CVE-2026-56038

Contributor Privilege Escalation in Frisbii Pay = 1.8.2 versions...

CVE-2026-56008

Contributor Privilege Escalation in Fusion Builder = 3.15.4 versions...

EUVD-2026-39667

Contributor SQL Injection in Contest Gallery = 30.0.0 versions...

EUVD-2026-39765

Contributor Cross Site Scripting XSS in Magazine Blocks = 1.8.3 versions...

EUVD-2026-39762

Contributor Local File Inclusion in Panorama Viewer – 360 Degree Image + Video Viewer = 1.6.1 versions...

CVE-2026-57642

Contributor SQL Injection in Gallery = 4.7.8 versions...

EUVD-2026-39757

Contributor SQL Injection in Gallery = 4.7.8 versions...

EUVD-2026-39752

Contributor SQL Injection in wpForo Forum = 3.0.9 versions...

EUVD-2026-39750

Contributor Insecure Direct Object References IDOR in PPWP = 1.9.19 versions...

CVE-2026-57618

Contributor Cross Site Scripting XSS in Neve PRO = 3.1.2 versions...

CVE-2026-57321

Contributor Arbitrary File Deletion in H5P = 1.17.7 versions...

EUVD-2026-39733

Contributor Arbitrary File Deletion in H5P = 1.17.7 versions...

EUVD-2026-39728

Contributor Remote Code Execution RCE in Blocksy Companion Pro = 2.1.45 versions...

EUVD-2026-39700

Contributor Privilege Escalation in Frisbii Pay = 1.8.2 versions...

EUVD-2026-39685

Contributor Privilege Escalation in Fusion Builder = 3.15.4 versions...

CVE-2026-57653: Improper Neutralization of Special Elements used in an SQL Command

Contributor SQL Injection in WP Job Portal = 2.5.2 versions...

CVE-2026-57643: Improper Neutralization of Special Elements used in an SQL Command

Contributor SQL Injection in WP Post Author = 3.9.1 versions...

PT-2026-52812

Name of the Vulnerable Software and Affected Versions Gallery versions prior to 4.7.9 Description An issue exists that allows for SQL Injection, a technique where malicious SQL statements are inserted into entry fields for execution, specifically affecting contributors. Recommendations Update to ...

CVE-2025-68074: Improper Neutralization of Input During Web Page Generation

Contributor Cross Site Scripting XSS in Image Carousel = 1.0.0.41 versions...

PT-2026-52718

Name of the Vulnerable Software and Affected Versions Image Carousel versions prior to 1.0.0.42 Description Cross Site Scripting XSS exists in the Contributor role, allowing an attacker to execute malicious scripts in the browser of other users. Recommendations Update Image Carousel to a version...