CVE-2026-18547

The Ultimate Member – User Profile, Registration, Login, Member Directory, Content Restriction & Membership Plugin plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Textarea Profile Field with HTML Support DOM Gadget via id Attribute in all versions up to, and including, 2.12....

CVE-2026-17587

The My Agile Privacy® – CMP, Cookie Consent & Privacy Tools plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 3.3.6. This is due to the plugin not properly verifying that a user is authorized to perform an action. This makes it possible for...

WordPress Events Made Easy plugin < 3.1.2 - Unauthenticated Payment Bypass vulnerability

Unauthenticated Payment Bypass vulnerability discovered by Haitam Lazaar in WordPress Plugin Events Made Easy versions 3.1.2...

WordPress Checkimate plugin <= 1.0.13 - Unauthenticated License Deactivation via Hardcoded Secret vulnerability

Unauthenticated License Deactivation via Hardcoded Secret vulnerability discovered by Pedro Pinho in WordPress Plugin Checkimate versions = 1.0.13...

WordPress Zportals plugin < 6.3.4 - Subscriber+ Arbitrary File Upload vulnerability

Subscriber+ Arbitrary File Upload vulnerability discovered by Mike Gozdiskowski in WordPress Plugin Zportals versions 6.3.4...

WordPress The GDPR Framework plugin < 2.4.0 - Unauthenticated Consent Record Forgery and Do Not Sell Requests Spam vulnerability

Unauthenticated Consent Record Forgery and Do Not Sell Requests Spam vulnerability discovered by Pedro Pinho in WordPress Plugin GDPR Framework By Data443 versions 2.4.0...

WordPress MagicForm plugin <= 0.1.3 - Unauthenticated Arbitrary File Upload to RCE vulnerability

Unauthenticated Arbitrary File Upload to RCE vulnerability discovered by 0xBassia in WordPress Plugin MagicForm versions = 0.1.3...

WordPress PeproDev WooCommerce Receipt Uploader plugin <= 2.8.0 - Unauthenticated Image Attachment Disclosure via IDOR vulnerability

Unauthenticated Image Attachment Disclosure via IDOR vulnerability discovered by Shivamani Vastrala in WordPress Plugin PeproDev WooCommerce Receipt Uploader versions = 2.8.0...

WordPress PeproDev WooCommerce Receipt Uploader plugin <= 2.8.0 - Unauthenticated Order Receipt Tampering via IDOR vulnerability

Unauthenticated Order Receipt Tampering via IDOR vulnerability discovered by Lyris Vale in WordPress Plugin PeproDev WooCommerce Receipt Uploader versions = 2.8.0...

WordPress Tutor LMS plugin < 3.9.14 - Subscriber+ Paid Course Content Disclosure via Enrollment Check Bypass vulnerability

Subscriber+ Paid Course Content Disclosure via Enrollment Check Bypass vulnerability discovered by John Umoru in WordPress Plugin Tutor LMS versions 3.9.14...

WordPress InPost PL plugin < 1.9.1 - Unauthenticated WooCommerce Order Parcel-Locker Hijacking vulnerability

Unauthenticated WooCommerce Order Parcel-Locker Hijacking vulnerability discovered by Pedro Pinho in WordPress Plugin InPost PL versions 1.9.1...

WordPress CoCart plugin < 4.9.0 - Unauthenticated Arbitrary Price Manipulation vulnerability

Unauthenticated Arbitrary Price Manipulation vulnerability discovered by hoangphuong in WordPress Plugin CoCart – Headless ecommerce versions 4.9.0...

WordPress Fluent Booking plugin < 2.1.2 - Calendar Manager+ Sensitive Information Disclosure via Attendee Export vulnerability

Calendar Manager+ Sensitive Information Disclosure via Attendee Export vulnerability discovered by Md Amin Ullah Sheikh in WordPress Plugin Fluent Booking versions 2.1.2...

WordPress Agile Store Locator plugin < 1.6.9 - Admin+ Arbitrary File Read via Path Traversal vulnerability

Admin+ Arbitrary File Read via Path Traversal vulnerability discovered by Abisheik M in WordPress Plugin Store Locator WordPress versions 1.6.9...

WordPress WP Go Maps plugin < 10.0.10 - Unauthenticated Sensitive Information Disclosure via Marker ID vulnerability

Unauthenticated Sensitive Information Disclosure via Marker ID vulnerability discovered by Sudhanshu Chauhan RedHunt Labs in WordPress Plugin WP Go Maps versions 10.0.10...

WordPress Frontend File Manager Plugin plugin <= 23.6 - Author+ Arbitrary Post Deletion vulnerability

Author+ Arbitrary Post Deletion vulnerability discovered by Tiago Ferreira in WordPress Plugin Frontend File Manager versions = 23.6...

WordPress Really Simple Security plugin < 9.5.10.1 - Two-Factor OTP Bypass vulnerability

Two-Factor OTP Bypass vulnerability discovered by John Umoru in WordPress Plugin Really Simple SSL versions 9.5.10.1...

WordPress Eupago Gateway For Woocommerce plugin < 4.7.2 - Unauthenticated Arbitrary Refund Initiation vulnerability

Unauthenticated Arbitrary Refund Initiation vulnerability discovered by Pedro Pinho in WordPress Plugin Eupago Gateway For Woocommerce versions 4.7.2...

CVE-2026-18547 Ultimate Member <= 2.12.1 - Authenticated (Subscriber+) Stored Cross-Site Scripting via Textarea Profile Field with HTML Support (DOM Gadget via id Attribute)

The Ultimate Member – User Profile, Registration, Login, Member Directory, Content Restriction & Membership Plugin plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Textarea Profile Field with HTML Support DOM Gadget via id Attribute in all versions up to, and including, 2.12....

CVE-2026-18547 Ultimate Member <= 2.12.1 - Authenticated (Subscriber+) Stored Cross-Site Scripting via Textarea Profile Field with HTML Support (DOM Gadget via id Attribute)

The Ultimate Member – User Profile, Registration, Login, Member Directory, Content Restriction & Membership Plugin plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Textarea Profile Field with HTML Support DOM Gadget via id Attribute in all versions up to, and including, 2.12....