CVE-2026-61960

WP Full Stripe Free plugin <= 8.5.0 contains an unauthenticated Cross Site Scripting (XSS) vulnerability. Affected software: WordPress WP Full Stripe Free (versions

CVE-2026-28189 WordPress Participants Database plugin <= 2.7.8.4 - Arbitrary File Deletion vulnerability

Unauthenticated Arbitrary File Deletion in Participants Database = 2.7.8.4 versions...

EUVD-2026-57967

Unauthenticated Arbitrary File Deletion in Participants Database = 2.7.8.4 versions...

CVE-2026-61960 WordPress WP Full Stripe Free plugin <= 8.5.0 - Cross Site Scripting (XSS) vulnerability

Unauthenticated Cross Site Scripting XSS in WP Full Stripe Free = 8.5.0 versions...

CVE-2026-28188 WordPress Hydra Booking plugin <= 1.2.2 - Broken Access Control vulnerability

Unauthenticated Broken Access Control in Hydra Booking = 1.2.2 versions...

CVE-2026-28188

Unauthenticated Broken Access Control in Hydra Booking = 1.2.2 versions...

EUVD-2026-57966

Unauthenticated Broken Access Control in Hydra Booking = 1.2.2 versions...

CVE-2026-28188

The CVE-2026-28188 entry concerns the WordPress Hydra Booking plugin (versions

CVE-2026-28187

The CVE-2026-28187 issue affects the WordPress Knowledge Base for Documentation, FAQs with AI Assistance plugin, version

CVE-2026-28186

Subscriber Broken Access Control in Travelfic Toolkit = 1.5.1 versions...

CVE-2026-28186 WordPress Travelfic Toolkit plugin <= 1.5.1 - Broken Access Control vulnerability

Subscriber Broken Access Control in Travelfic Toolkit = 1.5.1 versions...

EUVD-2026-57964

Subscriber Broken Access Control in Travelfic Toolkit = 1.5.1 versions...

CVE-2026-28187 WordPress Knowledge Base for Documentation, FAQs with AI Assistance plugin <= 17.211.0 - Cross Site Scripting (XSS) vulnerability

Unauthenticated Cross Site Scripting XSS in Knowledge Base for Documentation, FAQs with AI Assistance = 17.211.0 versions...

CVE-2026-28185

Unauthenticated Broken Authentication in Log in with Google = 1.4.2 versions...

CVE-2026-28185 WordPress Log in with Google plugin <= 1.4.2 - Broken Authentication vulnerability

Unauthenticated Broken Authentication in Log in with Google = 1.4.2 versions...

CVE-2026-28185

The CVE-2026-28185 entry concerns the WordPress plugin “Login with Google” (

EUVD-2026-57963

Unauthenticated Broken Authentication in Log in with Google = 1.4.2 versions...

CVE-2026-28184

...

CVE-2026-28184

...

CVE-2026-28182 WordPress AcyMailing SMTP Newsletter plugin <= 10.11.1 - Cross Site Scripting (XSS) vulnerability

Subscriber Cross Site Scripting XSS in AcyMailing SMTP Newsletter = 10.11.1 versions...