CVE-2026-65546

CVE-2026-65546 affects the WordPress plugin Qode Tours (versions

CVE-2026-65542

CVE-2026-65542 concerns the WordPress WordPress Super Socializer plugin, affected versions

EUVD-2026-53971

Unauthenticated Broken Access Control in Staff Training = 1.0.7 versions...

CVE-2026-65541 WordPress Staff Training plugin <= 1.0.7 - Broken Access Control vulnerability

Unauthenticated Broken Access Control in Staff Training = 1.0.7 versions...

CVE-2026-65541

The CVE concerns WordPress Plugin “Staff Training” versions

EUVD-2026-53969

Unauthenticated SQL Injection in WP OAuth Server = 6.2.0 versions...

CVE-2026-65523

CVE-2026-65523 affects the WordPress plugin Formidable Forms Signature Online Contract Automation (versions

CVE-2026-65523

Unauthenticated Insecure Direct Object References IDOR in Formidable Forms Signature Online Contract Automation = 2.0.1 versions...

CVE-2026-65523 WordPress Formidable Forms Signature Online Contract Automation plugin <= 2.0.1 - Insecure Direct Object References (IDOR) vulnerability

Unauthenticated Insecure Direct Object References IDOR in Formidable Forms Signature Online Contract Automation = 2.0.1 versions...

CVE-2026-65517

The connected documents confirm a vulnerability in the WordPress plugin “Easy PayPal Buy Now Button” affecting versions up to 2.0.4, described as Unauthenticated Cross Site Scripting (XSS). No details on the root cause, exploit method, affected components beyond the plugin, impact metrics, or ava...

EUVD-2026-53968

Unauthenticated Cross Site Scripting XSS in Easy PayPal Buy Now Button = 2.0.4 versions...

CVE-2026-65515

The CVE-2026-65515 entry concerns the WordPress AffiliateWP plugin, affected version

CVE-2026-65508 WordPress Simply Schedule Appointments plugin <= 1.6.12.10 - SQL Injection vulnerability

Unauthenticated SQL Injection in Simply Schedule Appointments = 1.6.12.10 versions...

CVE-2026-65507 WordPress AIWU plugin <= 1.5.6 - Privilege Escalation vulnerability

Unauthenticated Privilege Escalation in AIWU = 1.5.6 versions...

CVE-2026-65507

Unauthenticated Privilege Escalation in AIWU = 1.5.6 versions...

CVE-2026-65504

CVE-2026-65504 describes an unauthenticated broken access control in the WordPress BOX NOW Delivery Croatia plugin, vulnerable in versions

EUVD-2026-53962

Unauthenticated Broken Access Control in BOX NOW Delivery Croatia = 3.3.0 versions...

CVE-2026-65502

CVE-2026-65502 applies to the WordPress Element Pack Elementor Addons plugin (versions

EUVD-2026-53961

Unauthenticated Bypass Vulnerability in Element Pack Elementor Addons = 8.7.13 versions...

CVE-2026-61982 WordPress SiteGuard WP Plugin plugin <= 1.8.6 - Cross Site Scripting (XSS) vulnerability

Unauthenticated Cross Site Scripting XSS in SiteGuard WP Plugin = 1.8.6 versions...