-Publish and Content Overwrite

The Tutor LMS WordPress plugin before 4.1.1 does not perform a capability check in a routine that regenerates its managed pages, allowing unauthenticated users to force-publish unpublished pages and overwrite their content, create missing ones, and change the options that reference them...

CVE-2026-109145 User Rights Access Manager <= 1.1.3 - Unauthenticated Privilege Escalation via AJAX Registration Handler

The User Rights Access Manager WordPress plugin through 1.1.3 does not restrict access to one of its AJAX account-registration handlers and assigns newly registered accounts a role that was created as a copy of the administrator role, allowing unauthenticated attackers to register an...

CVE-2026-109145

The User Rights Access Manager WordPress plugin (versions

EUVD-2026-101854

The Tutor LMS WordPress plugin before 4.1.1 does not perform a capability check in a routine that regenerates its managed pages, allowing unauthenticated users to force-publish unpublished pages and overwrite their content, create missing ones, and change the options that reference them...

CVE-2026-109145 User Rights Access Manager <= 1.1.3 - Unauthenticated Privilege Escalation via AJAX Registration Handler

The User Rights Access Manager WordPress plugin through 1.1.3 does not restrict access to one of its AJAX account-registration handlers and assigns newly registered accounts a role that was created as a copy of the administrator role, allowing unauthenticated attackers to register an...

CVE-2026-96537 Tutor LMS < 4.1.1 - Unauthenticated Tutor Page Force-Publish and Content Overwrite

The Tutor LMS WordPress plugin before 4.1.1 does not perform a capability check in a routine that regenerates its managed pages, allowing unauthenticated users to force-publish unpublished pages and overwrite their content, create missing ones, and change the options that reference them...

CVE-2026-106031 Spin Wheel < 2.2.1 - Unauthenticated Coupon Code Disclosure via Forged Spin Result

The Spin Wheel WordPress plugin before 2.2.1 does not verify that a visitor actually performed a legitimate spin before returning and consuming a configured prize coupon, allowing unauthenticated users to disclose and drain the stored coupon codes of any campaign, including unpublished ones...

CVE-2026-104643

The Easy HTTPS Redirection (SSL) WordPress plugin, in versions before 2.0.2 , contains a vulnerability where it fails to perform capability checks on certain AJAX actions . This flaw allows any authenticated user , such as a Subscriber, to access URLs collected by the plugin's content scanner fro...

EUVD-2026-101851

The Spin Wheel WordPress plugin before 2.2.1 does not verify that a visitor actually performed a legitimate spin before returning and consuming a configured prize coupon, allowing unauthenticated users to disclose and drain the stored coupon codes of any campaign, including unpublished ones...

CVE-2026-106031

The Spin Wheel WordPress plugin, in versions prior to 2.2.1 , is vulnerable to Unauthenticated Coupon Code Disclosure due to a lack of verification that a visitor performed a legitimate spin. Attackers can forge spin results to disclose and drain stored prize coupon codes from any campaign, inclu...

WordPress Spin Wheel plugin < 2.2.1 - Unauthenticated Coupon Code Disclosure vulnerability

Unauthenticated Coupon Code Disclosure vulnerability discovered by Aditya Gurav in WordPress Plugin Spin Wheel versions 2.2.1...

WordPress Easy HTTPS Redirection (SSL) plugin < 2.0.2 - Subscriber+ Scan Result Disclosure and Site-Wide URL Rewrite vulnerability

Subscriber+ Scan Result Disclosure and Site-Wide URL Rewrite vulnerability discovered by Mohammed Abd Alrahman in WordPress Plugin Easy HTTPS Redirection SSL versions 2.0.2...