CVE-2026-62117 WordPress Barcode Scanner with Inventory & Order Manager plugin <= 1.13.1 - SQL Injection vulnerability

Subscriber SQL Injection in Barcode Scanner with Inventory & Order Manager = 1.13.1 versions...

CVE-2026-62100 WordPress KuteShop theme <= 4.2.9 - Reflected Cross Site Scripting (XSS) vulnerability

Unauthenticated Cross Site Scripting XSS in KuteShop = 4.2.9 versions...

CVE-2026-62095

The WordPress Biolife theme (versions

CVE-2026-62096 WordPress Biolife theme <= 3.2.3 - Local File Inclusion vulnerability

Unauthenticated Local File Inclusion in Biolife = 3.2.3 versions...

CVE-2026-62095 WordPress Biolife theme <= 3.2.3 - Reflected Cross Site Scripting (XSS) vulnerability

Unauthenticated Cross Site Scripting XSS in Biolife = 3.2.3 versions...

CVE-2026-62091

The WordPress Armania theme (versions

CVE-2026-62087

The WordPress Equadio theme (versions

CVE-2026-62086 WordPress Juno theme <= 2.25 - PHP Object Injection vulnerability

Unauthenticated PHP Object Injection in Juno = 2.25 versions...

CVE-2026-62086

The WordPress Juno theme versions

CVE-2026-62075

The Backhoe WordPress theme versions

CVE-2026-62070

The WordPress Flipmart theme versions

CVE-2026-62070 WordPress Flipmart theme <= 2.8 - Local File Inclusion vulnerability

Unauthenticated Local File Inclusion in Flipmart = 2.8 versions...

CVE-2026-62068 WordPress Teoro theme <= 1.1 - Local File Inclusion vulnerability

Unauthenticated Local File Inclusion in Teoro = 1.1 versions...

CVE-2026-62066 WordPress Volos theme <= 1.2 - Local File Inclusion vulnerability

Unauthenticated Local File Inclusion in Volos = 1.2 versions...

CVE-2026-62050 WordPress Splendour theme <= 1.23 - PHP Object Injection vulnerability

Unauthenticated PHP Object Injection in Splendour = 1.23 versions...

CVE-2026-62038 WordPress eRoom plugin <= 1.7.1 - Broken Authentication vulnerability

Unauthenticated Broken Authentication in eRoom = 1.7.1 versions...

CVE-2026-62038

The eRoom WordPress plugin versions

CVE-2026-62035 WordPress AWS S3 for WordPress Plugin – Upcasted plugin <= 3.1.0 - Broken Access Control vulnerability

Subscriber Broken Access Control in AWS S3 for WordPress Plugin – Upcasted = 3.1.0 versions...

EUVD-2026-96470

Subscriber Broken Access Control in AWS S3 for WordPress Plugin – Upcasted = 3.1.0 versions...

CVE-2026-62035

The AWS S3 for WordPress Plugin (specifically the Upcasted version) is vulnerable to a Broken Access Control issue in versions