CVE-2026-28008

Unauthenticated Broken Authentication in OAuth Single Sign On – SSO OAuth Client = 7.0.0 versions...

CVE-2026-28003

Unauthenticated Cross Site Scripting XSS in Maspik – Spam blacklist = 2.9.1 versions...

EUVD-2026-57943

Unauthenticated Cross Site Scripting XSS in Business Directory = 6.4.25 versions...

EUVD-2026-57942

Unauthenticated Cross Site Scripting XSS in Maspik – Spam blacklist = 2.9.1 versions...

CVE-2026-27999

Subscriber Broken Access Control in Tourfic = 2.23.1 versions...

CVE-2026-28001

The CVE-2026-28001 entry concerns the WP Directory Kit WordPress plugin, affected versions

CVE-2026-27999 WordPress Tourfic plugin <= 2.23.1 - Broken Access Control vulnerability

Subscriber Broken Access Control in Tourfic = 2.23.1 versions...

CVE-2026-28001 WordPress WP Directory Kit plugin <= 1.5.4 - SQL Injection vulnerability

Unauthenticated SQL Injection in WP Directory Kit = 1.5.4 versions...

EUVD-2026-57941

Unauthenticated SQL Injection in WP Directory Kit = 1.5.4 versions...

CVE-2026-27544 WordPress QA Analytics plugin <= 5.2.0.0 - Remote Code Execution (RCE) vulnerability

Unauthenticated Remote Code Execution RCE in QA Analytics = 5.2.0.0 versions...

EUVD-2026-57938

Unauthenticated Privilege Escalation in MStore API = 4.20.0 versions...

CVE-2026-27543

Unauthenticated Privilege Escalation in MStore API = 4.20.0 versions...

CVE-2026-27539 WordPress Welcart e-Commerce plugin <= 2.11.31 - Cross Site Scripting (XSS) vulnerability

Unauthenticated Cross Site Scripting XSS in Welcart e-Commerce = 2.11.31 versions...

CVE-2026-27537

CVE-2026-27537 affects the WordPress plugin Popup by Supsystic (versions ≤ 1.11.2). The vulnerability is an Unauthenticated Cross Site Scripting (XSS) vulnerability. The CVSS v3.1 base score is 6.5 (MEDIUM) with AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L. The description indicates no authenticated acces...

CVE-2026-27537 WordPress Popup by Supsystic plugin <= 1.11.2 - Cross Site Scripting (XSS) vulnerability

Unauthenticated Cross Site Scripting XSS in Popup by Supsystic = 1.11.2 versions...

CVE-2026-27536

The CVE-2026-27536 details an unauthenticated Cross-Site Scripting (XSS) vulnerability in the WordPress MailChimp Subscribe Forms plugin, versions

CVE-2026-27535

CVE-2026-27535 affects the WordPress Solace Extra plugin up to version 1.6.0. The vulnerability is described as Broken Access Control, enabling lower-privilege attackers to access restricted functionality. The CVSS 3.1 base score is 7.1 (High), with Network attack vector, Low attack complexity, P...

EUVD-2026-57932

Editor PHP Object Injection in Car Rental Manager = 1.3.9 versions...

CVE-2026-27380 WordPress Car Rental Manager plugin <= 1.3.9 - PHP Object Injection vulnerability

Editor PHP Object Injection in Car Rental Manager = 1.3.9 versions...

CVE-2026-27345 WordPress Taxi Booking Manager for WooCommerce plugin <= 2.0.3 - Broken Access Control vulnerability

Unauthenticated Broken Access Control in Taxi Booking Manager for WooCommerce = 2.0.3 versions...