CVE-2026-13170

The Eventin WordPress plugin (specifically the WP Event Solution plugin) versions prior to 4.1.20 is vulnerable to a Local File Inclusion (LFI) . The root cause is the failure to properly validate a template path setting, specifically the speaker_template setting, before using it to include a loc...

EUVD-2026-39959

The Gutenverse – WordPress Blocks, Page Builder & Site Editor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via admin settings in all versions up to, and including, 3.8.0 due to insufficient input sanitization and output escaping. This makes it possible for authenticated...