CVE-2026-66580

Contributor SQL Injection in Product Feed Manager = 7.12.0 versions...

CVE-2026-66576

Contributor Cross Site Scripting XSS in JetBlocks For Elementor = 1.5.2 versions...

CVE-2026-66579

Contributor Cross Site Scripting XSS in JetElements For Elementor = 2.9.2.1 versions...

CVE-2026-66578

Contributor Cross Site Scripting XSS in PropertyHive = 2.2.6 versions...

CVE-2026-66577

Contributor Cross Site Scripting XSS in JetSearch = 3.6.3 versions...

CVE-2026-66573

Contributor Cross Site Scripting XSS in JetTabs = 2.3.3.1 versions...

CVE-2026-66574

Contributor Cross Site Scripting XSS in Element Pack Elementor Addons = 8.8.3 versions...

CVE-2026-66572

Contributor Cross Site Scripting XSS in JetBlog = 2.4.10 versions...

CVE-2026-78294 WordPress Geo Mashup plugin <= 1.13.21 - Cross Site Scripting (XSS) vulnerability

Contributor Cross Site Scripting XSS in Geo Mashup = 1.13.21 versions...

CVE-2026-78294 WordPress Geo Mashup plugin <= 1.13.21 - Cross Site Scripting (XSS) vulnerability

Contributor Cross Site Scripting XSS in Geo Mashup = 1.13.21 versions...

EUVD-2026-81518

Contributor Cross Site Scripting XSS in Geo Mashup = 1.13.21 versions...

CVE-2026-73999 WordPress Cooked plugin <= 1.16.0 - Insecure Direct Object References (IDOR) vulnerability

Contributor Insecure Direct Object References IDOR in Cooked = 1.16.0 versions...

CVE-2026-74000 WordPress Simple Membership plugin <= 4.8.2 - Broken Access Control vulnerability

Contributor Broken Access Control in Simple Membership = 4.8.2 versions...

CVE-2026-74000

CVE-2026-74000 affects the WordPress Simple Membership plugin in versions ≤ 4.8.2 . The vulnerability is a Broken Access Control flaw discovered by Ananda Dhakal (Patchstack). The CVSS 3.1 score is 5.3 (Medium) with the vector AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N , indicating a network-exploitable...

CVE-2026-74000 WordPress Simple Membership plugin <= 4.8.2 - Broken Access Control vulnerability

Contributor Broken Access Control in Simple Membership = 4.8.2 versions...

CVE-2026-73999 WordPress Cooked plugin <= 1.16.0 - Insecure Direct Object References (IDOR) vulnerability

Contributor Insecure Direct Object References IDOR in Cooked = 1.16.0 versions...

CVE-2026-66617

A Contributor-level Cross Site Scripting (XSS) vulnerability affects the PublishPress Series WordPress plugin (aka "Organize Series") in versions

EUVD-2026-81503

Contributor Cross Site Scripting XSS in PublishPress Series = 3.1.3 versions...

CVE-2026-66617 WordPress PublishPress Series plugin <= 3.1.3 - Cross Site Scripting (XSS) vulnerability

Contributor Cross Site Scripting XSS in PublishPress Series = 3.1.3 versions...

CVE-2026-66608 WordPress Unlimited Elements For Elementor (Free Widgets, Addons, Templates) plugin <= 2.0.19 - Server Side Request Forgery (SSRF) vulnerability

Contributor Server Side Request Forgery SSRF in Unlimited Elements For Elementor Free Widgets, Addons, Templates = 2.0.19 versions...