EUVD-2026-57875

Subscriber Broken Access Control in ReactPress = 3.4.0 versions...

CVE-2026-66454

Unauthenticated Broken Access Control in WP Social Avatar = 1.5 versions...

EUVD-2026-57874

Unauthenticated Broken Access Control in WP Social Avatar = 1.5 versions...

CVE-2026-66455

CVE-2026-66455 affects the WordPress ReactPress plugin up to version 3.4.0, described as a Subscriber Broken Access Control vulnerability. The NVD entry links a MEDIUM impact (CVSS 3.1: AV:N/AC:H/PR:L/UI:N/S:C/C:L/I:L/A:L) with network attack vector and low confidentiality, integrity, and availab...

CVE-2026-66454

CVE-2026-66454 affects the WordPress WP Social Avatar plugin (versions

CVE-2026-66453 WordPress Salon booking system plugin <= 10.30.26 - Broken Authentication vulnerability

Unauthenticated Broken Authentication in Salon booking system = 10.30.26 versions...

CVE-2026-66453

CVE-2026-66453 affects the WordPress Salon Booking System plugin,

EUVD-2026-57872

Unauthenticated Local File Inclusion in Geo Mashup = 1.13.18 versions...

CVE-2026-66450 WordPress Geo Mashup plugin <= 1.13.18 - Local File Inclusion vulnerability

Unauthenticated Local File Inclusion in Geo Mashup = 1.13.18 versions...

CVE-2026-66450

Unauthenticated Local File Inclusion in Geo Mashup = 1.13.18 versions...

CVE-2026-66449

Unauthenticated Cross Site Scripting XSS in Geo Mashup = 1.13.18 versions...

EUVD-2026-57871

Unauthenticated Cross Site Scripting XSS in Geo Mashup = 1.13.18 versions...

CVE-2026-66449

CVE-2026-66449 : Unauthenticated XSS in WordPress Geo Mashup plugin, affected versions

CVE-2026-66450

CVE-2026-66450 refers to an Unauthenticated Local File Inclusion in the WordPress plugin Geo Mashup, affected versions

CVE-2026-66449 WordPress Geo Mashup plugin <= 1.13.18 - Cross Site Scripting (XSS) vulnerability

Unauthenticated Cross Site Scripting XSS in Geo Mashup = 1.13.18 versions...

CVE-2026-66446 WordPress If-So Dynamic Content Personalization plugin <= 1.10 - SQL Injection vulnerability

Subscriber SQL Injection in If-So Dynamic Content Personalization = 1.10 versions...

CVE-2026-66446

CVE-2026-66446 : Concrete details across connected sources show a SQL Injection vulnerability in WordPress plugin If-So Dynamic Content Personalization affecting versions

CVE-2026-66446

Subscriber SQL Injection in If-So Dynamic Content Personalization = 1.10 versions...

EUVD-2026-57870

Subscriber SQL Injection in If-So Dynamic Content Personalization = 1.10 versions...

CVE-2026-66444

Subscriber Sensitive Data Exposure in Payment Forms for Paystack = 4.0.5 versions...