CVE-2026-57699

The CVE-2026-57699 entry concerns the WordPress Slider Pro plugin (versions ≤ 4.8.13) with a Cross Site Scripting (XSS) vulnerability affecting subscribers. The Patchstack-backed details identify the affected component and vulnerability type, with a CVSS 3.1 vector of AV:N/AC:L/PR:N/UI:R/S:C/C:L/...

CVE-2026-27391 WordPress uListing plugin <= 2.2.0 - Broken Access Control vulnerability

Subscriber Broken Access Control in uListing = 2.2.0 versions...

CVE-2026-57649

The CVE concerns the WordPress Shoppable Images Lite plugin (versions

EUVD-2026-39726

Subscriber Cross Site Scripting XSS in SureCart = 4.2.2 versions...

CVE-2026-56053

CVE-2026-56053 concerns the WordPress plugin EventPrime (versions

EUVD-2026-36991

Subscriber Broken Access Control in ChatBot = 7.9.7 versions...

CVE-2026-52700

WordPress plugin WCMultiShipping (versions

PT-2026-49424

Subscriber Broken Authentication in AutomatorWP = 5.6.7 versions...

PT-2026-49478

Subscriber Cross Site Scripting XSS in King Addons for Elementor = 51.1.62 versions...