CVE-2026-66426

CVE-2026-66426 affects the WordPress WP-Stats plugin (versions

CVE-2026-66424 WordPress SMS Alert Order Notifications plugin <= 3.9.7 - Privilege Escalation vulnerability

Unauthenticated Privilege Escalation in SMS Alert Order Notifications = 3.9.7 versions...

CVE-2026-66424

Unauthenticated Privilege Escalation in SMS Alert Order Notifications = 3.9.7 versions...

EUVD-2026-57860

Unauthenticated Privilege Escalation in SMS Alert Order Notifications = 3.9.7 versions...

EUVD-2026-57861

Unauthenticated Cross Site Scripting XSS in WP-Stats = 2.56 versions...

EUVD-2026-57980

Subscriber Arbitrary File Download in AI Hub = 1.3.10 versions...

CVE-2026-61984 WordPress WPMobile.App plugin <= 11.77 - Broken Access Control vulnerability

Unauthenticated Broken Access Control in WPMobile.App = 11.77 versions...

CVE-2026-61984

CVE-2026-61984 affects the WordPress WordPress WP Mobile App plugin (WPMobile.App) for versions

CVE-2026-61984

Unauthenticated Broken Access Control in WPMobile.App = 11.77 versions...

EUVD-2026-57978

Unauthenticated Broken Access Control in WPMobile.App = 11.77 versions...

CVE-2026-61980 WordPress OMGF Pro plugin <= 5.2.7 - Arbitrary File Download vulnerability

Unauthenticated Arbitrary File Download in OMGF Pro = 5.2.7 versions...

CVE-2026-61980

CVE-2026-61980 describes an Unauthenticated Arbitrary File Download in OMGF Pro plugin for WordPress, version

CVE-2026-61978

The CVE concerns a WordPress plugin: Secure Card Gateway for ePay Paycenter (Piraeus Bank), affected versions up to 1.0.32. The issue is Unauthenticated Broken Access Control, implying that unauthenticated attackers could access or manipulate restricted functionality within the plugin. No root ca...

CVE-2026-61979 WordPress SAML SP Single Sign On plugin <= 5.4.3 - Privilege Escalation vulnerability

Unauthenticated Privilege Escalation in SAML SP Single Sign On = 5.4.3 versions...

EUVD-2026-57976

Unauthenticated Privilege Escalation in SAML SP Single Sign On = 5.4.3 versions...

CVE-2026-61979

CVE-2026-61979 affects the WordPress SAML SP Single Sign On plugin (≤ 5.4.3). It enables unauthenticated privilege escalation, per the NVD/CVE records and CVE listings. The provided documents do not specify the exact exploit vector, affected versions beyond ≤ 5.4.3, or remediation steps (e.g., pa...

CVE-2026-61979

Unauthenticated Privilege Escalation in SAML SP Single Sign On = 5.4.3 versions...

CVE-2026-61969

Unauthenticated SQL Injection in Listdom = 5.6.0 versions...

CVE-2026-61974 WordPress Mang Board WP plugin <= 2.3.4 - Cross Site Scripting (XSS) vulnerability

Unauthenticated Cross Site Scripting XSS in Mang Board WP = 2.3.4 versions...

EUVD-2026-57972

Unauthenticated Privilege Escalation in miniorange otp verification = 5.5.1 versions...