CVE-2026-27380

Editor PHP Object Injection in Car Rental Manager = 1.3.9 versions...

CVE-2026-28002

CVE-2026-28002 affects the WordPress Booktics plugin up to version 1.0.22. The issue is an SQL Injection (blind) caused by improper neutralization of special elements in SQL commands, enabling potential unauthorized data access. No exploitation details or patches are provided in the documents; re...

CVE-2026-28002 WordPress Booktics plugin 1.0.22 - SQL Injection vulnerability

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Arraytics Booktics allows Blind SQL Injection. This issue affects Booktics: from n/a through 1.0.22...

CVE-2026-73401

CVE-2026-73401 affects the WordPress InstaWP Connect plugin (versions

CVE-2026-73401 WordPress InstaWP Connect plugin <= 0.1.3.7 - Broken Access Control vulnerability

Unauthenticated Broken Access Control in InstaWP Connect = 0.1.3.7 versions...

CVE-2026-73403

The CVE-2026-73403 entry concerns the WordPress User Registration plugin (versions ≤ 5.2.6) with unauthenticated broken access control in its registration flow. Affected software: WordPress User Registration plugin; vulnerable component: registration/authentication logic described as enforcing br...

CVE-2026-73403 WordPress User Registration plugin <= 5.2.6 - Broken Access Control vulnerability

Unauthenticated Broken Access Control in User Registration = 5.2.6 versions...

EUVD-2026-57916

Unauthenticated Broken Access Control in User Registration = 5.2.6 versions...

EUVD-2026-57915

Unauthenticated Broken Access Control in InstaWP Connect = 0.1.3.7 versions...

CVE-2026-73357 WordPress GiveWP plugin < 4.16.6 - Cross Site Scripting (XSS) vulnerability

Donor Cross Site Scripting XSS in GiveWP 4.16.6 versions...

EUVD-2026-57914

Donor Cross Site Scripting XSS in GiveWP 4.16.6 versions...

CVE-2026-73357

CVE-2026-73357 is a Donor Cross Site Scripting (XSS) in the WordPress GiveWP plugin, affecting versions before 4.16.6. The CVSS v3.1 base score is 6.5 (MEDIUM). Patch: upgrade to 4.16.6 or newer. Connected sources confirm GiveWP

CVE-2026-73353 WordPress Revolut Gateway for WooCommerce plugin < 4.22.10 - Broken Access Control vulnerability

Unauthenticated Broken Access Control in Revolut Gateway for WooCommerce 4.22.10 versions...

CVE-2026-73349 WordPress GiveWP plugin < 4.16.6 - Broken Access Control vulnerability

Unauthenticated Broken Access Control in GiveWP 4.16.6 versions...

CVE-2026-73349

CVE-2026-73349 applies to the WordPress GiveWP plugin, pre-4.16.6. It is an unauthenticated broken access control vulnerability reported for GiveWP before version 4.16.6. The provided CVSSv3.1 metrics indicate network access, low attack complexity, no privileges required, with no confidentiality ...

CVE-2026-73353

CVE-2026-73353 — WordPress plugin Revolut Gateway for WooCommerce, versions

CVE-2026-73346 WordPress MailChimp For WooCommerce plugin < 6.2 - SQL Injection vulnerability

Administrator SQL Injection in MailChimp For WooCommerce 6.2 versions...

CVE-2026-73346

The CVE concerns the WordPress plugin MailChimp For WooCommerce (affected: versions

CVE-2026-73344

The CVE-2026-73344 entry concerns the WordPress WP Data Access plugin, affected versions

CVE-2026-73344 WordPress WP Data Access plugin <= 5.5.79 - Cross Site Scripting (XSS) vulnerability

Author Cross Site Scripting XSS in WP Data Access = 5.5.79 versions...