CVE-2026-66711

Subscriber Cross Site Scripting XSS in WooCommerce Multilingual & Multicurrency = 5.5.6 versions...

CVE-2026-65552

CVE-2026-65552 concerns the WordPress Export User Data plugin (versions

CVE-2026-65547 WordPress Creative Mail plugin <= 1.6.9 - SQL Injection vulnerability

Subscriber SQL Injection in Creative Mail = 1.6.9 versions...

CVE-2026-65547 WordPress Creative Mail plugin <= 1.6.9 - SQL Injection vulnerability

Subscriber SQL Injection in Creative Mail = 1.6.9 versions...

CVE-2026-61959 WordPress Business Directory plugin <= 6.4.24 - Cross Site Scripting (XSS) vulnerability

Subscriber Cross Site Scripting XSS in Business Directory = 6.4.24 versions...

WordPress Search Atlas SEO plugin < 2.6.12 - Subscriber+ Google Indexing API Access vulnerability

Subscriber+ Google Indexing API Access vulnerability discovered by LevinityCyber in WordPress Plugin Search Atlas SEO versions 2.6.12...

EUVD-2026-49226

Subscriber Cross Site Scripting XSS in RT Mega Menu – Mega Menu Builder for Elementor & Gutenberg = 1.5.1 versions...

CVE-2026-59513

Subscriber Cross Site Scripting XSS in Masteriyo - LMS = 2.3.0 versions...

CVE-2026-57703

Subscriber Broken Access Control in Sunshine Photo Cart = 3.6.10.1 versions...

CVE-2026-65494

Subscriber SQL Injection in Dokan Pro = 5.0.2 versions...

CVE-2026-65493 WordPress Dokan Pro plugin <= 5.0.2 - PHP Object Injection vulnerability

Subscriber PHP Object Injection in Dokan Pro = 5.0.2 versions...

CVE-2026-65493

Subscriber PHP Object Injection in Dokan Pro = 5.0.2 versions...

CVE-2026-59541 WordPress WP BASE Booking plugin <= 6.3.1 - Privilege Escalation vulnerability

Subscriber Privilege Escalation in WP BASE Booking = 6.3.1 versions...

CVE-2026-59513 WordPress Masteriyo - LMS plugin <= 2.3.0 - Cross Site Scripting (XSS) vulnerability

Subscriber Cross Site Scripting XSS in Masteriyo - LMS = 2.3.0 versions...

EUVD-2026-48172

Subscriber Cross Site Scripting XSS in Slider Pro = 4.8.13 versions...

CVE-2026-57699 WordPress Slider Pro plugin <= 4.8.13 - Cross Site Scripting (XSS) vulnerability

Subscriber Cross Site Scripting XSS in Slider Pro = 4.8.13 versions...

CVE-2026-27423

Technical details (affected versions, root cause, impact, patches) are not publicly provided in the supplied documents. Monitor for updates.

CVE-2026-57355 WordPress Classified Listing plugin <= 5.4.2 - Broken Access Control vulnerability

Subscriber Broken Access Control in Classified Listing = 5.4.2 versions...

CVE-2026-57354

The CVE-2026-57354 entry describes a Subscriber Cross Site Scripting (XSS) vulnerability in the WordPress JetReviews plugin limited to versions

CVE-2026-57342 WordPress ShortPixel Adaptive Images plugin <= 3.11.3 - Cross Site Scripting (XSS) vulnerability

Subscriber Cross Site Scripting XSS in ShortPixel Adaptive Images = 3.11.3 versions...