PT-2026-63869

Name of the Vulnerable Software and Affected Versions ShopLentor Pro versions prior to 2.8.6 Description The ShopLentor Pro plugin for WordPress contains a broken access control issue. A missing capability check in a function allows unauthenticated attackers to perform unauthorized actions...

CVE-2026-57767: Improper Neutralization of Input During Web Page Generation

Unauthenticated Cross Site Scripting XSS in WP Google Maps Pro = 10.1.02 versions...

CVE-2026-57699: Improper Neutralization of Input During Web Page Generation

Subscriber Cross Site Scripting XSS in Slider Pro = 4.8.13 versions...

CVE-2026-57373: Improper Neutralization of Input During Web Page Generation

Customer Cross Site Scripting XSS in Funnel Kit Funnel Builder PRO = 3.15.0.4 versions...

CVE-2026-57701: Improper Neutralization of Input During Web Page Generation

Unauthenticated Cross Site Scripting XSS in Real Estate Manager Pro = 12.8.5 versions...

CVE-2026-57374: Improper Neutralization of Input During Web Page Generation

Unauthenticated Cross Site Scripting XSS in Funnel Kit Funnel Builder PRO = 3.15.0.7 versions...

CVE-2026-65713: Improper Limitation of a Pathname to a Restricted Directory

Joomla Extension - regularlabs.com - Insecure path handling in Modals Pro extension - Modals gallery paths could enumerate unintended directories...

CVE-2026-64874: Exposure of Sensitive Information to an Unauthorized Actor

Joomla Extension - regularlabs.com - CDN Credential leakage Cache Cleaner Pro extension - CDN credentials were exposed in administrator request URLs...

CVE-2026-65493: Deserialization of Untrusted Data

Subscriber PHP Object Injection in Dokan Pro = 5.0.2 versions...

CVE-2026-65495: Missing Authorization

Unauthenticated Broken Access Control in Dokan Pro = 5.0.3 versions...

CVE-2026-65492: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in weDevs Dokan Pro allows Reflected XSS. This issue affects Dokan Pro: from n/a before 5.0.7...

CVE-2026-61973: Missing Authorization

Subscriber Broken Access Control in ShopLentor Pro = 2.8.5 versions...

CVE-2026-61972: Missing Authorization

Unauthenticated Broken Access Control in ShopLentor Pro = 2.8.5 versions...

PT-2026-63916

Unauthenticated Broken Access Control in Dokan Pro = 5.0.3 versions...

PT-2026-63913

Unauthenticated Cross Site Scripting XSS in Dokan Pro = 5.0.0 versions...

PT-2026-63871

Name of the Vulnerable Software and Affected Versions Simple Link Directory Pro versions prior to 15.0.9 Description An unauthenticated Cross-Site Request Forgery CSRF issue exists in the Simple Link Directory Pro plugin for WordPress. This occurs due to missing or incorrect nonce validation—a...

CVE-2026-64872: Improper Limitation of a Pathname to a Restricted Directory

Joomla Extension - regularlabs.com - Path traversal in Cache Cleaner Pro extension - Custom purge and log paths could escape the site webroot directory...

PT-2026-63915

Subscriber SQL Injection in Dokan Pro = 5.0.2 versions...

CVE-2026-64873: Server-Side Request Forgery (SSRF)

Joomla Extension - regularlabs.com - SSRF in Cache Cleaner Pro extension - Custom query URLs could access internal or reserved network services...

CVE-2026-61981: Cross-Site Request Forgery (CSRF)

Unauthenticated Cross Site Request Forgery CSRF in Simple Link Directory Pro = 15.0.8 versions...