CVE-2026-39766

Unauthenticated Cross Site Scripting XSS in ARForms = 7.1.2 versions...

CVE-2026-39761

Unauthenticated Privilege Escalation in Meta Box AIO = 3.7.1 versions...

CVE-2026-39762

Missing Authorization vulnerability in Patterns In The Cloud Autoship Cloud for WooCommerce Subscription Products autoship-cloud allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Autoship Cloud for WooCommerce Subscription Products: from n/a through 2.17.1...

CVE-2026-39764

Unauthenticated SQL Injection in Radius Booking — Booking Calendar for Appointments & Services = 1.0.19 versions...

CVE-2026-39758

Unauthenticated Cross Site Scripting XSS in Midtrans-WooCommerce = 2.32.3 versions...

CVE-2026-39756

Unauthenticated Insecure Direct Object References IDOR in Wappointment = 2.7.7 versions...

CVE-2026-39748

Unauthenticated Cross Site Scripting XSS in EduMall = 4.5.3 versions...

CVE-2026-39750

Unauthenticated Cross Site Scripting XSS in StoreGrowth: Smart Sales Booster for WooCommerce | BOGO, Upsells, Direct Checkout, Quick View, Side Cart = 2.0.6 versions...

CVE-2026-39751

Unauthenticated Broken Access Control in PayPlug for WooCommerce Official = 3.1.0 versions...

CVE-2026-39745

Unauthenticated Cross Site Scripting XSS in Contact Form to DB by BestWebSoft = 1.7.6 versions...

CVE-2026-39746

Unauthenticated SQL Injection in Booknetic = 4.8.5 versions...

CVE-2026-39728

Unauthenticated Server Side Request Forgery SSRF in Instapage Plugin = 3.7.2 versions...

CVE-2026-39731

Unauthenticated Cross Site Scripting XSS in Database for CF7 = 1.2.6 versions...

CVE-2026-39720

Unauthenticated Cross Site Scripting XSS in Mapster WP Maps = 2.0.4 versions...

CVE-2026-39724

Unauthenticated Cross Site Scripting XSS in HTTP Requests Manager = 1.3.11 versions...

CVE-2026-39719

Unauthenticated Server Side Request Forgery SSRF in PDF Smart Viewer for Elementor = 1.0.4 versions...

CVE-2026-39722

Unauthenticated Cross Site Scripting XSS in WPLMS = 4.972 versions...

CVE-2026-39726

Unauthenticated Cross Site Scripting XSS in Lumise Product Designer = 2.1.1 versions...

CVE-2026-32575

Unauthenticated Cross Site Scripting XSS in SUMO Affiliates Pro = 11.7.0 versions...

CVE-2026-32577

Unauthenticated Cross Site Scripting XSS in Frontend File Manager = 23.6 versions...