CVE-2026-62038

The eRoom WordPress plugin versions

CVE-2026-62035

The AWS S3 for WordPress Plugin (specifically the Upcasted version) is vulnerable to a Broken Access Control issue in versions

EUVD-2026-96470

Subscriber Broken Access Control in AWS S3 for WordPress Plugin – Upcasted = 3.1.0 versions...

CVE-2026-62035 WordPress AWS S3 for WordPress Plugin – Upcasted plugin <= 3.1.0 - Broken Access Control vulnerability

Subscriber Broken Access Control in AWS S3 for WordPress Plugin – Upcasted = 3.1.0 versions...

CVE-2026-62030 WordPress StreamCast plugin <= 2.4.5 - Server Side Request Forgery (SSRF) vulnerability

Unauthenticated Server Side Request Forgery SSRF in StreamCast = 2.4.5 versions...

CVE-2026-62030

The StreamCast WordPress plugin versions

CVE-2026-62025

The Tailored Tools plugin for WordPress (versions

CVE-2026-62022 WordPress Tonda Membership plugin <= 1.0.1 - Privilege Escalation vulnerability

Unauthenticated Privilege Escalation in Tonda Membership = 1.0.1 versions...

CVE-2026-62021 WordPress Angio theme <= 1.1.1 - PHP Object Injection vulnerability

Subscriber PHP Object Injection in Angio = 1.1.1 versions...

CVE-2026-42717

The WordPress Leyka plugin (versions

CVE-2026-42717 WordPress Leyka plugin <= 3.32.3 - SQL Injection vulnerability

Administrator SQL Injection in Leyka = 3.32.3 versions...

CVE-2026-42709 WordPress Food Menu – Restaurant Menu & Online Ordering for WooCommerce plugin <= 6.0.5 - Cross Site Scripting (XSS) vulnerability

Unauthenticated Cross Site Scripting XSS in Food Menu – Restaurant Menu & Online Ordering for WooCommerce = 6.0.5 versions...

CVE-2026-42699

The WordPress FV Player 8 plugin (versions

CVE-2026-42699 WordPress FV Player 8 plugin <= 8.1.8 - Cross Site Scripting (XSS) vulnerability

Unauthenticated Cross Site Scripting XSS in FV Player 8 = 8.1.8 versions...

CVE-2026-42697

The WordPress Social Share Icons & Social Share Buttons plugin (versions

CVE-2026-40802 WordPress Pubjet | پاب‌جت plugin <= 5.4.8 - Settings Change vulnerability

Subscriber Settings Change in Pubjet | پاب‌جت = 5.4.8 versions...

CVE-2026-39802 WordPress Everest Backup plugin <= 2.3.13 - Remote Code Execution (RCE) vulnerability

Unauthenticated Remote Code Execution RCE in Everest Backup = 2.3.13 versions...

CVE-2026-39801

The WordPress AIWU plugin (versions

CVE-2026-57806

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in drfuri Martfury - WooCommerce Marketplace WordPress Theme martfury allows Reflected XSS.This issue affects Martfury - WooCommerce Marketplace WordPress Theme: from n/a through 3.3.9...

CVE-2026-105892

Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability in rtCamp Inc. rtMedia for WordPress, BuddyPress and bbPress buddypress-media allows Path Traversal.This issue affects rtMedia for WordPress, BuddyPress and bbPress: from n/a through 4.7.13...