CVE-2026-80518

The WP Ultimate CSV Importer WordPress plugin (versions before 9.2 ) is vulnerable to unauthenticated data disclosure. The root cause is the failure to use a site-specific secret when deriving the storage location for import logs within the uploads directory , combined with a lack of direct acces...

CVE-2026-80517

The WP Ultimate CSV Importer WordPress plugin (versions before 9.2 ) is vulnerable to Stored Cross-Site Scripting (XSS) . The root cause is the failure to properly validate file types within uploaded archives or sanitize their content before storing them in a publicly served location. This allows...

CVE-2026-103514

The WP 2FA WordPress plugin, in versions prior to 4.1.0 , is vulnerable to a two-factor authentication bypass. The root cause is the failure to invalidate a time-based one-time passcode (TOTP) after its initial use. An attacker who possesses an account's password and observes a valid code within ...

CVE-2026-85568

The Unlimited Elements for Elementor WordPress plugin, in versions before 2.0.21 , is vulnerable to SQL injection because it fails to correctly handle a search value before rewriting an already prepared SQL statement. This flaw allows unauthenticated users to perform SQL injection attacks and ret...

CVE-2026-101162

The WP Ultimate Review WordPress plugin, in versions prior to 2.4.4 , is vulnerable to Stored Cross-Site Scripting (XSS) . The issue stems from the application failing to properly escape certain review overview settings before they are displayed in posts. If author reviews are enabled, an attacke...

CVE-2026-101159

The WP Ultimate Review WordPress plugin, in versions before 2.4.4 , is vulnerable to Stored Cross-Site Scripting (XSS) . The root cause is the failure to properly sanitise and escape reviews submitted via the plugin's public review form, which is accessible to unauthenticated visitors. If user re...

CVE-2026-101160

The WP Ultimate Review WordPress plugin, in versions prior to 2.4.4 , is vulnerable to a persistent denial of service (DoS). The root cause is a lack of input validation, where the plugin fails to verify that a submitted review rating is numeric before storing it. When the plugin subsequently per...

CVE-2026-103293

The MPG WordPress plugin before version 4.2.3 is vulnerable to an arbitrary file read flaw. The root cause is a failure to validate that a dataset source supplied during project import is a remote URL; instead, the system treats it as a local filesystem path and copies the content into a publicly...

CVE-2026-101161

The WP Ultimate Review WordPress plugin, in versions before 2.4.4 , is vulnerable to a persistent denial of service (DoS) . Unauthenticated users can store crafted review content that triggers a fatal error on every subsequent visit to the reviewed page. This impact occurs specifically when the p...

CVE-2026-104816

Technical details for CVE-2026-104816 are not publicly available in the provided documents. Action: monitor for updates.

CVE-2026-103937

Technical details for CVE-2026-103937 are not publicly available in the provided documents as the entry is currently reserved. Monitor for future updates.

CVE-2026-104817

Technical details are not publicly available in the provided documents for CVE-2026-104817 . Monitor for updates.

CVE-2026-103909

The Calculated Fields Form – AI Form Builder for WordPress plugin is vulnerable to Reflected DOM-Based Cross-Site Scripting (XSS) in all versions up to and including 5.5.1.5 . The flaw arises from insufficient input sanitization and output escaping within the arbitrary (whichever names the admin ...

CVE-2026-103888

The WPC Smart Quick View for WooCommerce plugin for WordPress is vulnerable to Reflected Cross-Site Scripting (XSS) in all versions up to and including 4.4.0 . The root cause is insufficient input sanitization and output escaping of the 'woosq-redirect' parameter. Unauthenticated attackers can in...

CVE-2026-96575

The Transliterator – Multilingual and Multi-script Text Conversion plugin for WordPress is vulnerable to Stored Cross-Site Scripting (XSS) in all versions up to and including 2.5.8 . The root cause is insufficient input sanitization and output escaping related to a predictable {rstr_keep} placeho...

CVE-2026-100148

The Rich Showcase for Google Reviews plugin for WordPress is vulnerable to Stored Cross-Site Scripting (XSS) in all versions up to and including 7.1.3 . The root cause is insufficient input sanitization and output escaping of the 'reviews[].text' parameter. An authenticated attacker with subscrib...

CVE-2026-101357

The SEOPress – AI SEO Plugin & On-site SEO plugin for WordPress is vulnerable to Stored Cross-Site Scripting (XSS) in all versions up to and including 10.2 . The root cause is insufficient input sanitization and output escaping associated with the seopress_google_analytics_matomo_id parameter. Th...

CVE-2026-100149

The WPZOOM Connect: AI Chat, Click to Chat, Social Icons & Share Buttons plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to and including 4.7.3 . An unauthenticated attacker can exploit an HMAC Signature Collision (due to missing domain separation) in the x...

CVE-2026-101923

The Photo Reviews for WooCommerce plugin for WordPress (versions up to and including 1.2.30 ) is vulnerable to Arbitrary Content Deletion due to a missing authorization check. The plugin saves attacker-controlled post IDs from the wcpr_image_upload_id parameter of a public review submission into ...

CVE-2026-87091

The Welcart e-Commerce plugin for WordPress is vulnerable to Stored Cross-Site Scripting (XSS) in all versions up to and including 2.12.2 . The root cause is insufficient input sanitization and output escaping regarding the 'rel' and 'option' parameters within the IPN endpoint. Because these para...

CVE-2025-12828

The Ultra Addons Lite for Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting (XSS) in all versions up to and including 1.3.2 . The root cause is insufficient input sanitization and output escaping on user-supplied attributes within the Type Out widget . This allows authen...

CVE-2026-97337

The Simple Membership plugin for WordPress is vulnerable to unauthorized data modification and sensitive information disclosure in versions up to and including 4.8.3 . The root cause is a missing authorization check (including no nonce, capability, or ownership verification) on the resend-activat...

CVE-2026-100152

The All in One SEO WordPress plugin (versions up to and including 5.0.2 ) is vulnerable to unauthenticated arbitrary shortcode execution . The root cause is the software's failure to properly validate a value before passing it to the do_shortcode function. An attacker can exploit this by triggeri...

CVE-2026-96564

The SEOPress – AI SEO Plugin & On-site SEO plugin for WordPress is vulnerable to Stored Cross-Site Scripting (XSS) in all versions up to and including 10.2 . The root cause is insufficient input sanitization and output escaping of the Author Display Name. An unauthenticated attacker can inject ar...

CVE-2026-96650

The Strong Testimonials plugin for WordPress is vulnerable to Stored Cross-Site Scripting (XSS) in all versions up to and including 3.3.11 . The root cause is insufficient input sanitization and output escaping of the 'platform_user_photo' Custom Field. An unauthenticated attacker can inject arbi...

CVE-2026-101928

The Magic Tooltips For Contact Form 7 plugin for WordPress is vulnerable to Stored Cross-Site Scripting (XSS) in all versions up to and including 1.0.34 . The root cause is insufficient input sanitization and output escaping in the 'author' parameter. Specifically, the plugin's esc_html filter ca...

CVE-2026-93430

The GD Rating System plugin for WordPress is vulnerable to Stored Cross-Site Scripting (XSS) in all versions up to and including 3.7.1 . The root cause is insufficient input sanitization and output escaping within the gdrts_live_handler AJAX action, specifically affecting the 'title' and 'url' Re...

CVE-2026-103913

The GeoDirectory plugin for WordPress (versions up to and including 2.8.186 ) is vulnerable to SQL Injection . The flaw stems from a lack of numeric validation and insufficient escaping of latitude/longitude coordinates when a listing is saved. These values are later directly interpolated into a ...

CVE-2026-97341

The Visitor Traffic Real Time Statistics plugin for WordPress is vulnerable to Stored DOM-Based Cross-Site Scripting in all versions up to and including 8.16 . The root cause is insufficient input sanitization and output escaping when handling the 'X-Real-IP' HTTP header. Specifically, the wp_aja...

CVE-2026-97344

The Wp Social Login and Register Social Counter plugin for WordPress is vulnerable to Stored Cross-Site Scripting (XSS) in all versions up to and including 3.2.1 . The root cause is insufficient input sanitization and output escaping regarding the Avatar Alt Attribute via Arbitrary User Meta Writ...

CVE-2026-91108

The Alt Text AI WordPress plugin is vulnerable to an authorization bypass in all versions up to and including 1.10.41 . The flaw occurs because the plugin fails to properly verify if a user is authorized to perform specific actions, specifically via the atai_enrich_post_content AJAX action. This ...

CVE-2026-11399

The Helpdesk Support Ticket System for WooCommerce plugin for WordPress is vulnerable to an Insecure Direct Object Reference (IDOR) in all versions up to and including 2.1.6 . The root cause is a lack of validation on a user-controlled 'id' parameter during deletion requests. This allows authenti...

CVE-2026-92727

The EmbedPress plugin for WordPress (versions up to and including 4.6.6 ) is vulnerable to Stored Cross-Site Scripting (XSS) . The root cause is insufficient input sanitization and output escaping within the 'slidesShow' Block Attribute . Specifically, the attribute is interpolated into an unquot...

CVE-2026-92538

The LearnPress – WordPress LMS Plugin for WordPress (versions up to and including 4.4.7 ) is vulnerable to Reflected DOM-Based Cross-Site Scripting . The flaw exists in the 'orderby' parameter due to insufficient input sanitization and output escaping. An unauthenticated attacker can inject arbit...

CVE-2026-92977

The Real Cookie Banner: GDPR & ePrivacy Cookie Consent plugin for WordPress is vulnerable to Stored Cross-Site Scripting (XSS) in all versions up to and including 5.3.5 . The root cause is insufficient input sanitization and output escaping, specifically where a page-wide regex strips closing quo...

CVE-2026-97644

The Groundhogg — CRM, Newsletters, and Marketing Automation plugin for WordPress is vulnerable to Privilege Escalation in all versions up to and including 4.9 . The flaw exists because the create_contact function in the v3 REST endpoint (POST /gh/v3/contacts) is only gated by the add_contacts cap...

CVE-2026-92826

The EWWW Image Optimizer plugin for WordPress is vulnerable to Reflected Cross-Site Scripting (XSS) in all versions up to and including 8.7.7 . The root cause is insufficient input sanitization and output escaping within the REQUEST_URI Parameter Key . An unauthenticated attacker can inject arbit...

CVE-2026-92536

The ProfilePress plugin for WordPress (all versions up to and including 4.17.4 ) is vulnerable to Sensitive Information Exposure via the get_user_profile_structure function. Authenticated attackers with subscriber-level access or higher can extract other users' email addresses, login names, and r...

CVE-2026-92551

The ProfilePress plugin for WordPress (all versions up to and including 4.17.4 ) is vulnerable to Reflected Cross-Site Scripting (XSS) . The root cause is insufficient input sanitization and output escaping of the ppress_billing_address Filename Parameter. Unauthenticated attackers can inject arb...

CVE-2026-93428

The Ultimate Member plugin for WordPress is vulnerable to an authorization bypass in all versions up to and including 2.13.1 . The root cause is the plugin's failure to properly verify user authorization when accessing the publicly available wp_ajax_nopriv_um_get_members endpoint. Specifically, t...

CVE-2026-94378

The SupportCandy – AI Customer Support Ticket System & Live Chatbot Agent plugin for WordPress is vulnerable to Stored Cross-Site Scripting (XSS) in all versions up to and including 3.5.3 . The root cause is insufficient input sanitization and output escaping of the 'name' parameter . This allows...

CVE-2026-92243

The Ivory Search – WordPress Search Plugin for WordPress is vulnerable to Reflected Cross-Site Scripting (XSS) in all versions up to and including 5.5.18 . The root cause is insufficient input sanitization and output escaping associated with the 's' parameter . This allows unauthenticated attacke...

CVE-2026-94539

The SupportCandy – AI Customer Support Ticket System & Live Chatbot Agent plugin for WordPress is vulnerable to a time-based SQL Injection in all versions up to and including 3.5.3 . The flaw exists due to insufficient escaping and a lack of sufficient preparation on the user-supplied 'sort_by' p...

CVE-2026-95865

The Beaver Builder Page Builder plugin for WordPress is vulnerable to blind SQL Injection in all versions up to and including 2.11.0.5 . The root cause is insufficient escaping of the fields[][value] parameter and a lack of sufficient preparation on the existing SQL query. Authenticated attackers...

CVE-2026-96270

The Ultimate Member plugin for WordPress (versions up to and including 2.13.1 ) is vulnerable to Stored Cross-Site Scripting (XSS) via the 'form_id' parameter. The root cause is insufficient input sanitization and output escaping, allowing unauthenticated attackers to inject arbitrary web scripts...

CVE-2026-100180

The Jeg Kit for Elementor WordPress plugin is vulnerable to Stored Cross-Site Scripting (XSS) in versions up to and including 3.2.19 . The root cause is insufficient input sanitization and output escaping within the comment functionality. This allows unauthenticated attackers to inject arbitrary ...

CVE-2026-105090

Formbricks versions before 5.4.4 and 6 before 6.0.1 are vulnerable to stored XSS due to an insufficient permission check in the Custom Head Scripts feature. A workspace member with only readWrite permissions can bypass the intended Manage role restriction to configure scripts. These scripts execu...

CVE-2026-85747

The docker-distribution package, which provides the Docker Registry service for storing and distributing OCI and Docker container images, is affected by CVE-2026-85747 . A fix is available in version 3.1.2-1 for Fedora 43, 44, 45, and 46. Specific technical details regarding the root cause or imp...

CVE-2026-105083

A policy bypass vulnerability exists in ImageMagick versions before 7.1.2-32 and 6.9.13-57 within the LoadPolicyCache component. A local attacker with permission to modify the security policy configuration file can bypass restrictions by providing an alternate XML document type declaration (DOCTY...

CVE-2026-79113

The software OpenAPV (versions prior to 1.1.1.0 ) is vulnerable to a heap-based buffer overflow within the read_bitstream function. This vulnerability is associated with CWE-190 (Integer Overflow or Wraparound). The impact of this flaw is classified as MEDIUM severity with a CVSS v4.0 score of 5....