CVE-2026-65558 WordPress AffiliateX plugin <= 2.3.5 - Server Side Request Forgery (SSRF) vulnerability

Unauthenticated Server Side Request Forgery SSRF in AffiliateX = 2.3.5 versions...

CVE-2026-65558

CVE-2026-65558 concerns the WordPress AffiliateX plugin, affected through version &lt;= 2.3.5, with an unauthenticated Server Side Request Forgery (SSRF) vulnerability. The Patchstack entry characterizes the impact as CVSSv3.1: Network attack vector, high attack complexity, no privileges required...

EUVD-2026-49233

Unauthenticated Server Side Request Forgery SSRF in AffiliateX = 2.3.5 versions...

CVE-2026-65558

Unauthenticated Server Side Request Forgery SSRF in AffiliateX = 2.3.5 versions...

CVE-2026-65435 WordPress Thrive Leads Version plugin <= 10.9.2 - Broken Access Control vulnerability

Unauthenticated Broken Access Control in Thrive Leads Version = 10.9.2 versions...

CVE-2026-65435

The CVE-2026-65435 entry concerns the WordPress Thrive Leads plugin (versions &lt;= 10.9.2) with an Unauthenticated Broken Access Control vulnerability. The affected component is Thrive Leads Version

CVE-2026-65435

Unauthenticated Broken Access Control in Thrive Leads Version = 10.9.2 versions...

EUVD-2026-49230

Unauthenticated Broken Access Control in Thrive Leads Version = 10.9.2 versions...

CVE-2026-59557 WordPress Events Made Easy plugin <= 3.1.3 - Broken Access Control vulnerability

Unauthenticated Broken Access Control in Events Made Easy = 3.1.3 versions...

CVE-2026-59558 WordPress Booking Calendar plugin <= 11.4.2 - Cross Site Scripting (XSS) vulnerability

Unauthenticated Cross Site Scripting XSS in Booking Calendar = 11.4.2 versions...

CVE-2026-59558

The CVE-2026-59558 entry documents an unauthenticated Cross Site Scripting (XSS) vulnerability in the WordPress Booking Calendar plugin, affected versions &lt;= 11.4.2. The issue concerns the Booking Calendar component/functionality and is characterized by unauthenticated XSS, allowing an attacke...

EUVD-2026-49225

Unauthenticated Cross Site Scripting XSS in Booking Calendar = 11.4.2 versions...

CVE-2026-59558

Unauthenticated Cross Site Scripting XSS in Booking Calendar = 11.4.2 versions...

CVE-2026-59557

CVE-2026-59557 relates to the WordPress Events Made Easy plugin, affected versions

EUVD-2026-49224

Unauthenticated Broken Access Control in Events Made Easy = 3.1.3 versions...

CVE-2026-59557

Unauthenticated Broken Access Control in Events Made Easy = 3.1.3 versions...

CVE-2026-59556 WordPress Dynamic Pricing With Discount Rules for WooCommerce plugin <= 4.5.11 - Cross Site Scripting (XSS) vulnerability

Unauthenticated Cross Site Scripting XSS in Dynamic Pricing With Discount Rules for WooCommerce = 4.5.11 versions...

CVE-2026-59556

Unauthenticated Cross Site Scripting XSS in Dynamic Pricing With Discount Rules for WooCommerce = 4.5.11 versions...

CVE-2026-59556

CVE-2026-59556 : Unauthenticated Cross Site Scripting (XSS) in the WordPress plugin Dynamic Pricing With Discount Rules for WooCommerce (versions

EUVD-2026-49223

Unauthenticated Cross Site Scripting XSS in Dynamic Pricing With Discount Rules for WooCommerce = 4.5.11 versions...