CVE-2026-41559

The SafeSnap – Verified WordPress Backup & Restore plugin (versions

CVE-2026-39791

The Mailjet Email Marketing plugin for WordPress (versions

CVE-2026-39788 WordPress Front End PM plugin <= 11.4.6 - Cross Site Scripting (XSS) vulnerability

Subscriber Cross Site Scripting XSS in Front End PM = 11.4.6 versions...

CVE-2026-39784 WordPress Hotel Booking plugin <= 3.8 - Cross Site Scripting (XSS) vulnerability

Unauthenticated Cross Site Scripting XSS in Hotel Booking = 3.8 versions...

CVE-2026-39775 WordPress JobZilla - Job Board WordPress Theme theme <= 2.2 - Privilege Escalation vulnerability

Subscriber Privilege Escalation in JobZilla - Job Board WordPress Theme = 2.2 versions...

CVE-2026-39775

The JobZilla - Job Board WordPress Theme (versions

EUVD-2026-93025

Subscriber Privilege Escalation in JobZilla - Job Board WordPress Theme = 2.2 versions...

CVE-2026-39770

The Doctreat WordPress theme, version 1.7.0 and below , is vulnerable to an unauthenticated arbitrary file upload (CWE-434). This vulnerability allows an attacker to upload files with dangerous types to the server. The impact is rated as CRITICAL (CVSS 3.1 score of 10.0), potentially leading to h...

CVE-2026-39765 WordPress Challan plugin <= 3.7.88 - Privilege Escalation vulnerability

Shop Manager Privilege Escalation in Challan = 3.7.88 versions...

CVE-2026-39765

The Challan WordPress plugin (versions

EUVD-2026-93261

Contributor Arbitrary File Deletion in Jobs for WordPress = 2.8.2 versions...

CVE-2026-39752

The Jobs for WordPress plugin (versions

CVE-2026-39752 WordPress Jobs for WordPress plugin <= 2.8.2 - Arbitrary File Deletion vulnerability

Contributor Arbitrary File Deletion in Jobs for WordPress = 2.8.2 versions...

CVE-2026-39749 WordPress App for Cloudflare® plugin <= 1.10.1 - Broken Access Control vulnerability

Subscriber Broken Access Control in App for Cloudflare® = 1.10.1 versions...

CVE-2026-39748 WordPress EduMall theme <= 4.5.3 - Reflected Cross Site Scripting (XSS) vulnerability

Unauthenticated Cross Site Scripting XSS in EduMall = 4.5.3 versions...

CVE-2026-39731 WordPress Database for CF7 plugin <= 1.2.6 - Cross Site Scripting (XSS) vulnerability

Unauthenticated Cross Site Scripting XSS in Database for CF7 = 1.2.6 versions...

CVE-2026-39730

The Wise Chat plugin for WordPress (versions

CVE-2026-39729

The Edwiser Bridge WordPress plugin versions

CVE-2026-39728 WordPress Instapage Plugin plugin <= 3.7.2 - Server Side Request Forgery (SSRF) vulnerability

Unauthenticated Server Side Request Forgery SSRF in Instapage Plugin = 3.7.2 versions...

CVE-2026-39724 WordPress HTTP Requests Manager plugin <= 1.3.11 - Cross Site Scripting (XSS) vulnerability

Unauthenticated Cross Site Scripting XSS in HTTP Requests Manager = 1.3.11 versions...