CVE-2026-39758 WordPress Midtrans-WooCommerce plugin <= 2.32.3 - Cross Site Scripting (XSS) vulnerability

Unauthenticated Cross Site Scripting XSS in Midtrans-WooCommerce = 2.32.3 versions...

CVE-2026-39756 WordPress Wappointment plugin <= 2.7.7 - Insecure Direct Object References (IDOR) vulnerability

Unauthenticated Insecure Direct Object References IDOR in Wappointment = 2.7.7 versions...

EUVD-2026-93265

Unauthenticated Insecure Direct Object References IDOR in Wappointment = 2.7.7 versions...

CVE-2026-39756

The Wappointment plugin for WordPress (versions

CVE-2026-39753 WordPress Taskbot plugin <= 6.6 - Privilege Escalation vulnerability

Unauthenticated Privilege Escalation in Taskbot = 6.6 versions...

EUVD-2026-93262

Unauthenticated Privilege Escalation in Taskbot = 6.6 versions...

CVE-2026-39753 WordPress Taskbot plugin <= 6.6 - Privilege Escalation vulnerability

Unauthenticated Privilege Escalation in Taskbot = 6.6 versions...

CVE-2026-39751

The PayPlug for WooCommerce (Official) plugin for WordPress versions

EUVD-2026-93259

Unauthenticated Cross Site Scripting XSS in StoreGrowth: Smart Sales Booster for WooCommerce | BOGO, Upsells, Direct Checkout, Quick View, Side Cart = 2.0.6 versions...

CVE-2026-39751 WordPress PayPlug for WooCommerce (Official) plugin <= 3.1.0 - Broken Access Control vulnerability

Unauthenticated Broken Access Control in PayPlug for WooCommerce Official = 3.1.0 versions...

CVE-2026-39750 WordPress StoreGrowth: Smart Sales Booster for WooCommerce | BOGO, Upsells, Direct Checkout, Quick View, Side Cart plugin <= 2.0.6 - Cross Site Scripting (XSS) vulnerability

Unauthenticated Cross Site Scripting XSS in StoreGrowth: Smart Sales Booster for WooCommerce | BOGO, Upsells, Direct Checkout, Quick View, Side Cart = 2.0.6 versions...

CVE-2026-39751 WordPress PayPlug for WooCommerce (Official) plugin <= 3.1.0 - Broken Access Control vulnerability

Unauthenticated Broken Access Control in PayPlug for WooCommerce Official = 3.1.0 versions...

CVE-2026-39750 WordPress StoreGrowth: Smart Sales Booster for WooCommerce | BOGO, Upsells, Direct Checkout, Quick View, Side Cart plugin <= 2.0.6 - Cross Site Scripting (XSS) vulnerability

Unauthenticated Cross Site Scripting XSS in StoreGrowth: Smart Sales Booster for WooCommerce | BOGO, Upsells, Direct Checkout, Quick View, Side Cart = 2.0.6 versions...

CVE-2026-39750

The StoreGrowth: Smart Sales Booster for WooCommerce plugin (versions

EUVD-2026-93257

Unauthenticated Cross Site Scripting XSS in EduMall = 4.5.3 versions...

CVE-2026-39748

The EduMall theme for WordPress, versions

CVE-2026-39748 WordPress EduMall theme <= 4.5.3 - Reflected Cross Site Scripting (XSS) vulnerability

Unauthenticated Cross Site Scripting XSS in EduMall = 4.5.3 versions...

CVE-2026-39748 WordPress EduMall theme <= 4.5.3 - Reflected Cross Site Scripting (XSS) vulnerability

Unauthenticated Cross Site Scripting XSS in EduMall = 4.5.3 versions...

EUVD-2026-93255

Unauthenticated SQL Injection in Booknetic = 4.8.5 versions...

CVE-2026-39746 WordPress Booknetic plugin <= 4.8.5 - SQL Injection vulnerability

Unauthenticated SQL Injection in Booknetic = 4.8.5 versions...