CVE-2026-104814 WordPress Form Block plugin <= 1.8.1 - Cross Site Scripting (XSS) vulnerability

Unauthenticated Cross Site Scripting XSS in Form Block = 1.8.1 versions...

CVE-2026-104814

The Form Block WordPress plugin in versions

CVE-2026-104757

The WordPress Import and export users and customers plugin (versions

CVE-2026-104406 WordPress picu plugin <= 3.10.1 - Broken Access Control vulnerability

Unauthenticated Broken Access Control in picu = 3.10.1 versions...

CVE-2026-104406

The WordPress picu plugin (versions

CVE-2026-104395

The WordPress picu plugin versions

CVE-2026-104394

The Charitable plugin for WordPress , affecting versions

CVE-2026-104394 WordPress Charitable plugin <= 1.8.12.3 - Cross Site Scripting (XSS) vulnerability

Unauthenticated Cross Site Scripting XSS in Charitable = 1.8.12.3 versions...

CVE-2026-104385 WordPress Groundhogg plugin <= 4.8.3 - Sensitive Data Exposure vulnerability

Unauthenticated Sensitive Data Exposure in Groundhogg = 4.8.3 versions...

CVE-2026-102387 WordPress Xserver Migrator plugin <= 1.6.6 - Sensitive Data Exposure vulnerability

Unauthenticated Sensitive Data Exposure in Xserver Migrator = 1.6.6 versions...

CVE-2026-95594

The SMS Alert Order Notifications plugin for WordPress (versions

CVE-2026-97308

The WordPress Login Lockdown plugin (versions

CVE-2026-97308 WordPress Login Lockdown plugin <= 2.17 - Bypass Vulnerability vulnerability

Unauthenticated Bypass Vulnerability in Login Lockdown = 2.17 versions...

CVE-2026-95526

The WordPress BEAR plugin (versions

CVE-2026-62072

The Progress Planner WordPress plugin in versions

CVE-2026-42634 WordPress Video Background Block – Use video as background in the section. plugin <= 2.0.3 - Cross Site Scripting (XSS) vulnerability

Unauthenticated Cross Site Scripting XSS in Video Background Block – Use video as background in the section. = 2.0.3 versions...

CVE-2026-42634

The Video Background Block – Use video as background in the section. WordPress plugin, versions

CVE-2026-42418 WordPress Social Rocket plugin <= 1.3.5 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Socialrocket Social Rocket social-rocket allows Reflected XSS.This issue affects Social Rocket: from n/a through 1.3.5...

CVE-2026-41562 WordPress Norvis Backup plugin <= 1.1.0 - Sensitive Data Exposure vulnerability

Unauthenticated Sensitive Data Exposure in Norvis Backup = 1.1.0 versions...

CVE-2026-41561

The Museder RestoreOne WordPress plugin, version 2.7.276 and below , is vulnerable to an Unauthenticated Sensitive Data Exposure (CWE-201). This vulnerability allows an unauthenticated attacker to access sensitive information over the network with low complexity. No specific remediation steps, ro...