CVE-2026-73184

Unauthenticated Cross Site Scripting XSS in Global Gallery = 11.1.2 versions...

CVE-2026-73182

Unauthenticated Cross Site Scripting XSS in BBQ Pro = 3.9 versions...

CVE-2026-66613

Unauthenticated Remote Code Execution RCE in JetEngine = 3.8.14 versions...

CVE-2026-66596

Unauthenticated Cross Site Scripting XSS in Newsletter = 9.3.3 versions...

CVE-2026-66668

Subscriber SQL Injection in Community by PeepSo = 9.0.5.2 versions...

CVE-2026-61986

Unauthenticated Cross Site Scripting XSS in Contest Gallery = 30.0.5 versions...

CVE-2026-32552

Subscriber SQL Injection in YITH WooCommerce Membership Premium = 2.33.0 versions...

EUVD-2026-62392

Unauthenticated SQL Injection in Total Donations = 2.0.5 versions...

CVE-2026-73391 WordPress Total Donations plugin <= 2.0.5 - SQL Injection vulnerability

Unauthenticated SQL Injection in Total Donations = 2.0.5 versions...

CVE-2026-73391

The WordPress Total Donations plugin (≤2.0.5) has an unauthenticated SQL Injection vulnerability rated CVSS 9.3 Critical. Patchstack reported it; no patch version or in-the-wild exploitation details are provided in the documents.

CVE-2026-73389 WordPress Kalles Addons plugin <= 1.0.6 - PHP Object Injection vulnerability

Unauthenticated PHP Object Injection in Kalles Addons = 1.0.6 versions...

CVE-2026-73390 WordPress Total Donations plugin <= 2.0.5 - Privilege Escalation vulnerability

Unauthenticated Privilege Escalation in Total Donations = 2.0.5 versions...

EUVD-2026-62391

Unauthenticated Privilege Escalation in Total Donations = 2.0.5 versions...

EUVD-2026-62390

Unauthenticated PHP Object Injection in Kalles Addons = 1.0.6 versions...

CVE-2026-73389

Unauthenticated PHP Object Injection in Kalles Addons = 1.0.6 versions...

CVE-2026-73390

The Total Donations WordPress plugin (versions ≤ 2.0.5) has an unauthenticated privilege escalation vulnerability allowing network attackers to gain elevated access without credentials. CVSS 9.8 (Critical) reflects high confidentiality, integrity, and availability impact. No root cause, patch ver...

CVE-2026-73388 WordPress Nikstore Core plugin <= 1.5 - SQL Injection vulnerability

Unauthenticated SQL Injection in Nikstore Core = 1.5 versions...

CVE-2026-73387 WordPress Resido theme <= 1.5 - Local File Inclusion vulnerability

Unauthenticated Local File Inclusion in Resido = 1.5 versions...

EUVD-2026-62388

Unauthenticated Local File Inclusion in Resido = 1.5 versions...

EUVD-2026-62386

Unauthenticated Broken Access Control in Outranking Plugin Options = 1.1.3 versions...