CVE-2026-66712

Unauthenticated Broken Access Control in Simple Membership = 4.7.8 versions...

CVE-2026-66703

Contributor Cross Site Scripting XSS in MailOptin = 1.2.78.0 versions...

CVE-2026-66705

Unauthenticated Cross Site Scripting XSS in Facebook for WordPress = 5.2.1 versions...

CVE-2026-66694

Unauthenticated Cross Site Scripting XSS in Thrive Architect = 10.9.3.1 versions...

CVE-2026-66690

Unauthenticated Cross Site Scripting XSS in GiveWP = 4.16.5 versions...

CVE-2026-66699

Custom role Broken Access Control in Dokan = 5.0.10 versions...

CVE-2026-66684

Unauthenticated Sensitive Data Exposure in Export Import Menus = 1.9.2 versions...

CVE-2026-66470

Subscriber Broken Access Control in Frontend Admin by DynamiApps = 3.29.10 versions...

CVE-2026-66662

Unauthenticated Privilege Escalation in Frontend Admin by DynamiApps = 3.29.10 versions...

CVE-2026-65577

Unauthenticated PHP Object Injection in Advice = 1.18.0 versions...

CVE-2026-65579

Unauthenticated PHP Object Injection in Agricola = 1.21.0 versions...

CVE-2026-65581

Unauthenticated PHP Object Injection in AI ANN = 1.29.0 versions...

CVE-2026-65560

Unauthenticated Cross Site Scripting XSS in Houzez Property Feed = 2.5.48 versions...

CVE-2026-65571

Unauthenticated PHP Object Injection in 69 Clothing = 1.2.11.1 versions...

CVE-2026-65570

Unauthenticated Bypass Vulnerability in Login with phone number = 1.8.70 versions...

CVE-2026-65559

Shop manager Privilege Escalation in Order Delivery Date for WooCommerce = 4.6.0 versions...

CVE-2026-65556

Unauthenticated PHP Object Injection in WPBruiser no- Captcha anti-Spam = 3.1.43 versions...

CVE-2026-65549

Author PHP Object Injection in Jeg Kit for Elementor = 3.2.10 versions...

CVE-2026-65545

Unauthenticated Cross Site Scripting XSS in AI Engine = 3.6.8 versions...

CVE-2026-65548

Contributor Remote Code Execution RCE in Betheme = 28.4.2 versions...