CVE-2026-66466

The CVE concerns the WordPress StoreGrowth: Smart Sales Booster for WooCommerce | BOGO, Upsells, Direct Checkout, Quick View, Side Cart plugin (versions

CVE-2026-66466 WordPress StoreGrowth: Smart Sales Booster for WooCommerce | BOGO, Upsells, Direct Checkout, Quick View, Side Cart plugin <= 2.1.1 - Broken Access Control vulnerability

Unauthenticated Broken Access Control in StoreGrowth: Smart Sales Booster for WooCommerce | BOGO, Upsells, Direct Checkout, Quick View, Side Cart = 2.1.1 versions...

CVE-2026-66465

Unauthenticated Broken Authentication in Cartify = 1.3.0.1 versions...

CVE-2026-66463 WordPress iCARRY plugin <= 2.9 - Sensitive Data Exposure vulnerability

Unauthenticated Sensitive Data Exposure in iCARRY = 2.9 versions...

CVE-2026-66464

Unauthenticated Broken Access Control in Internal Link Optimiser = 5.2.7 versions...

CVE-2026-66464 WordPress Internal Link Optimiser plugin <= 5.2.7 - Broken Access Control vulnerability

Unauthenticated Broken Access Control in Internal Link Optimiser = 5.2.7 versions...

CVE-2026-66463

The CVE-2026-66463 entry concerns the WordPress iCARRY plugin, affected versions &lt;= 2.9, with an Unauthenticated Sensitive Data Exposure vulnerability. The available documents specify vulnerable software (iCARRY

CVE-2026-66462

Summary (CVE-2026-66462) : Unauthenticated sensitive data exposure in the WordPress WooCommerce Appointments plugin, versions ≤ 5.3.8. The vulnerability affects the plugin itself (no vendor/component details beyond the plugin) and is described as unauthenticated exposure of sensitive data. No exp...

CVE-2026-66460

Subscriber Cross Site Scripting XSS in AfterShip Tracking = 1.18.1 versions...

EUVD-2026-57879

Subscriber Cross Site Scripting XSS in AfterShip Tracking = 1.18.1 versions...

CVE-2026-66460

CVE-2026-66460 affects the WordPress AfterShip Tracking plugin for WooCommerce, version

CVE-2026-66460 WordPress AfterShip Tracking plugin <= 1.18.1 - Cross Site Scripting (XSS) vulnerability

Subscriber Cross Site Scripting XSS in AfterShip Tracking = 1.18.1 versions...

CVE-2026-66458 WordPress RealPress plugin <= 1.1.2 - SQL Injection vulnerability

Unauthenticated SQL Injection in RealPress = 1.1.2 versions...

CVE-2026-66458

Unauthenticated SQL Injection in RealPress = 1.1.2 versions...

CVE-2026-66459

Unauthenticated Broken Access Control in AI for SEO = 2.4.2 versions...

EUVD-2026-57878

Unauthenticated Broken Access Control in AI for SEO = 2.4.2 versions...

CVE-2026-66456 WordPress Profile Extra Fields by BestWebSoft plugin <= 1.3.4 - Cross Site Scripting (XSS) vulnerability

Subscriber Cross Site Scripting XSS in Profile Extra Fields by BestWebSoft = 1.3.4 versions...

CVE-2026-66456 WordPress Profile Extra Fields by BestWebSoft plugin <= 1.3.4 - Cross Site Scripting (XSS) vulnerability

Subscriber Cross Site Scripting XSS in Profile Extra Fields by BestWebSoft = 1.3.4 versions...

EUVD-2026-57875

Subscriber Broken Access Control in ReactPress = 3.4.0 versions...

CVE-2026-66454 WordPress WP Social Avatar plugin <= 1.5 - Broken Access Control vulnerability

Unauthenticated Broken Access Control in WP Social Avatar = 1.5 versions...