CVE-2026-66665 WordPress Type Hub plugin <= 2.0.6 - Arbitrary File Upload vulnerability

Unauthenticated Arbitrary File Upload in Type Hub = 2.0.6 versions...

CVE-2026-66678 WordPress Advanced Custom Fields: Font Awesome Field plugin <= 6.1.1 - Broken Access Control vulnerability

Contributor Broken Access Control in Advanced Custom Fields: Font Awesome Field = 6.1.1 versions...

CVE-2026-66678

CVE-2026-66678 concerns a Broken Access Control issue in the WordPress plugin Advanced Custom Fields: Font Awesome Field , affecting versions up to and including 6.1.1 . The connected sources consistently describe the vulnerability class and affected plugin/version but do not provide technical de...

CVE-2026-66664

CVE-2026-66664 : Unauthenticated XSS in the WordPress plugin “SEO Plugin by Squirrly SEO” (versions

CVE-2026-66664 WordPress SEO plugin by Squirrly SEO plugin <= 14.2.0 - Cross Site Scripting (XSS) vulnerability

Unauthenticated Cross Site Scripting XSS in SEO Plugin by Squirrly SEO = 14.2.0 versions...

CVE-2026-66664 WordPress SEO plugin by Squirrly SEO plugin <= 14.2.0 - Cross Site Scripting (XSS) vulnerability

Unauthenticated Cross Site Scripting XSS in SEO Plugin by Squirrly SEO = 14.2.0 versions...

CVE-2026-66662

CVE-2026-66662 concerns an Unauthenticated Privilege Escalation in the WordPress plugin Frontend Admin by DynamiApps targeting versions up to 3.29.10 . Affected component is the plugin’s frontend admin functionality; the underlying cause is not detailed in the provided documents beyond the unauth...

CVE-2026-66663 WordPress WP Data Access plugin <= 5.5.79 - Cross Site Scripting (XSS) vulnerability

Unauthenticated Cross Site Scripting XSS in WP Data Access = 5.5.79 versions...

EUVD-2026-53889

Unauthenticated Cross Site Scripting XSS in WP Data Access = 5.5.79 versions...

CVE-2026-66662 WordPress Frontend Admin by DynamiApps plugin <= 3.29.10 - Privilege Escalation vulnerability

Unauthenticated Privilege Escalation in Frontend Admin by DynamiApps = 3.29.10 versions...

CVE-2026-66663

CVE-2026-66663 describes an Unauthenticated Cross Site Scripting (XSS) vulnerability in the WordPress plugin WP Data Access (versions

CVE-2026-66470

The CVE-2026-66470 entry affects the WordPress plugin “Frontend Admin by DynamiApps” versions up to 3.29.10 (

CVE-2026-66452

CVE-2026-66452 affects the WordPress plugin “Legal Text Connector” by IT-Recht Kanzlei, versions

CVE-2026-66457

CVE-2026-66457 describes an unauthenticated cross-site scripting (XSS) vulnerability in the WordPress Events Manager plugin version ≤ 7.4.1. The issue is identified as an XSS flaw; no root-cause specifics are provided in the documents. Exploitation status and precise impact vectors are not detail...

CVE-2026-66452 WordPress Legal Text Connector of the IT-Recht Kanzlei plugin <= 1.0.13 - Broken Access Control vulnerability

Unauthenticated Broken Access Control in Legal Text Connector of the IT-Recht Kanzlei = 1.0.13 versions...

CVE-2026-66457 WordPress Events Manager plugin <= 7.4.1 - Cross Site Scripting (XSS) vulnerability

Unauthenticated Cross Site Scripting XSS in Events Manager = 7.4.1 versions...

CVE-2026-66452 WordPress Legal Text Connector of the IT-Recht Kanzlei plugin <= 1.0.13 - Broken Access Control vulnerability

Unauthenticated Broken Access Control in Legal Text Connector of the IT-Recht Kanzlei = 1.0.13 versions...

CVE-2026-66451

CVE-2026-66451 affects the WordPress plugin WP Event Solution (

CVE-2026-66451 WordPress WP Event SOlution plugin <= 4.1.9 - Broken Authentication vulnerability

Unauthenticated Broken Authentication in WP Event SOlution = 4.1.9 versions...

EUVD-2026-53884

Unauthenticated Broken Authentication in WP Event SOlution = 4.1.9 versions...