CVE-2026-73342: Improper Neutralization of Input During Web Page Generation

Unauthenticated Cross Site Scripting XSS in WP Multilang = 2.4.31 versions...

CVE-2026-73187: Improper Neutralization of Special Elements used in an SQL Command

Unauthenticated SQL Injection in Sticky Chat Widget = 1.4.2 versions...

CVE-2026-66640: Improper Neutralization of Input During Web Page Generation

Contributor Cross Site Scripting XSS in Login With Ajax = 4.5.1 versions...

CVE-2026-74015: Improper Neutralization of Special Elements used in an SQL Command

Unauthenticated SQL Injection in Readabler 2.0.18 versions...

CVE-2026-74007: Exposure of Sensitive System Information to an Unauthorized Control Sphere

Unauthenticated Sensitive Data Exposure in 3D FlipBook – PDF Flipbook Viewer, Flipbook Image Gallery = 1.16.20 versions...

CVE-2026-32467: Server-Side Request Forgery (SSRF)

Subscriber Server Side Request Forgery SSRF in Aotuman Grab WeChat Articles = 2.0.1 versions...

CVE-2026-32466: Improper Neutralization of Special Elements used in an SQL Command

Subscriber SQL Injection in Gravity Forms Bookings premium = 2.1 versions...

CVE-2026-32464: Improper Control of Filename for Include/Require Statement in PHP Program

Unauthenticated Local File Inclusion in Theme Test Drive = 2.9.1 versions...

CVE-2026-32444: Improper Control of Generation of Code

Contributor Remote Code Execution RCE in Cwicly = 1.4.4 versions...

CVE-2026-28569: Improper Neutralization of Input During Web Page Generation

Unauthenticated Cross Site Scripting XSS in SSL Zen = 4.7.43 versions...

CVE-2026-28567: Missing Authorization

Unauthenticated Broken Access Control in WP Sort Order = 1.3.5 versions...

CVE-2026-32470: Deserialization of Untrusted Data

Unauthenticated PHP Object Injection in FundEngine = 1.7.9 versions...

CVE-2026-27365: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in PublishPress PublishPress Series allows Stored XSS. This issue affects PublishPress Series: from n/a through 2.17.0...

CVE-2026-32549: Missing Authorization

Unauthenticated Broken Access Control in ThumbPress 6.5 versions...

CVE-2026-73379: Authentication Bypass Using an Alternate Path or Channel

Unauthenticated Bypass Vulnerability in Contact Form by Supsystic 1.10.0 versions...

CVE-2026-66620: Deserialization of Untrusted Data

Editor PHP Object Injection in OptionTree = 2.7.3 versions...

CVE-2026-73382: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Gemini Labs Site Reviews site-reviews allows Stored XSS.This issue affects Site Reviews: from n/a through 8.2.0...

CVE-2026-32547: Improper Neutralization of Input During Web Page Generation

Unauthenticated Cross Site Scripting XSS in BP Better Messages = 2.15.22 versions...

CVE-2026-66633: Improper Neutralization of Input During Web Page Generation

Unauthenticated Cross Site Scripting XSS in Fluent Forms Pro Add On Pack 6.2.12 versions...

CVE-2026-32468: Exposure of Sensitive System Information to an Unauthorized Control Sphere

Unauthenticated Sensitive Data Exposure in Duitku Payment Gateway = 2.11.14 versions...