CVE-2026-66708 WordPress Total Upkeep plugin <= 1.17.2 - Broken Access Control vulnerability

Unauthenticated Broken Access Control in Total Upkeep = 1.17.2 versions...

CVE-2026-66707

Unauthenticated Cross Site Scripting XSS in Facebook for WooCommerce = 3.7.5 versions...

CVE-2026-66703

CVE-2026-66703 describes a Contributor Cross Site Scripting (XSS) vulnerability in the WordPress MailOptin plugin versions

CVE-2026-66702 WordPress Rank Math SEO plugin <= 1.0.274.1 - Cross Site Scripting (XSS) vulnerability

Unauthenticated Cross Site Scripting XSS in Rank Math SEO = 1.0.274.1 versions...

CVE-2026-66701 WordPress Profile Builder plugin <= 3.16.5 - Broken Access Control vulnerability

Unauthenticated Broken Access Control in Profile Builder = 3.16.5 versions...

EUVD-2026-53905

Unauthenticated Broken Access Control in Profile Builder = 3.16.5 versions...

CVE-2026-66699

Custom role Broken Access Control in Dokan = 5.0.10 versions...

EUVD-2026-53901

Unauthenticated Cross Site Scripting XSS in Thrive Architect = 10.9.3.1 versions...

EUVD-2026-53897

Unauthenticated Cross Site Request Forgery CSRF in Plugins Garbage Collector Database Cleanup = 0.14 versions...

EUVD-2026-53896

Unauthenticated Sensitive Data Exposure in Featured Video Plus = 2.3.3 versions...

CVE-2026-66683

Unauthenticated Sensitive Data Exposure in Custom CSS and JavaScript = 2.0.16 versions...

CVE-2026-66665

Unauthenticated Arbitrary File Upload in Type Hub = 2.0.6 versions...

CVE-2026-66452 WordPress Legal Text Connector of the IT-Recht Kanzlei plugin <= 1.0.13 - Broken Access Control vulnerability

Unauthenticated Broken Access Control in Legal Text Connector of the IT-Recht Kanzlei = 1.0.13 versions...

EUVD-2026-53879

Unauthenticated PHP Object Injection in AI ANN = 1.29.0 versions...

CVE-2026-65581

Unauthenticated PHP Object Injection in AI ANN = 1.29.0 versions...

CVE-2026-65577

WordPress Advice theme,

CVE-2026-65574 WordPress Abogado theme <= 1.18 - PHP Object Injection vulnerability

Unauthenticated PHP Object Injection in Abogado = 1.18 versions...

EUVD-2026-53992

Unauthenticated PHP Object Injection in Abogado = 1.18 versions...

CVE-2026-65573 WordPress Abelle theme <= 1.22 - PHP Object Injection vulnerability

Unauthenticated PHP Object Injection in Abelle = 1.22 versions...

EUVD-2026-53987

Subscriber SQL Injection in WP Job Portal = 2.5.6 versions...