CVE-2026-65553

Unauthenticated Remote Code Execution in WordPress Spider Analyser plugin (

CVE-2026-65552 WordPress Export User Data plugin <= 2.2.6 - PHP Object Injection vulnerability

Subscriber PHP Object Injection in Export User Data = 2.2.6 versions...

CVE-2026-65549

Summary: CVE-2026-65549 concerns the WordPress plugin Jeg Kit for Elementor, affected

CVE-2026-65546

CVE-2026-65546 affects the WordPress plugin Qode Tours (versions

CVE-2026-65545 WordPress AI Engine plugin <= 3.6.8 - Cross Site Scripting (XSS) vulnerability

Unauthenticated Cross Site Scripting XSS in AI Engine = 3.6.8 versions...

CVE-2026-65544 WordPress Super Socializer plugin <= 7.14.5 - Cross Site Scripting (XSS) vulnerability

Unauthenticated Cross Site Scripting XSS in Super Socializer = 7.14.5 versions...

CVE-2026-65542 WordPress Super Socializer plugin <= 7.14.5 - Broken Authentication vulnerability

Unauthenticated Broken Authentication in Super Socializer = 7.14.5 versions...

CVE-2026-65542

CVE-2026-65542 concerns the WordPress WordPress Super Socializer plugin, affected versions

CVE-2026-65541 WordPress Staff Training plugin <= 1.0.7 - Broken Access Control vulnerability

Unauthenticated Broken Access Control in Staff Training = 1.0.7 versions...

CVE-2026-65541

The CVE concerns WordPress Plugin “Staff Training” versions

CVE-2026-65520

CVE-2026-65520 concerns the WordPress plugin WP OAuth Server (vulnerable:

CVE-2026-65523

CVE-2026-65523 affects the WordPress plugin Formidable Forms Signature Online Contract Automation (versions

CVE-2026-65523 WordPress Formidable Forms Signature Online Contract Automation plugin <= 2.0.1 - Insecure Direct Object References (IDOR) vulnerability

Unauthenticated Insecure Direct Object References IDOR in Formidable Forms Signature Online Contract Automation = 2.0.1 versions...

CVE-2026-65517 WordPress Easy PayPal Buy Now Button plugin <= 2.0.4 - Cross Site Scripting (XSS) vulnerability

Unauthenticated Cross Site Scripting XSS in Easy PayPal Buy Now Button = 2.0.4 versions...

CVE-2026-65517

The connected documents confirm a vulnerability in the WordPress plugin “Easy PayPal Buy Now Button” affecting versions up to 2.0.4, described as Unauthenticated Cross Site Scripting (XSS). No details on the root cause, exploit method, affected components beyond the plugin, impact metrics, or ava...

CVE-2026-65515 WordPress AffiliateWP plugin <= 2.35.0 - Cross Site Scripting (XSS) vulnerability

Unauthenticated Cross Site Scripting XSS in AffiliateWP = 2.35.0 versions...

CVE-2026-65513

CVE-2026-65513 affects the WordPress plugin Simply Schedule Appointments (versions ≤ 1.6.12.10). The connected sources consistently describe an Unauthenticated XSS vulnerability impacting this plugin. The vulnerability is described without details on the exact vulnerable component, payload, or ex...

CVE-2026-65508

The CVE-2026-65508 entry concerns the WordPress plugin Simply Schedule Appointments (vulnerable:

CVE-2026-65504

CVE-2026-65504 describes an unauthenticated broken access control in the WordPress BOX NOW Delivery Croatia plugin, vulnerable in versions

CVE-2026-65504 WordPress BOX NOW Delivery Croatia plugin <= 3.3.0 - Broken Access Control vulnerability

Unauthenticated Broken Access Control in BOX NOW Delivery Croatia = 3.3.0 versions...