CVE-2026-39797

Unauthenticated PHP Object Injection in GDPR Framework By Data443 = 2.5.0 versions...

CVE-2026-39795

Unauthenticated SQL Injection in SendPress Newsletters = 1.26.1.20 versions...

CVE-2026-39798

Unauthenticated Settings Change in TrueBooker = 1.2.9 versions...

CVE-2026-39791

Unauthenticated Sensitive Data Exposure in Mailjet Email Marketing = 6.2.3 versions...

CVE-2026-39785

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Serhii Pasyuk Gmedia Photo Gallery grand-media allows Blind SQL Injection.This issue affects Gmedia Photo Gallery: from n/a through 1.25.1...

CVE-2026-39790

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in e4jvikwp VikRentCar vikrentcar allows Reflected XSS.This issue affects VikRentCar: from n/a through 1.4.7...

CVE-2026-39774

Unauthenticated Privilege Escalation in Tourfic Pro = 1.17.3 versions...

CVE-2026-39778

Unauthenticated Cross Site Scripting XSS in Ansar Import – One Click Starter Sites – for Elementor & Themes = 2.1.2 versions...

CVE-2026-39784

Unauthenticated Cross Site Scripting XSS in Hotel Booking = 3.8 versions...

CVE-2026-39781

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Dan Rossiter Document Gallery document-gallery allows Reflected XSS.This issue affects Document Gallery: from n/a through 5.1.1...

CVE-2026-39772

Unauthenticated Bypass Vulnerability in Captcha by BestWebSoft = 5.2.8 versions...

CVE-2026-39773

Unauthenticated Privilege Escalation in Doctreat Core = 1.7.0 versions...

CVE-2026-39770

Unauthenticated Arbitrary File Upload in Doctreat = 1.7.0 versions...

CVE-2026-39762

Missing Authorization vulnerability in Patterns In The Cloud Autoship Cloud for WooCommerce Subscription Products autoship-cloud allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Autoship Cloud for WooCommerce Subscription Products: from n/a through 2.17.1...

CVE-2026-39764

Unauthenticated SQL Injection in Radius Booking — Booking Calendar for Appointments & Services = 1.0.19 versions...

CVE-2026-39766

Unauthenticated Cross Site Scripting XSS in ARForms = 7.1.2 versions...

CVE-2026-39761

Unauthenticated Privilege Escalation in Meta Box AIO = 3.7.1 versions...

CVE-2026-39756

Unauthenticated Insecure Direct Object References IDOR in Wappointment = 2.7.7 versions...

CVE-2026-39758

Unauthenticated Cross Site Scripting XSS in Midtrans-WooCommerce = 2.32.3 versions...

CVE-2026-39748

Unauthenticated Cross Site Scripting XSS in EduMall = 4.5.3 versions...