EUVD-2026-48105

Subscriber SQL Injection in Dokan Pro = 5.0.2 versions...

CVE-2026-65483

CVE-2026-65483 describes a Cross Site Scripting (XSS) vulnerability in the WordPress plugin HashThemes Demo Importer, version

CVE-2026-65477

CVE-2026-65477 affects the WordPress Tonda Core plugin, version ≤ 2.1.2, with a Local File Inclusion vulnerability. Root cause: LFI in Tonda Core ≤ 2.1.2. Impact includes high confidentiality, integrity, and availability risk (CVSS 3.1: 7.5, AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H). Exploitation stat...

CVE-2026-65473

CVE-2026-65473 affects the WordPress Virtue/Ascend/Pinnacle Toolkit plugin (versions

CVE-2026-65461

The WordPress plugin Really Simple CSV Importer (vulnerable:

CVE-2026-65460

CVE-2026-65460 affects the WordPress Zarinpal Gateway plugin (≤ 5.1.0). The issue is an unauthenticated Cross Site Request Forgery (CSRF) vulnerability in versions ≤ 5.1.0. Attack context: network access required, with user interaction necessary for exploitation; impact details are not expanded b...

CVE-2026-65456

CVE-2026-65456 affects the WordPress plugin Product Slider for WooCommerce (versions

CVE-2026-61973

CVE-2026-61973 applies to the WordPress ShopLentor Pro plugin, affected

CVE-2026-61943

CVE-2026-61943 describes an unauthenticated Broken Access Control in the WordPress WPDM – Premium Packages plugin, affected versions

CVE-2026-59542

The vulnerability CVE-2026-59542 affects the WordPress Kali Forms plugin

CVE-2026-59525

The CVE covers the WordPress plugin Participants Database (affected version:

CVE-2026-57808 WordPress WP EasyPay plugin <= 4.5.0 - Arbitrary Content Deletion vulnerability

Subscriber Arbitrary Content Deletion in WP EasyPay = 4.5.0 versions...

CVE-2026-57704

CVE-2026-57704 : Unauthenticated Cross Site Scripting (XSS) in the WordPress Smart Manager plugin for WP e‑commerce, versions ≤ 8.90.0. Root cause and specific exploit path are not detailed in the provided documents. CVSSv3.1 base score 7.1 (HIGH) with network attack vector and user interaction r...

CVE-2026-57373

CVE-2026-57373 affects WordPress Funnel Kit Funnel Builder PRO plugin, versions

CVE-2026-27422

The CVE-2026-27422 entry concerns the WordPress YT Player plugin (versions

EUVD-2026-48159

Unauthenticated Broken Access Control in WP Fast Total Search = 1.81.282 versions...

CVE-2026-27399

CVE-2026-27399 concerns the WordPress MarketKing plugin, versions ≤ 2.1.40. The connected documents describe an Unauthenticated Broken Access Control vulnerability in MarketKing, meaning an unauthenticated attacker can bypass access controls. The exact impact details (which data or actions are ex...

CVE-2026-25405

CVE-2026-25405 affects the WordPress eRoom plugin (≤ 1.7.1). It is a reported SQL Injection vulnerability. CVSSv3.1: 8.5 (HIGH), NETWORK, LOW privileges, no user interaction, confidentiality impact HIGH, integrity and availability variances (I: NONE, A: LOW), scope changed. Connected documents pr...

CVE-2026-24552 WordPress Create plugin <= 2.5.3 - SQL Injection vulnerability

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in John-Michael L'Allier Create allows Blind SQL Injection. This issue affects Create: from n/a through 2.5.3...

CVE-2026-24552 WordPress Create plugin <= 2.5.3 - SQL Injection vulnerability

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in John-Michael L'Allier Create allows Blind SQL Injection. This issue affects Create: from n/a through 2.5.3...