CVE-2026-65520

Unauthenticated SQL Injection in WP OAuth Server = 6.2.0 versions...

CVE-2026-65523 WordPress Formidable Forms Signature Online Contract Automation plugin <= 2.0.1 - Insecure Direct Object References (IDOR) vulnerability

Unauthenticated Insecure Direct Object References IDOR in Formidable Forms Signature Online Contract Automation = 2.0.1 versions...

CVE-2026-65517

Unauthenticated Cross Site Scripting XSS in Easy PayPal Buy Now Button = 2.0.4 versions...

CVE-2026-65515

The CVE-2026-65515 entry concerns the WordPress AffiliateWP plugin, affected version

EUVD-2026-53966

Unauthenticated Cross Site Scripting XSS in Simply Schedule Appointments = 1.6.12.10 versions...

CVE-2026-65513 WordPress Simply Schedule Appointments plugin <= 1.6.12.10 - Cross Site Scripting (XSS) vulnerability

Unauthenticated Cross Site Scripting XSS in Simply Schedule Appointments = 1.6.12.10 versions...

CVE-2026-65513

CVE-2026-65513 affects the WordPress plugin Simply Schedule Appointments (versions ≤ 1.6.12.10). The connected sources consistently describe an Unauthenticated XSS vulnerability impacting this plugin. The vulnerability is described without details on the exact vulnerable component, payload, or ex...

EUVD-2026-53964

Unauthenticated SQL Injection in Simply Schedule Appointments = 1.6.12.10 versions...

CVE-2026-65508 WordPress Simply Schedule Appointments plugin <= 1.6.12.10 - SQL Injection vulnerability

Unauthenticated SQL Injection in Simply Schedule Appointments = 1.6.12.10 versions...

CVE-2026-65507

Summary: CVE-2026-65507 affects the WordPress AIWU plugin versions &lt;= 1.5.6 and is described as an unauthenticated privilege escalation. What is affected: WordPress AIWU plugin (

CVE-2026-65502

CVE-2026-65502 applies to the WordPress Element Pack Elementor Addons plugin (versions

EUVD-2026-53961

Unauthenticated Bypass Vulnerability in Element Pack Elementor Addons = 8.7.13 versions...

CVE-2026-61982

CVE-2026-61982 describes an unauthenticated Cross Site Scripting (XSS) vulnerability affecting WordPress SiteGuard WP Plugin versions

EUVD-2026-53960

Unauthenticated Cross Site Scripting XSS in SiteGuard WP Plugin = 1.8.6 versions...

CVE-2026-61982

Unauthenticated Cross Site Scripting XSS in SiteGuard WP Plugin = 1.8.6 versions...

CVE-2026-61963 WordPress Media LIbrary Assistant plugin <= 3.38 - Cross Site Scripting (XSS) vulnerability

Unauthenticated Cross Site Scripting XSS in Media LIbrary Assistant = 3.38 versions...

CVE-2026-61959

The CVE-2026-61959 entry concerns a Cross Site Scripting (XSS) vulnerability in the WordPress Business Directory plugin, affecting versions

EUVD-2026-53956

Subscriber Cross Site Scripting XSS in Business Directory = 6.4.24 versions...

EUVD-2026-53955

Unauthenticated Broken Access Control in SureCart = 4.6.2 versions...

CVE-2026-28183

This CVE ID is rejected/not used and does not represent an active vulnerability entry.