CVE-2026-85305 WordPress SEOPress plugin <= 10.1 - Server Side Request Forgery (SSRF) vulnerability

Server-Side Request Forgery SSRF vulnerability in SEOPress allows Server Side Request Forgery. This issue affects SEOPress: from n/a through 10.1...

EUVD-2026-70557

Server-Side Request Forgery SSRF vulnerability in SEOPress allows Server Side Request Forgery. This issue affects SEOPress: from n/a through 10.1...

CVE-2026-85305 WordPress SEOPress plugin <= 10.1 - Server Side Request Forgery (SSRF) vulnerability

Server-Side Request Forgery SSRF vulnerability in SEOPress allows Server Side Request Forgery. This issue affects SEOPress: from n/a through 10.1...

WordPress WPKoi Templates for Elementor plugin <= 3.7.2 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by Abdullah Kareem "cyberkareem" in WordPress Plugin WPKoi Templates for Elementor versions = 3.7.2...

EUVD-2026-70566

Unauthenticated Cross Site Scripting XSS in Quick Event Manager = 9.17 versions...

CVE-2026-84848 WordPress Quick Event Manager plugin <= 9.17 - Cross Site Scripting (XSS) vulnerability

Unauthenticated Cross Site Scripting XSS in Quick Event Manager = 9.17 versions...

CVE-2026-84847 WordPress Quick Event Manager plugin <= 9.17 - Broken Access Control vulnerability

Unauthenticated Broken Access Control in Quick Event Manager = 9.17 versions...

EUVD-2026-70560

Subscriber Privilege Escalation in Bricksforge = 3.1.8.8 versions...

EUVD-2026-70569

Unauthenticated SQL Injection in GeoDirectory = 2.8.174 versions...

EUVD-2026-70570

Unauthenticated Cross Site Scripting XSS in BP Better Messages = 2.15.27 versions...

CVE-2026-84778

An unauthenticated Denial of Service vulnerability affects the Migrate Guru – Site Migration & Cloning WordPress plugin in versions

EUVD-2026-70572

Unauthenticated Denial of Service Attack in Migrate Guru – Site Migration & Cloning = 6.65 versions...

CVE-2026-84777

WordPress Really Simple SSL plugin versions ≤ 9.8.0 are affected by an unauthenticated broken authentication vulnerability described as a 2FA bypass . The flaw allows a network-based attacker (with no prior privileges or user interaction, but high attack complexity) to compromise authentication, ...

CVE-2026-84776 WordPress MalCare Security plugin <= 6.69 - Denial of Service Attack vulnerability

Unauthenticated Denial of Service Attack in MalCare Security = 6.69 versions...

EUVD-2026-70574

Unauthenticated Denial of Service Attack in MalCare Security = 6.69 versions...

CVE-2026-84776 WordPress MalCare Security plugin <= 6.69 - Denial of Service Attack vulnerability

Unauthenticated Denial of Service Attack in MalCare Security = 6.69 versions...

CVE-2026-84773

EWWW Image Optimizer for WordPress (versions

EUVD-2026-70579

Unauthenticated Bypass Vulnerability in BookIt = 2.6.0.3 versions...

EUVD-2026-70580

Unauthenticated Cross Site Scripting XSS in Breadcrumb NavXT = 7.5.1 versions...

CVE-2026-84762 WordPress WP EasyPay plugin <= 4.5.3 - Bypass Vulnerability vulnerability

Unauthenticated Bypass Vulnerability in WP EasyPay = 4.5.3 versions...