CVE-2026-1982

The Persian Elementor (المنتور فارسی) WordPress plugin is vulnerable up to version 2.8.1 due to trusting a user-supplied payment amount without server-side validation against the ZarinPal widget price. Unauthenticated attackers can submit arbitrary payment amounts to the ZarinPal gateway via the ...

PT-2026-66381

The Easy Appointments WordPress plugin through 3.12.26 does not perform any capability or nonce check in one of its connection-deletion actions, allowing users with contributor-level access to delete the booking configuration and disable the booking system...

PT-2026-66462

Name of the Vulnerable Software and Affected Versions FuseWP versions prior to 1.1.24.3 Description The FuseWP plugin for WordPress contains a Cross-Site Request Forgery CSRF flaw, which occurs when a web application fails to verify that a request was intentionally initiated by the user. This iss...

PT-2026-66393

The WP Hotel Booking WordPress plugin before 2.3.2 does not sanitise and escape a search parameter on an administrative listing before using it in a SQL query, allowing users holding the WP Hotel Booking WordPress plugin before 2.3.2's booking-management roles to perform SQL injection attacks...

WordPress Subscriptions for WooCommerce plugin <= 2.0.0 - Missing Authorization to Authenticated (Shop Manager+) Arbitrary Plugin Installation vulnerability

Missing Authorization to Authenticated Shop Manager+ Arbitrary Plugin Installation vulnerability discovered by Wordfence PRISM in WordPress Plugin Subscriptions for WooCommerce versions = 2.0.0...

NPM: mathlive's Lack of Escaping of HTML allows for XSS

NPM: mathlive's Lack of Escaping of HTML allows for XSS vulnerability discovered by ? in WordPress Npm mathlive versions = 0.109.2...

WP2Shell WordPress Exploit Technical Analysis and Real Attack Data

On July 17th, 2026, the WordPress Security Team released updates to WordPress core addressing a critical vulnerability chain that can be leveraged by unauthenticated attackers to create an administrator account and then execute code through normal administrator capabilities, such as uploading a...

WordPress Improved Save Button plugin <= 1.2.1 - Authenticated (Author+) Second-Order SQL Injection vulnerability

Authenticated Author+ Second-Order SQL Injection vulnerability discovered by Wordfence PRISM in WordPress Plugin Improved Save Button versions = 1.2.1...

NPM: swagger-typescript-api vulnerable to code injection via unescaped OpenAPI path strings in generated method bodies

NPM: swagger-typescript-api vulnerable to code injection via unescaped OpenAPI path strings in generated method bodies vulnerability discovered by ? in WordPress Npm swagger-typescript-api versions = 13.12.1...

NPM: swagger-typescript-api vulnerable to code injection via unescaped enum string values

NPM: swagger-typescript-api vulnerable to code injection via unescaped enum string values vulnerability discovered by ? in WordPress Npm swagger-typescript-api versions = 13.12.1...

NPM: swagger-typescript-api vulnerable to Server-Side Request Forgery via spec `$ref`

NPM: swagger-typescript-api vulnerable to Server-Side Request Forgery via spec $ref vulnerability discovered by ? in WordPress Npm swagger-typescript-api versions = 13.12.1...

NPM: swagger-typescript-api vulnerable to authorization-token exfiltration via spec `$ref`

NPM: swagger-typescript-api vulnerable to authorization-token exfiltration via spec $ref vulnerability discovered by ? in WordPress Npm swagger-typescript-api versions = 13.12.1...

WordPress المنتور فارسی plugin <= 2.8.1 - Unauthenticated Price Manipulation vulnerability

Unauthenticated Price Manipulation vulnerability discovered by Chiao-Lin Yu Steven Meow in WordPress Plugin المنتور فارسی versions = 2.8.1...

WordPress AnsPress – Question and answer plugin 4.4.4 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by Taylsec in WordPress Plugin AnsPress – Question and answer versions 4.4.4...

WordPress Colissimo Officiel : Méthodes de livraison pour WooCommerce plugin <= 2.10.0 - Insecure Direct Object References (IDOR) vulnerability

Insecure Direct Object References IDOR vulnerability discovered by TurboNexic in WordPress Plugin Colissimo Officiel : Méthodes de livraison pour WooCommerce versions = 2.10.0...

WordPress Gutenberg Blocks by Kadence Blocks plugin <= 3.7.8 - Sensitive Data Exposure vulnerability

Sensitive Data Exposure vulnerability discovered by Abdullah Kareem "cyberkareem" in WordPress Plugin Gutenberg Blocks by Kadence Blocks versions = 3.7.8...

CVE-2026-14270

The Extra Checkout Options addon for Extra Product Options & Add-Ons for WooCommerce plugin for WordPress is vulnerable to Arbitrary File Upload in all versions up to, and including, 2.3.2. This is due to missing authorization and nonce validation in the ecosavesettings function, which allows...

CVE-2026-14270 Extra Checkout Options (addon for Extra Product Options & Add-Ons for WooCommerce) <= 2.3.2 - Missing Authorization to Authenticated (Subscriber+) Arbitrary File Upload in eco_save_settings

The Extra Checkout Options addon for Extra Product Options & Add-Ons for WooCommerce plugin for WordPress is vulnerable to Arbitrary File Upload in all versions up to, and including, 2.3.2. This is due to missing authorization and nonce validation in the ecosavesettings function, which allows...

CVE-2026-14270 Extra Checkout Options (addon for Extra Product Options & Add-Ons for WooCommerce) <= 2.3.2 - Missing Authorization to Authenticated (Subscriber+) Arbitrary File Upload in eco_save_settings

The Extra Checkout Options addon for Extra Product Options & Add-Ons for WooCommerce plugin for WordPress is vulnerable to Arbitrary File Upload in all versions up to, and including, 2.3.2. This is due to missing authorization and nonce validation in the ecosavesettings function, which allows...

CVE-2026-6089

The WP CTA plugin for WordPress is vulnerable to Server-Side Request Forgery via the 'stickysmedia' parameter in imported JSON files in all versions up to, and including, 2.1.2. This is due to the importsidebars function passing user-supplied URLs from imported JSON data to filegetcontents with...