PT-2026-80813

Subscriber Server Side Request Forgery SSRF in FluentCRM Pro = 3.1.12 versions...

PT-2026-80812

Subscriber Broken Access Control in Fluent Support Pro = 2.3.1 versions...

CVE-2026-32554: Improper Neutralization of Special Elements used in an SQL Command

Unauthenticated SQL Injection in WooBeWoo Product Filter Pro = 3.1.8 versions...

CVE-2026-78278: Authorization Bypass Through User-Controlled Key

Subscriber Insecure Direct Object References IDOR in Fluent Boards Pro = 2.0.11 versions...

CVE-2026-78279: Cross-Site Request Forgery (CSRF)

Unauthenticated Cross Site Request Forgery CSRF in Fluent Support Pro = 2.3.1 versions...

CVE-2026-78272: Missing Authorization

Subscriber Broken Access Control in Fluent Support Pro = 2.3.1 versions...

CVE-2026-78270: Improper Neutralization of Special Elements used in an SQL Command

Author SQL Injection in FluentCRM Pro = 3.1.12 versions...

CVE-2026-66585: Insertion of Sensitive Information Into Sent Data

Unauthenticated Sensitive Data Exposure in WP Cafe Pro 3.0.15 versions...

CVE-2026-32558: Incorrect Privilege Assignment

Unauthenticated Privilege Escalation in Affiliate Pro - Affiliate Program for WooCommerce & WordPress = 8.9.1 versions...

CVE-2026-32478: Improper Neutralization of Special Elements used in an SQL Command

Subscriber SQL Injection in WP Project Manager Pro = 4.0.1 versions...

CVE-2026-32477: Improper Limitation of a Pathname to a Restricted Directory

Unauthenticated Arbitrary File Deletion in ShopBuilder Pro – Elementor WooCommerce Builder Addons = 2.2.0 versions...

PT-2026-80838

Unauthenticated Sensitive Data Exposure in WP Cafe Pro 3.0.15 versions...

PT-2026-80814

Subscriber Insecure Direct Object References IDOR in Fluent Boards Pro = 2.0.11 versions...

PT-2026-80835

Subscriber SQL Injection in WP Project Manager Pro = 4.0.1 versions...

PT-2026-80833

Unauthenticated Cross Site Scripting XSS in Brave Conversion Engine PRO = 0.8.6 versions...

PT-2026-80815

Unauthenticated Cross Site Request Forgery CSRF in Fluent Support Pro = 2.3.1 versions...

PT-2026-80837

Unauthenticated Privilege Escalation in Affiliate Pro - Affiliate Program for WooCommerce & WordPress = 8.9.1 versions...

PT-2026-80811

Author SQL Injection in FluentCRM Pro = 3.1.12 versions...

PT-2026-81046

Name of the Vulnerable Software and Affected Versions WooBeWoo Product Filter Pro versions prior to 3.1.9 Description An unauthenticated SQL Injection exists in the software. SQL Injection is a type of vulnerability that allows an attacker to interfere with the queries that an application makes t...

PT-2026-81052

Name of the Vulnerable Software and Affected Versions ACPT Pro - Custom Post Types Plugin for WordPress versions 2.0.63 and earlier Description PHP Object Injection occurs when an application deserializes untrusted data, allowing an attacker to manipulate the resulting object and potentially...