EUVD-2026-66936

Subscriber Cross Site Scripting XSS in Fluent Boards Pro = 2.0.11 versions...

CVE-2026-78273

CVE-2026-78273 affects the Fluent Boards Pro WordPress plugin in versions 2.0.11 and earlier . The vulnerability is a Cross-Site Scripting (XSS) flaw exploitable by a user with subscriber-level privileges. The CVSS 3.1 score is 6.5 (Medium) with a vector of AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L, in...

CVE-2026-78273 WordPress Fluent Boards Pro plugin <= 2.0.11 - Cross Site Scripting (XSS) vulnerability

Subscriber Cross Site Scripting XSS in Fluent Boards Pro = 2.0.11 versions...

EUVD-2026-66937

Editor Arbitrary File Upload in Fluent Boards Pro = 2.0.11 versions...

CVE-2026-78274

CVE-2026-78274 affects the WordPress Fluent Boards Pro plugin in versions

CVE-2026-78271

CVE-2026-78271 is an Editor Privilege Escalation vulnerability in the WordPress FluentCRM Pro plugin, affecting versions 3.1.12 and earlier . The flaw was discovered by Ananda Dhakal via Patchstack. It allows an authenticated user with the Editor role to escalate privileges, rated CVSS 7.2 (HIGH)...

EUVD-2026-66935

Editor Privilege Escalation in FluentCRM Pro = 3.1.12 versions...

CVE-2026-78271 WordPress FluentCRM Pro plugin <= 3.1.12 - Privilege Escalation vulnerability

Editor Privilege Escalation in FluentCRM Pro = 3.1.12 versions...

CVE-2026-32566

CVE-2026-32566 is an unauthenticated privilege escalation vulnerability in the ACPT (Pro) – Custom Post Types Plugin for WordPress , affecting versions 2.0.63 and earlier . The flaw was discovered by VDsec and rated CVSS 9.8 (Critical) by Patchstack, with a vector of AV:N/AC:L/PR:N/UI:N/S:U/C:H/I...

CVE-2026-32566 WordPress ACPT (Pro) - Custom Post Types Plugin for WordPress plugin <= 2.0.63 - Privilege Escalation vulnerability

Unauthenticated Privilege Escalation in ACPT Pro - Custom Post Types Plugin for WordPress = 2.0.63 versions...

EUVD-2026-66991

Unauthenticated Privilege Escalation in ACPT Pro - Custom Post Types Plugin for WordPress = 2.0.63 versions...

EUVD-2026-66990

Subscriber SQL Injection in ACPT Pro - Custom Post Types Plugin for WordPress = 2.0.63 versions...

CVE-2026-32564

CVE-2026-32564 is a Subscriber-level SQL Injection in the ACPT (Pro) – Custom Post Types Plugin for WordPress (versions ≤ 2.0.63 ), discovered by VDsec. The vulnerability allows a low-privilege (Subscriber) authenticated user to inject SQL, resulting in HIGH confidentiality impact with changed sc...

CVE-2026-32564 WordPress ACPT (Pro) - Custom Post Types Plugin for WordPress plugin <= 2.0.63 - SQL Injection vulnerability

Subscriber SQL Injection in ACPT Pro - Custom Post Types Plugin for WordPress = 2.0.63 versions...

EUVD-2026-66988

Unauthenticated SQL Injection in Visitor Traffic Real Time Statistics Pro = 11.17 versions...

PT-2026-82445

Name of the Vulnerable Software and Affected Versions ACPT Pro - Custom Post Types Plugin for WordPress versions prior to 2.0.64 Description An unauthenticated privilege escalation issue allows an attacker to create a WordPress administrator account. This flaw has been exploited in the wild via t...

CVE-2025-61479

An issue in Vanderbilt Industries, Acre Security SPC5300.000 Main Board v.3.14.1 allows a physically proximate attacker to cause a denial of service via the SPC Connect Pro software accepts replayed application-layer payloads injected into an active TCP session...

WordPress FluentBooking Pro plugin <= 2.2.4 - Cross Site Request Forgery (CSRF) vulnerability

Cross Site Request Forgery CSRF vulnerability discovered by Ananda Dhakal Patchstack in WordPress Plugin FluentBooking Pro versions = 2.2.4...

WordPress FluentPlayer Pro plugin <= 1.3.2 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by Ananda Dhakal Patchstack in WordPress Plugin FluentPlayer Pro versions = 1.3.2...

CVE-2026-77551

A malicious actor with access to the network and under certain conditions could exploit an Improper Access Control vulnerability found in UniFi Connect Display Cast Pro to escalate privileges on the device...