CVE-2026-118075

The WP Media folders plugin for WordPress, affecting versions

EUVD-2026-112992

Contributor PHP Object Injection in WP Media folders = 1.1.10 versions...

CVE-2026-118074

The Finale Lite WordPress plugin (versions

EUVD-2026-112991

Shop manager PHP Object Injection in Finale Lite = 2.21.0 versions...

CVE-2026-116869

The WordPress myPOS Checkout plugin versions

CVE-2026-118073

The News Kit Elementor Addons plugin for WordPress, in versions

EUVD-2026-112990

Subscriber PHP Object Injection in News Kit Elementor Addons = 1.5.0 versions...

EUVD-2026-112989

Shop manager PHP Object Injection in myPOS Checkout = 1.4.5 versions...

CVE-2026-116868 WordPress BuddyPress Xprofile Custom Field Types plugin <= 1.3.1 - PHP Object Injection vulnerability

Subscriber PHP Object Injection in BuddyPress Xprofile Custom Field Types = 1.3.1 versions...

CVE-2026-116868

The BuddyPress Xprofile Custom Field Types plugin for WordPress, versions

EUVD-2026-112988

Subscriber PHP Object Injection in BuddyPress Xprofile Custom Field Types = 1.3.1 versions...

CVE-2026-116867 WordPress Dynamic QR Code – generator plugin <= 1.0.1 - PHP Object Injection vulnerability

Contributor PHP Object Injection in Dynamic QR Code generator = 1.0.1 versions...

CVE-2026-116867

The WordPress Dynamic QR Code – generator plugin versions

EUVD-2026-112987

Contributor PHP Object Injection in Dynamic QR Code generator = 1.0.1 versions...

EUVD-2026-112985

Editor PHP Object Injection in Zippy = 1.7.0 versions...

CVE-2026-116865

The Zippy WordPress plugin versions

CVE-2026-116866

The Extra Fees Plugin for WooCommerce (versions

EUVD-2026-112986

Contributor PHP Object Injection in Extra Fees Plugin for WooCommerce = 4.4.0 versions...

CVE-2026-116864

The WPCargo Track & Trace WordPress plugin versions

EUVD-2026-112984

Author PHP Object Injection in WPCargo Track & Trace = 8.0.5 versions...