WordPress Slim SEO – AI SEO Plugin, Lightweight, Fast & Automated plugin <= 4.11.1 - Authenticated (Subscriber+) Arbitrary Shortcode Execution vulnerability

Authenticated Subscriber+ Arbitrary Shortcode Execution vulnerability discovered by Kuba in WordPress Plugin Slim SEO versions = 4.11.1...

WordPress Tutor LMS – eLearning and online course solution plugin <= 4.0.8 - Authenticated (Subscriber+) Reflected DOM-Based Cross-Site Scripting vulnerability

Authenticated Subscriber+ Reflected DOM-Based Cross-Site Scripting vulnerability discovered by Sevada797 in WordPress Plugin Tutor LMS versions = 4.0.8...

CVE-2026-110381

The Simply Schedule Appointments WordPress plugin (versions

CVE-2026-110381 WordPress Simply Schedule Appointments plugin <= 1.6.12.35 - Insecure Direct Object References (IDOR) vulnerability

Authorization Bypass Through User-Controlled Key vulnerability in NSquared Simply Schedule Appointments simply-schedule-appointments allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Simply Schedule Appointments: from n/a through 1.6.12.35...

EUVD-2026-102234

Authorization Bypass Through User-Controlled Key vulnerability in NSquared Simply Schedule Appointments simply-schedule-appointments allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Simply Schedule Appointments: from n/a through 1.6.12.35...

EUVD-2026-102232

Missing Authorization vulnerability in Meow Apps AI Engine ai-engine allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects AI Engine: from n/a through 3.8.3...

CVE-2026-110888 WordPress AI Engine plugin <= 3.8.3 - Broken Access Control vulnerability

Missing Authorization vulnerability in Meow Apps AI Engine ai-engine allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects AI Engine: from n/a through 3.8.3...

CVE-2026-110888

The Meow Apps AI Engine plugin for WordPress (versions up to and including 3.8.3 ) is vulnerable to a Broken Access Control issue (CWE-862). This Missing Authorization vulnerability allows for the exploitation of incorrectly configured access control security levels. While the specific technical ...

EUVD-2026-102231

Missing Authorization vulnerability in WordLift Srl WordLift wordlift allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WordLift: from n/a through 3.54.15...

CVE-2026-110891

The WordLift WordPress plugin (versions up to and including 3.54.15 ) is vulnerable to a Broken Access Control issue (CWE-862). The flaw stems from Missing Authorization , which allows for the exploitation of Incorrectly Configured Access Control Security Levels . This vulnerability is accessible...

CVE-2026-110891 WordPress WordLift plugin <= 3.54.15 - Broken Access Control vulnerability

Missing Authorization vulnerability in WordLift Srl WordLift wordlift allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WordLift: from n/a through 3.54.15...

WordPress AI Engine plugin <= 3.8.3 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by dzaku in WordPress Plugin AI Engine versions = 3.8.3...

WordPress WordLift plugin <= 3.54.15 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by Peter Tang in WordPress Plugin WordLift versions = 3.54.15...

CVE-2026-110367

The APIExperts Square for WooCommerce plugin (versions up to and including 4.7.5 ) is vulnerable to a Broken Access Control issue. This Missing Authorization vulnerability (CWE-862) allows for the exploitation of incorrectly configured access control security levels within the plugin. The impact ...

CVE-2026-110367 WordPress APIExperts Square for WooCommerce plugin <= 4.7.5 - Broken Access Control vulnerability

Missing Authorization vulnerability in WPExperts APIExperts Square for WooCommerce woosquare allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects APIExperts Square for WooCommerce: from n/a through 4.7.5...

EUVD-2026-102229

Missing Authorization vulnerability in WPExperts APIExperts Square for WooCommerce woosquare allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects APIExperts Square for WooCommerce: from n/a through 4.7.5...

WordPress APIExperts Square for WooCommerce plugin <= 4.7.5 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by Peter Tang in WordPress Plugin APIExperts Square for WooCommerce versions = 4.7.5...

CVE-2026-110371 WordPress Strong Testimonials plugin <= 3.3.12 - Broken Access Control vulnerability

Missing Authorization vulnerability in WP Chill Strong Testimonials strong-testimonials allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Strong Testimonials: from n/a through 3.3.12...

EUVD-2026-102228

Missing Authorization vulnerability in WP Chill Strong Testimonials strong-testimonials allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Strong Testimonials: from n/a through 3.3.12...

CVE-2026-110371

The WP Chill Strong Testimonials plugin (versions up to and including 3.3.12 ) is vulnerable to a Missing Authorization vulnerability (CWE-862 ). This flaw allows an attacker to exploit incorrectly configured access control security levels . No specific exploit code or remediation steps are provi...