PT-2026-71563

Subscriber Cross Site Scripting XSS in Profile Extra Fields by BestWebSoft = 1.3.4 versions...

PT-2026-71508

Unauthenticated Cross Site Scripting XSS in Maspik – Spam blacklist = 2.9.1 versions...

PT-2026-71500

Unauthenticated Cross Site Scripting XSS in Popup by Supsystic = 1.11.2 versions...

PT-2026-71523

Customer Sensitive Data Exposure in WP Event SOlution = 4.1.18 versions...

PT-2026-71547

Unauthenticated Privilege Escalation in SMS Alert Order Notifications = 3.9.7 versions...

PT-2026-71512

Unauthenticated Bypass Vulnerability in Headless Single Sign On = 1.6 versions...

PT-2026-71557

Subscriber SQL Injection in If-So Dynamic Content Personalization = 1.10 versions...

PT-2026-71498

Subscriber Broken Access Control in Solace Extra = 1.6.0 versions...

PT-2026-71502

Unauthenticated Cross Site Scripting XSS in Welcart e-Commerce = 2.11.31 versions...

PT-2026-71505

Subscriber Broken Access Control in Tourfic = 2.23.1 versions...

PT-2026-71604

Donor Cross Site Scripting XSS in GiveWP 4.16.6 versions...

PT-2026-71521

Unauthenticated Cross Site Scripting XSS in Blog Floating Button = 1.4.20 versions...

PT-2026-71497

Editor PHP Object Injection in Car Rental Manager = 1.3.9 versions...

PT-2026-71570

Unauthenticated Broken Access Control in Internal Link Optimiser = 5.2.7 versions...

PT-2026-71592

Unauthenticated Cross Site Scripting XSS in SureDash = 1.10.1 versions...

PT-2026-71501

Unauthenticated SQL Injection in WP Directory Kit = 1.5.4 versions...

PT-2026-71496

Unauthenticated Broken Access Control in Taxi Booking Manager for WooCommerce = 2.0.3 versions...

PT-2026-71506

Unauthenticated SQL Injection in WP Directory Kit = 1.5.4 versions...

PT-2026-71559

Unauthenticated Local File Inclusion in Geo Mashup = 1.13.18 versions...

PT-2026-71518

Subscriber Broken Access Control in Service Finder Booking = 6.2 versions...