CVE-2026-73400

Unauthenticated Local File Inclusion in Restaurant Menu by MotoPress = 2.4.11 versions...

EUVD-2026-60803

Unauthenticated Deserialization of untrusted data in Youzify = 1.3.7 versions...

MINI-MQ5G-R9M3-XCVP

Bulletin has no description...

CVE-2026-73382

Unauthenticated Cross Site Scripting XSS in Site Reviews = 8.2.0 versions...

EUVD-2026-60797

Unauthenticated Cross Site Scripting XSS in Site Reviews = 8.2.0 versions...

EUVD-2026-60795

Unauthenticated PHP Object Injection in Popup by Supsystic = 1.13.0 versions...

MINI-5CCW-79GX-V6HR

Bulletin has no description...

CVE-2026-73379 WordPress Contact Form by Supsystic plugin < 1.10.0 - Bypass Vulnerability vulnerability

Unauthenticated Bypass Vulnerability in Contact Form by Supsystic 1.10.0 versions...

CVE-2026-73379

Affected component: Contact Form by Supsystic plugin for WordPress, versions before 1.10.0. Vulnerability type: Unauthenticated bypass, allowing network-accessible attackers to circumvent access controls without credentials. CVSS 3.1: 6.5 MEDIUM (AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N). Exploitation...

EUVD-2026-60794

Unauthenticated Bypass Vulnerability in Contact Form by Supsystic 1.10.0 versions...

CVE-2026-73377

Unauthenticated Broken Access Control in Ultimate Maps by Supsystic 1.5.0 versions...

CVE-2026-73376 WordPress Ultimate Maps by Supsystic plugin < 1.5.0 - PHP Object Injection vulnerability

Unauthenticated PHP Object Injection in Ultimate Maps by Supsystic 1.5.0 versions...

CVE-2026-73376

Unauthenticated PHP Object Injection in Ultimate Maps by Supsystic 1.5.0 versions...

CVE-2026-73360

The WordPress Chaty Pro plugin (versions ≤ 3.5.8) has an unauthenticated reflected/stored XSS flaw exploitable over the network with low complexity; Patchstack rates it HIGH (CVSS 7.1). Upgrade beyond 3.5.8 to mitigate. No in-the-wild exploitation reported. https://patchstack.com/database/wordpre...

MINI-XPC3-37H9-8HQ8

Bulletin has no description...

CVE-2026-73343

The WP Compress WordPress plugin (versions before 7.20.01) allows unauthenticated remote attackers to execute arbitrary code, scoring CVSS 10.0 critical (full confidentiality, integrity, availability impact). Patchstack is the CNA; the fix is upgrading to 7.20.01 or later. Exploitation details ar...

MINI-MQHM-F7CP-R355

Bulletin has no description...

EUVD-2026-60770

Unauthenticated SQL Injection in Modern Events Calendar 7.35.0 versions...

CVE-2026-73338

Unauthenticated Cross Site Scripting XSS in Autopay = 5.0.0 versions...

CVE-2026-73190

Unauthenticated Cross Site Scripting XSS in WPDM – Premium Packages = 7.0.5 versions...