CVE-2026-66467

Subscriber Cross Site Scripting XSS in FluentCommunity = 2.7.5 versions...

CVE-2026-66467 WordPress FluentCommunity plugin <= 2.7.5 - Cross Site Scripting (XSS) vulnerability

Subscriber Cross Site Scripting XSS in FluentCommunity = 2.7.5 versions...

CVE-2026-66467

CVE-2026-66467 affects the WordPress FluentCommunity plugin (versions &lt;= 2.7.5). The connected records confirm a Cross Site Scripting (XSS) vulnerability in the Subscriber context. The CVE entry lists CVSS v3.1 metrics with a base score of 6.5 (Medium) and attributes: Network attack vector, Lo...

CVE-2026-66460 WordPress AfterShip Tracking plugin <= 1.18.1 - Cross Site Scripting (XSS) vulnerability

Subscriber Cross Site Scripting XSS in AfterShip Tracking = 1.18.1 versions...

CVE-2026-66460

Subscriber Cross Site Scripting XSS in AfterShip Tracking = 1.18.1 versions...

CVE-2026-66460

CVE-2026-66460 affects the WordPress AfterShip Tracking plugin for WooCommerce, version

EUVD-2026-57879

Subscriber Cross Site Scripting XSS in AfterShip Tracking = 1.18.1 versions...

EUVD-2026-57876

Subscriber Cross Site Scripting XSS in Profile Extra Fields by BestWebSoft = 1.3.4 versions...

CVE-2026-66456 WordPress Profile Extra Fields by BestWebSoft plugin <= 1.3.4 - Cross Site Scripting (XSS) vulnerability

Subscriber Cross Site Scripting XSS in Profile Extra Fields by BestWebSoft = 1.3.4 versions...

CVE-2026-66456

Subscriber Cross Site Scripting XSS in Profile Extra Fields by BestWebSoft = 1.3.4 versions...

CVE-2026-66456

CVE-2026-66456 concerns the WordPress plugin Profile Extra Fields by BestWebSoft , specifically versions ≤ 1.3.4. The vulnerability is a Subscriber Cross Site Scripting (XSS) flaw in the profile extra fields. The provided documents identify the affected product and the vulnerable component but do...

EUVD-2026-57875

Subscriber Broken Access Control in ReactPress = 3.4.0 versions...

CVE-2026-66455

Subscriber Broken Access Control in ReactPress = 3.4.0 versions...

CVE-2026-66455 WordPress ReactPress plugin <= 3.4.0 - Broken Access Control vulnerability

Subscriber Broken Access Control in ReactPress = 3.4.0 versions...

CVE-2026-66455

CVE-2026-66455 affects the WordPress ReactPress plugin up to version 3.4.0, described as a Subscriber Broken Access Control vulnerability. The NVD entry links a MEDIUM impact (CVSS 3.1: AV:N/AC:H/PR:L/UI:N/S:C/C:L/I:L/A:L) with network attack vector and low confidentiality, integrity, and availab...

CVE-2026-66446

CVE-2026-66446 : Concrete details across connected sources show a SQL Injection vulnerability in WordPress plugin If-So Dynamic Content Personalization affecting versions

CVE-2026-66446 WordPress If-So Dynamic Content Personalization plugin <= 1.10 - SQL Injection vulnerability

Subscriber SQL Injection in If-So Dynamic Content Personalization = 1.10 versions...

CVE-2026-66446

Subscriber SQL Injection in If-So Dynamic Content Personalization = 1.10 versions...

EUVD-2026-57870

Subscriber SQL Injection in If-So Dynamic Content Personalization = 1.10 versions...

CVE-2026-66444

Subscriber Sensitive Data Exposure in Payment Forms for Paystack = 4.0.5 versions...