WordPress FluentCart plugin <= 1.7.1 - Sensitive Data Exposure vulnerability

Sensitive Data Exposure vulnerability discovered by AndrewN in WordPress Plugin FluentCart versions = 1.7.1...

WordPress Fluent CRM plugin <= 3.2.5 - Privilege Escalation vulnerability

Privilege Escalation vulnerability discovered by AndrewN in WordPress Plugin Fluent CRM versions = 3.2.5...

WordPress Everest Forms plugin <= 3.6.1 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by AndrewN in WordPress Plugin Everest Forms versions = 3.6.1...

WordPress Amelia plugin <= 2.4.10 - SQL Injection vulnerability

SQL Injection vulnerability discovered by AndrewN in WordPress Plugin Amelia versions = 2.4.10...

WordPress BSK PDF Manager plugin <= 3.8.1 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by Masaya Morita @mrtmyix in WordPress Plugin BSK PDF Manager versions = 3.8.1...

WordPress MLS On The Fly plugin <= 1.8.1.5 - SQL Injection vulnerability

SQL Injection vulnerability discovered by Rafie Muhammad in WordPress Plugin MLS On The Fly versions = 1.8.1.5...

abdal-cve-2026-60137

English | فارسی 🛡️ Abdal CVE-2026-60137 PoC Exploits Abdal CVE-2026-60137 is a defensive WordPress exposure verifier for the insufficient sanitization of the authornotin parameter in WPQuery, tracked as CVE-2026-60137. The vulnerability can allow SQL injection when untrusted input reaches the...

CVE-2026-109699 WordPress User Registration plugin <= 5.2.8 - Broken Access Control vulnerability

Missing Authorization vulnerability in ThemeGrill User Registration user-registration allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects User Registration: from n/a through 5.2.8...

CVE-2026-109699 WordPress User Registration plugin <= 5.2.8 - Broken Access Control vulnerability

Missing Authorization vulnerability in ThemeGrill User Registration user-registration allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects User Registration: from n/a through 5.2.8...

WordPress User Registration plugin <= 5.2.8 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by nov1337 in WordPress Plugin User Registration versions = 5.2.8...

WordPress Books Gallery plugin <= 4.8.4 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by Ananda Dhakal Patchstack in WordPress Plugin Books Gallery versions = 4.8.4...

CVE-2026-106598

The ThemeGrill User Registration WordPress plugin (versions n/a through 5.2.8 ) is vulnerable to a Missing Authorization vulnerability. This flaw allows an attacker to Retrieve Embedded Sensitive Data . No specific technical root cause, exploit details, or remediation steps are provided in the do...

CVE-2026-106598 WordPress User Registration plugin <= 5.2.8 - Sensitive Data Exposure vulnerability

Missing Authorization vulnerability in ThemeGrill User Registration user-registration allows Retrieve Embedded Sensitive Data.This issue affects User Registration: from n/a through 5.2.8...

WordPress User Registration plugin <= 5.2.8 - Sensitive Data Exposure vulnerability

Sensitive Data Exposure vulnerability discovered by sumayfe in WordPress Plugin User Registration versions = 5.2.8...

WordPress Link Whisper Free plugin <= 0.9.7 - SQL Injection vulnerability

SQL Injection vulnerability discovered by mrhaji8 in WordPress Plugin Link Whisper Free versions = 0.9.7...

WordPress User Registration plugin <= 5.2.8 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by Pr0f in WordPress Plugin User Registration versions = 5.2.8...

WordPress WOLF plugin <= 1.1.1 - SQL Injection vulnerability

SQL Injection vulnerability discovered by iczdblindman in WordPress Plugin WOLF versions = 1.1.1...

CVE-2026-103076 WordPress User Registration plugin <= 5.2.8 - Cross Site Request Forgery (CSRF) vulnerability

Cross-Site Request Forgery CSRF vulnerability in ThemeGrill User Registration user-registration allows Cross Site Request Forgery.This issue affects User Registration: from n/a through 5.2.8...

CVE-2026-108174 WordPress FOX plugin <= 1.5.4 - Broken Access Control vulnerability

Missing Authorization vulnerability in PluginUs.Net FOX woocommerce-currency-switcher allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects FOX: from n/a through 1.5.4...

CVE-2026-106597 WordPress User Registration plugin <= 5.2.8 - Broken Access Control vulnerability

Missing Authorization vulnerability in ThemeGrill User Registration user-registration allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects User Registration: from n/a through 5.2.8...