NPM: React Router: Open redirect leading to XSS

NPM: React Router: Open redirect leading to XSS vulnerability discovered by ? in WordPress Npm react-router-dom versions = 6.30.2, = 6.30.4...

CVE-2026-65526

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Themeisle Visualizer allows Blind SQL Injection. This issue affects Visualizer: from n/a through 4.0.1...

CVE-2026-65521

Unauthenticated Sensitive Data Exposure in WP Social Ninja = 4.3.0 versions...

CVE-2026-65512

Cross-Site request forgery CSRF vulnerability in Melapress WP Activity Log and Melapress WP Activity Log Premium allows Cross Site Request Forgery. This issue affects WP Activity Log: through 5.6.4; WP Activity Log Premium: through 5.6.4...

EUVD-2026-48140

Unauthenticated Cross Site Request Forgery CSRF in Kwayy HTML Sitemap = 4.0 versions...

CVE-2026-65535

Contributor Sensitive Data Exposure in TinyMCE Templates = 4.8.1 versions...

EUVD-2026-48136

Contributor Sensitive Data Exposure in TinyMCE Templates = 4.8.1 versions...

EUVD-2026-48134

Contributor Cross Site Scripting XSS in Smart SEO Tool = 4.1.2 versions...

EUVD-2026-48131

Subscriber Broken Access Control in TemplateSpare = 4.2.2 versions...

CVE-2026-65530

Subscriber Broken Access Control in TemplateSpare = 4.2.2 versions...

EUVD-2026-48127

Contributor SQL Injection in Visualizer = 4.0.6 versions...

CVE-2026-65526 WordPress Visualizer plugin <= 4.0.1 - SQL Injection vulnerability

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Themeisle Visualizer allows Blind SQL Injection. This issue affects Visualizer: from n/a through 4.0.1...

EUVD-2026-48118

Unauthenticated Cross Site Request Forgery CSRF in WP Activity Log = 5.6.4 versions...

CVE-2026-65511

CVE-2026-65511 affects the WordPress Manual - Documentation, Knowledge Base & Education WordPress Theme (versions

EUVD-2026-48117

Unauthenticated Cross Site Scripting XSS in Manual - Documentation, Knowledge Base & Education WordPress Theme = 7.5.4 versions...

EUVD-2026-48087

Unauthenticated Broken Access Control in Civi = 2.2.4 versions...

CVE-2026-65473

CVE-2026-65473 affects the WordPress Virtue/Ascend/Pinnacle Toolkit plugin (versions

EUVD-2026-48081

Unauthenticated Broken Access Control in AWP Classifieds = 4.4.7 versions...

EUVD-2026-48078

Custom role Server Side Request Forgery SSRF in JetBooking = 4.1.2 versions...

CVE-2026-65466

CVE-2026-65466 concerns a Server Side Request Forgery (SSRF) in the WordPress JetBooking plugin &lt;= 4.1.2 . The description specifies a custom role -driven SSRF vulnerability affecting JetBooking versions up to 4.1.2. The CVSSv3.1 metrics (source: Patchstack) indicate a network attack vector , ...