PT-2026-64964

Contributor Server Side Request Forgery SSRF in Feedzy = 5.2.4 versions...

CVE-2026-65481

Contributor Local File Inclusion in Vino = 1.9 versions...

CVE-2026-65450

Contributor SQL Injection in MapSVG = 8.14.0 versions...

CVE-2026-27403

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in NerdPress Hubbub Lite allows Stored XSS. This issue affects Hubbub Lite: from n/a through 1.36.3...

EUVD-2026-48124

Contributor Cross Site Scripting XSS in Manual - Documentation, Knowledge Base & Education WordPress Theme = 7.5.4 versions...

CVE-2026-65480

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in CodexThemes TheGem allows DOM-Based XSS. This issue affects TheGem: from n/a before 5.12.1.1...

PT-2026-63892

Contributor Cross Site Scripting XSS in Fluent Support = 2.3.0 versions...

CVE-2026-57648

Contributor Broken Access Control in Nelio Content = 4.3.4 versions...

EUVD-2026-39667

Contributor SQL Injection in Contest Gallery = 30.0.0 versions...

EUVD-2026-39750

Contributor Insecure Direct Object References IDOR in PPWP = 1.9.19 versions...

CVE-2026-57321

Contributor Arbitrary File Deletion in H5P = 1.17.7 versions...

PT-2026-52438

Contributor Broken Access Control in Slim SEO = 4.6.2 versions...

CVE-2025-15659

Contributor Cross Site Scripting XSS in Elizaibots = 1.0.2 versions...