EUVD-2026-49223

Unauthenticated Cross Site Scripting XSS in Dynamic Pricing With Discount Rules for WooCommerce = 4.5.11 versions...

CVE-2026-59556

CVE-2026-59556 : Unauthenticated Cross Site Scripting (XSS) in the WordPress plugin Dynamic Pricing With Discount Rules for WooCommerce (versions

CVE-2026-59553 WordPress Product Feed Manager plugin <= 7.6.1 - Cross Site Scripting (XSS) vulnerability

Unauthenticated Cross Site Scripting XSS in Product Feed Manager = 7.6.1 versions...

EUVD-2026-49221

Unauthenticated Server Side Request Forgery SSRF in 3D Flipbook PDF Viewer & Embedder = 1.4.2 versions...

CVE-2026-59552

Unauthenticated Server Side Request Forgery SSRF in 3D Flipbook PDF Viewer & Embedder = 1.4.2 versions...

CVE-2026-59553

CVE-2026-59553 describes an unauthenticated Cross Site Scripting (XSS) vulnerability in the WordPress Product Feed Manager plugin, affecting versions ≤ 7.6.1. The Connected documents confirm the affected software (WordPress Product Feed Manager plugin) and the vulnerability class (XSS) with the s...

CVE-2026-59552

CVE-2026-59552 concerns the WordPress plugin 3D Flipbook PDF Viewer & Embedder (versions

CVE-2026-59550 WordPress AWP Classifieds plugin <= 4.4.7 - SQL Injection vulnerability

Unauthenticated SQL Injection in AWP Classifieds = 4.4.7 versions...

CVE-2026-59549 WordPress rtMedia for WordPress, BuddyPress and bbPress plugin <= 4.7.10 - SQL Injection vulnerability

Unauthenticated SQL Injection in rtMedia for WordPress, BuddyPress and bbPress = 4.7.10 versions...

CVE-2026-59549

Unauthenticated SQL Injection in rtMedia for WordPress, BuddyPress and bbPress = 4.7.10 versions...

EUVD-2026-49219

Unauthenticated SQL Injection in AWP Classifieds = 4.4.7 versions...

EUVD-2026-49218

Unauthenticated SQL Injection in rtMedia for WordPress, BuddyPress and bbPress = 4.7.10 versions...

CVE-2026-59550

Unauthenticated SQL Injection in AWP Classifieds = 4.4.7 versions...

CVE-2026-59549

Affected software: WordPress plugin rtMedia for WordPress, BuddyPress and bbPress (versions &lt;= 4.7.10). Vulnerability: Unauthenticated SQL Injection. Root cause/impact: SQL injection that does not require authentication; CVSS metrics in the external record indicate high confidentiality impact ...

CVE-2026-59550

CVE-2026-59550 affects the WordPress plugin AWP Classifieds (versions

CVE-2026-59548 WordPress Byteflows Travel & Hotel Booking plugin <= 1.0.0 - Sensitive Data Exposure vulnerability

Unauthenticated Sensitive Data Exposure in Byteflows Travel & Hotel Booking = 1.0.0 versions...

EUVD-2026-49217

Unauthenticated Sensitive Data Exposure in Byteflows Travel & Hotel Booking = 1.0.0 versions...

CVE-2026-59548

Unauthenticated Sensitive Data Exposure in Byteflows Travel & Hotel Booking = 1.0.0 versions...

CVE-2026-59548

The CVE concerns WordPress Byteflows Travel & Hotel Booking plugin, version

CVE-2026-59538 WordPress GamiPress plugin <= 7.9.7 - SQL Injection vulnerability

Unauthenticated SQL Injection in GamiPress = 7.9.7 versions...