EUVD-2026-48093

Contributor Cross Site Scripting XSS in LA-Studio Element Kit for Elementor = 1.6.2 versions...

EUVD-2026-48092

Contributor Local File Inclusion in Vino = 1.9 versions...

EUVD-2026-48090

Subscriber Broken Access Control in Reviewer = 3.14.2 versions...

CVE-2026-65480

CVE-2026-65480 : WordPress TheGem theme versions ≤ 5.11.1 have a Cross Site Scripting (XSS) vulnerability. The available records note a contributor-reported XSS but do not specify the vulnerable component, root cause, affected URLs, or remediation steps. CVSS‑3.1 metrics are provided (base score ...

CVE-2026-65480 WordPress TheGem theme < 5.12.1.1 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in CodexThemes TheGem allows DOM-Based XSS. This issue affects TheGem: from n/a before 5.12.1.1...

EUVD-2026-48089

Subscriber Broken Access Control in ListingPro = 2.9.10 versions...

CVE-2026-65478

CVE-2026-65478 affects the WordPress ListingPro plugin (versions

EUVD-2026-48088

Contributor Local File Inclusion in Tonda Core = 2.1.2 versions...

CVE-2026-65477

CVE-2026-65477 affects the WordPress Tonda Core plugin, version ≤ 2.1.2, with a Local File Inclusion vulnerability. Root cause: LFI in Tonda Core ≤ 2.1.2. Impact includes high confidentiality, integrity, and availability risk (CVSS 3.1: 7.5, AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H). Exploitation stat...

EUVD-2026-48086

Unauthenticated Sensitive Data Exposure in Ninja Tables = 5.2.10 versions...

EUVD-2026-48084

Unauthenticated Broken Access Control in Kit formerly ConvertKit = 3.3.5 versions...

CVE-2026-65472

CVE-2026-65472 concerns a vulnerability in the WordPress Kit (formerly ConvertKit) plugin for WordPress, affecting versions

EUVD-2026-48082

Contributor Cross Site Scripting XSS in Fluent Support = 2.3.0 versions...

CVE-2026-65468

Affected product: WordPress JetBooking plugin

EUVD-2026-48078

Custom role Server Side Request Forgery SSRF in JetBooking = 4.1.2 versions...

CVE-2026-65461

The WordPress plugin Really Simple CSV Importer (vulnerable:

EUVD-2026-48074

Administrator SQL Injection in Uncanny Automator = 7.3.2 versions...

CVE-2026-65456

CVE-2026-65456 affects the WordPress plugin Product Slider for WooCommerce (versions

EUVD-2026-48221

Contributor Insecure Direct Object References IDOR in Product Slider for WooCommerce = 1.13.62 versions...

CVE-2026-65454

The CVE-2026-65454 entry concerns the WordPress plugin Quiz And Survey Master (