CVE-2026-104395

The WordPress picu plugin versions

CVE-2026-104394

The Charitable plugin for WordPress , affecting versions

CVE-2026-104394 WordPress Charitable plugin <= 1.8.12.3 - Cross Site Scripting (XSS) vulnerability

Unauthenticated Cross Site Scripting XSS in Charitable = 1.8.12.3 versions...

CVE-2026-104385 WordPress Groundhogg plugin <= 4.8.3 - Sensitive Data Exposure vulnerability

Unauthenticated Sensitive Data Exposure in Groundhogg = 4.8.3 versions...

CVE-2026-102387 WordPress Xserver Migrator plugin <= 1.6.6 - Sensitive Data Exposure vulnerability

Unauthenticated Sensitive Data Exposure in Xserver Migrator = 1.6.6 versions...

CVE-2026-95594

The SMS Alert Order Notifications plugin for WordPress (versions

CVE-2026-97308 WordPress Login Lockdown plugin <= 2.17 - Bypass Vulnerability vulnerability

Unauthenticated Bypass Vulnerability in Login Lockdown = 2.17 versions...

CVE-2026-97308

The WordPress Login Lockdown plugin (versions

CVE-2026-95526

The WordPress BEAR plugin (versions

CVE-2026-62072

The Progress Planner WordPress plugin in versions

CVE-2026-42634 WordPress Video Background Block – Use video as background in the section. plugin <= 2.0.3 - Cross Site Scripting (XSS) vulnerability

Unauthenticated Cross Site Scripting XSS in Video Background Block – Use video as background in the section. = 2.0.3 versions...

CVE-2026-42634

The Video Background Block – Use video as background in the section. WordPress plugin, versions

CVE-2026-41562 WordPress Norvis Backup plugin <= 1.1.0 - Sensitive Data Exposure vulnerability

Unauthenticated Sensitive Data Exposure in Norvis Backup = 1.1.0 versions...

CVE-2026-41561

The Museder RestoreOne WordPress plugin, version 2.7.276 and below , is vulnerable to an Unauthenticated Sensitive Data Exposure (CWE-201). This vulnerability allows an unauthenticated attacker to access sensitive information over the network with low complexity. No specific remediation steps, ro...

CVE-2026-41559

The SafeSnap – Verified WordPress Backup & Restore plugin (versions

EUVD-2026-93046

Unauthenticated Sensitive Data Exposure in SafeSnap – Verified WordPress Backup & Restore = 2.1.2 versions...

CVE-2026-41559 WordPress SafeSnap – Verified WordPress Backup & Restore plugin <= 2.1.2 - Sensitive Data Exposure vulnerability

Unauthenticated Sensitive Data Exposure in SafeSnap – Verified WordPress Backup & Restore = 2.1.2 versions...

CVE-2026-39791

The Mailjet Email Marketing plugin for WordPress (versions

CVE-2026-39788 WordPress Front End PM plugin <= 11.4.6 - Cross Site Scripting (XSS) vulnerability

Subscriber Cross Site Scripting XSS in Front End PM = 11.4.6 versions...

CVE-2026-39784 WordPress Hotel Booking plugin <= 3.8 - Cross Site Scripting (XSS) vulnerability

Unauthenticated Cross Site Scripting XSS in Hotel Booking = 3.8 versions...