CVE-2026-78291

Unauthenticated Broken Access Control in RepairBuddy = 4.1223 versions...

CVE-2026-78280

Unauthenticated Cross Site Request Forgery CSRF in Hash Form = 1.4.0 versions...

CVE-2026-78279

Unauthenticated Cross Site Request Forgery CSRF in Fluent Support Pro = 2.3.1 versions...

CVE-2026-66610

Unauthenticated Cross Site Scripting XSS in Urna = 2.6.2 versions...

CVE-2026-66648

Unauthenticated Privilege Escalation in Jawn = 1.4.2 versions...

CVE-2026-66650

Unauthenticated PHP Object Injection in FreightCo = 1.1.15 versions...

CVE-2026-66671

Unauthenticated Local File Inclusion in Verdure Core = 1.2 versions...

CVE-2026-66670

Unauthenticated Local File Inclusion in Måne = 1.7 versions...

CVE-2026-66584

Unauthenticated Cross Site Scripting XSS in 12 Step Meeting List = 3.19.16 versions...

CVE-2026-66587

Unauthenticated Local File Inclusion in WP Cafe Pro 3.0.15 versions...

CVE-2026-66585

Unauthenticated Sensitive Data Exposure in WP Cafe Pro 3.0.15 versions...

CVE-2026-32477

Unauthenticated Arbitrary File Deletion in ShopBuilder Pro – Elementor WooCommerce Builder Addons = 2.2.0 versions...

CVE-2026-32476

Unauthenticated Cross Site Scripting XSS in Brave Conversion Engine PRO = 0.8.6 versions...

CVE-2026-32558

Unauthenticated Privilege Escalation in Affiliate Pro - Affiliate Program for WooCommerce & WordPress = 8.9.1 versions...

CVE-2026-32551

Unauthenticated SQL Injection in Woo Essential = 4.3.0 versions...

CVE-2026-28171

Unauthenticated Arbitrary File Deletion in WooCommerce File Approval = 10.7 versions...

CVE-2026-28152

Unauthenticated Local File Inclusion in Tonda Core 2.6 versions...

CVE-2026-28166

Unauthenticated Cross Site Scripting XSS in Tourmaster = 5.4.9 versions...

CVE-2026-28165

Unauthenticated Privilege Escalation in Digits = 9.2 versions...

CVE-2026-28151

Unauthenticated Local File Inclusion in Tonda 2.6 versions...