CVE-2026-39791

Unauthenticated Sensitive Data Exposure in Mailjet Email Marketing = 6.2.3 versions...

CVE-2026-39785

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Serhii Pasyuk Gmedia Photo Gallery grand-media allows Blind SQL Injection.This issue affects Gmedia Photo Gallery: from n/a through 1.25.1...

CVE-2026-39790

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in e4jvikwp VikRentCar vikrentcar allows Reflected XSS.This issue affects VikRentCar: from n/a through 1.4.7...

CVE-2026-39781

Unauthenticated Cross Site Scripting XSS in Document Gallery = 5.1.1 versions...

CVE-2026-39784

Unauthenticated Cross Site Scripting XSS in Hotel Booking = 3.8 versions...

CVE-2026-39774

Unauthenticated Privilege Escalation in Tourfic Pro = 1.17.3 versions...

CVE-2026-39778

Unauthenticated Cross Site Scripting XSS in Ansar Import – One Click Starter Sites – for Elementor & Themes = 2.1.2 versions...

CVE-2026-39772

Unauthenticated Bypass Vulnerability in Captcha by BestWebSoft = 5.2.8 versions...

CVE-2026-39773

Unauthenticated Privilege Escalation in Doctreat Core = 1.7.0 versions...

CVE-2026-39770

Unauthenticated Arbitrary File Upload in Doctreat = 1.7.0 versions...

CVE-2026-39761

Unauthenticated Privilege Escalation in Meta Box AIO = 3.7.1 versions...

CVE-2026-39764

Unauthenticated SQL Injection in Radius Booking — Booking Calendar for Appointments & Services = 1.0.19 versions...

CVE-2026-39762

Missing Authorization vulnerability in Patterns In The Cloud Autoship Cloud for WooCommerce Subscription Products autoship-cloud allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Autoship Cloud for WooCommerce Subscription Products: from n/a through 2.17.1...

CVE-2026-39766

Unauthenticated Cross Site Scripting XSS in ARForms = 7.1.2 versions...

CVE-2026-39756

Unauthenticated Insecure Direct Object References IDOR in Wappointment = 2.7.7 versions...

CVE-2026-39758

Unauthenticated Cross Site Scripting XSS in Midtrans-WooCommerce = 2.32.3 versions...

CVE-2026-39750

Unauthenticated Cross Site Scripting XSS in StoreGrowth: Smart Sales Booster for WooCommerce | BOGO, Upsells, Direct Checkout, Quick View, Side Cart = 2.0.6 versions...

CVE-2026-39751

Unauthenticated Broken Access Control in PayPlug for WooCommerce Official = 3.1.0 versions...

CVE-2026-39748

Unauthenticated Cross Site Scripting XSS in EduMall = 4.5.3 versions...

CVE-2026-39745

Unauthenticated Cross Site Scripting XSS in Contact Form to DB by BestWebSoft = 1.7.6 versions...