EUVD-2026-48195

Subscriber Arbitrary File Deletion in Kali Forms = 2.4.18 versions...

EUVD-2026-48194

Subscriber Privilege Escalation in WP BASE Booking = 6.3.1 versions...

EUVD-2026-48189

Subscriber Broken Access Control in WP ERP = 1.17.5 versions...

CVE-2026-59522

The CVE-2026-59522 entry concerns the WordPress WP ERP plugin (versions

EUVD-2026-48186

Subscriber Cross Site Scripting XSS in Masteriyo - LMS = 2.3.0 versions...

EUVD-2026-48183

Subscriber Arbitrary Content Deletion in WP EasyPay = 4.5.0 versions...

CVE-2026-57808

The CVE-2026-57808 entry concerns the WordPress WP EasyPay plugin (

CVE-2026-57703

CVE-2026-57703 affects WordPress Sunshine Photo Cart plugin versions

EUVD-2026-48174

Subscriber Broken Access Control in Sunshine Photo Cart = 3.6.10.1 versions...

CVE-2026-57699

The CVE-2026-57699 entry concerns the WordPress Slider Pro plugin (versions ≤ 4.8.13) with a Cross Site Scripting (XSS) vulnerability affecting subscribers. The Patchstack-backed details identify the affected component and vulnerability type, with a CVSS 3.1 vector of AV:N/AC:L/PR:N/UI:R/S:C/C:L/...

EUVD-2026-48172

Subscriber Cross Site Scripting XSS in Slider Pro = 4.8.13 versions...

CVE-2026-27423

Technical details (affected versions, root cause, impact, patches) are not publicly provided in the supplied documents. Monitor for updates.

EUVD-2026-48162

Subscriber Broken Access Control in WP Booking System 5.12.8.1 versions...

EUVD-2026-48161

Subscriber Broken Access Control in Participants Database = 2.7.8.4 versions...

CVE-2026-57367

CVE-2026-57367 affects the WordPress plugin WP Booking System, specifically versions prior to 5.12.8.1. The vulnerability is a Broken Access Control issue impacting the plugin’s ability to enforce access permissions, with exposed integrity risk (High) and limited availability impact as per Patchs...

EUVD-2026-48155

Subscriber Broken Access Control in uListing = 2.2.0 versions...

CVE-2026-27391

Technical details about CVE-2026-27391 are not publicly available in the provided documents. Monitoring for updates is advised.

CVE-2026-25427

CVE-2026-25427 affects the WordPress plugin eRoom (versions ≤ 1.7.1). The description identifies a Broken Access Control issue for subscribers, but the available documents do not provide technical details, affected files, root cause, exploitability, or remediation steps. No exploitation informati...

EUVD-2026-48149

Subscriber Broken Access Control in eRoom = 1.7.1 versions...

EUVD-2026-47902

The AI Copilot – Content Generator plugin for WordPress is vulnerable to generic SQL Injection via 'order0dir' Parameter in all versions up to, and including, 1.5.4 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes...