MINI-XRHV-X47F-262P

Bulletin has no description...

MINI-8735-R2RR-X87G

Bulletin has no description...

MINI-M23W-W8JF-9GH8

Bulletin has no description...

MINI-HR7W-X29Q-G93W

Bulletin has no description...

MINI-M4XG-8H39-8XRM

Bulletin has no description...

MINI-XMR3-8P36-66JV

Bulletin has no description...

MINI-3WJR-3JC5-2V7H

Bulletin has no description...

MINI-X857-XXHF-MM99

Bulletin has no description...

MINI-2WPG-MGMJ-XMM3

Bulletin has no description...

MINI-2C2J-MJ57-24C7

Bulletin has no description...

MINI-GFG2-VM3H-2H3H

Bulletin has no description...

MINI-9942-W893-99CF

Bulletin has no description...

MINI-JHHV-2VCV-4GHF

Bulletin has no description...

MINI-XC3Q-PRCC-M98Q

Bulletin has no description...

BELL-CVE-2026-14380

Bulletin has no description...

EUVD-2026-43156

The WCFM – Frontend Manager for WooCommerce plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 6.7.27. This is due to the plugin not properly verifying that a user is authorized to perform an action. This makes it possible for unauthenticated attacker...

CVE-2026-6803

The AI Chatbot & Workflow Automation by AIWU plugin for WordPress is vulnerable to Missing Authorization in all versions up to, and including, 1.4.12. This is due to missing capability checks and nonce verification on AJAX actions registered under both wpajax and wpajaxnopriv hooks, as the base...

CVE-2026-3552

The SurfLink - Ultimate Link Manager plugin for WordPress is vulnerable to unauthorized data modification due to a missing capability check on the ajaximport410 function in all versions up to 2.6.0. This is due to a missing capability check currentusercan and missing nonce verification...

CVE-2026-13353

The WP Ultimate CSV Importer – WordPress Import & Export for CSV, XML & Excel plugin for WordPress is vulnerable to Remote Code Execution in all versions up to, and including, 8.0.1 via the 'MappedFields' parameter. This is due to missing capability checks on the AJAX handlers for installaddon,...

EUVD-2026-43146

The ThriveDesk – Live Chat, AI Chatbot, Helpdesk & Knowledge Base plugin for WordPress is vulnerable to unauthorized cache deletion due to a missing capability check on the 'thrivedeskclearcache' AJAX action in all versions up to, and including, 2.1.7. This makes it possible for authenticated...