CVE-2026-73357 WordPress GiveWP plugin < 4.16.6 - Cross Site Scripting (XSS) vulnerability

Donor Cross Site Scripting XSS in GiveWP 4.16.6 versions...

EUVD-2026-57914

Donor Cross Site Scripting XSS in GiveWP 4.16.6 versions...

CVE-2026-73349 WordPress GiveWP plugin < 4.16.6 - Broken Access Control vulnerability

Unauthenticated Broken Access Control in GiveWP 4.16.6 versions...

CVE-2026-73349

CVE-2026-73349 applies to the WordPress GiveWP plugin, pre-4.16.6. It is an unauthenticated broken access control vulnerability reported for GiveWP before version 4.16.6. The provided CVSSv3.1 metrics indicate network access, low attack complexity, no privileges required, with no confidentiality ...

CVE-2026-73353

CVE-2026-73353 — WordPress plugin Revolut Gateway for WooCommerce, versions

CVE-2026-73340

The CVE covers a Cross Site Scripting (XSS) vulnerability in the WordPress plugin Featured Image from URL , affecting versions

CVE-2026-73340 WordPress Featured Image from URL plugin <= 5.3.3 - Cross Site Scripting (XSS) vulnerability

Contributor Cross Site Scripting XSS in Featured Image from URL = 5.3.3 versions...

CVE-2026-66704 WordPress Gutenverse Companion plugin <= 2.5.1 - Server Side Request Forgery (SSRF) vulnerability

Unauthenticated Server Side Request Forgery SSRF in Gutenverse Companion = 2.5.1 versions...

CVE-2026-66700

CVE-2026-66700 affects the WordPress plugin “Smart Online Order for Clover” (versions &lt;= 1.6.1). The vulnerability is an Unauthenticated Cross Site Scripting (XSS) flaw reported for that plugin, indicating an attacker can inject scripts without authentication. Connected records confirm the aff...

CVE-2026-66704

CVE-2026-66704 affects the WordPress Gutenverse Companion plugin, version

EUVD-2026-57907

Unauthenticated Server Side Request Forgery SSRF in Gutenverse Companion = 2.5.1 versions...

CVE-2026-66698 WordPress SureDash plugin <= 1.10.1 - Cross Site Scripting (XSS) vulnerability

Unauthenticated Cross Site Scripting XSS in SureDash = 1.10.1 versions...

CVE-2026-66698

CVE-2026-66698 : WordPress SureDash plugin, versions up to 1.10.1, contains an unauthenticated XSS vulnerability. The CVSS 3.1 metrics indicate network access, low impact on confidentiality/ integrity/ availability, and required user interaction. The connected documents do not provide details on ...

CVE-2026-66697 WordPress Colissimo Officiel : Méthodes de livraison pour WooCommerce plugin <= 2.10.0 - Cross Site Scripting (XSS) vulnerability

Unauthenticated Cross Site Scripting XSS in Colissimo Officiel : Méthodes de livraison pour WooCommerce = 2.10.0 versions...

CVE-2026-66689

CVE-2026-66689 : Unauthenticated Broken Access Control in the WordPress plugin “Anti Spam and list cleaner – AcyChecker” (versions &lt;= 2.0.0). The CVE reports unauthenticated access control issues, affecting AcyChecker

CVE-2026-66687

Customer Cross Site Scripting XSS in WpBookingly = 1.3.2 versions...

EUVD-2026-57899

Subscriber Privilege Escalation in Directories Pro = 2.0.5 versions...

CVE-2026-66660

CVE-2026-66660 describes an unauthenticated Broken Access Control vulnerability in the WordPress plugin “Contact Form 7 – PayPal & Stripe Add-on” (versions

CVE-2026-66660

Unauthenticated Broken Access Control in Contact Form 7 – PayPal & Stripe Add-on = 2.5.1 versions...

CVE-2026-66657 WordPress Biagiotti Core plugin <= 2.1.1 - Local File Inclusion vulnerability

Unauthenticated Local File Inclusion in Biagiotti Core = 2.1.1 versions...