EUVD-2026-81503

Contributor Cross Site Scripting XSS in PublishPress Series = 3.1.3 versions...

EUVD-2026-81518

Contributor Cross Site Scripting XSS in Geo Mashup = 1.13.21 versions...

EUVD-2026-81493

Contributor Cross Site Scripting XSS in JetBlog = 2.4.10 versions...

EUVD-2026-81501

Contributor SQL Injection in Product Feed Manager = 7.12.0 versions...

EUVD-2026-81497

Contributor Cross Site Scripting XSS in JetBlocks For Elementor = 1.5.2 versions...

EUVD-2026-81498

Contributor Cross Site Scripting XSS in JetSearch = 3.6.3 versions...

EUVD-2026-81495

Contributor Cross Site Scripting XSS in Element Pack Elementor Addons = 8.8.3 versions...

EUVD-2026-81494

Contributor Cross Site Scripting XSS in JetTabs = 2.3.3.1 versions...

EUVD-2026-81499

Contributor Cross Site Scripting XSS in PropertyHive = 2.2.6 versions...

guac

GUAC: Graph for Understanding Artifact Composition Note: GUAC is under active development - if you are interested in contributing, please look at contributor guide. GUAC is an OpenSSF incubating project under the Supply Chain Integrity WG. Graph for Understanding Artifact Composition GUAC...

CVE-2026-74000

CVE-2026-74000 affects the WordPress Simple Membership plugin in versions ≤ 4.8.2 . The vulnerability is a Broken Access Control flaw discovered by Ananda Dhakal (Patchstack). The CVSS 3.1 score is 5.3 (Medium) with the vector AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N , indicating a network-exploitable...

CVE-2026-66608

Contributor Server Side Request Forgery SSRF in Unlimited Elements For Elementor Free Widgets, Addons, Templates = 2.0.19 versions...

CVE-2026-66617

Contributor Cross Site Scripting XSS in PublishPress Series = 3.1.3 versions...

CVE-2026-66579

Contributor Cross Site Scripting XSS in JetElements For Elementor = 2.9.2.1 versions...

CVE-2026-66578

Contributor Cross Site Scripting XSS in PropertyHive = 2.2.6 versions...

CVE-2026-66577

Contributor Cross Site Scripting XSS in JetSearch = 3.6.3 versions...

CVE-2026-66576

Contributor Cross Site Scripting XSS in JetBlocks For Elementor = 1.5.2 versions...

CVE-2026-66572

CVE-2026-66572 is a Contributor-level Cross Site Scripting (XSS) vulnerability in the WordPress JetBlog plugin (versions

CVE-2026-66573

CVE-2026-66573 is a Contributor-level Cross Site Scripting (XSS) vulnerability in the WordPress JetTabs plugin, affecting versions 2.3.3.1 and earlier . The vulnerability was discovered by nh4tvd and rated CVSS 3.1 6.5 (Medium) with a changed scope, indicating potential impact beyond the vulnerab...

CVE-2024-23724

Installation Automatic installation recommended To test the vulnerability, we need two accounts: an account with the administrator role owner and an account with the contributor role. In Ghost CMS, you must first access the admin panel to create the owner account, then invite a contributor from...