CVE-2026-103909

The Calculated Fields Form – AI Form Builder for WordPress plugin is vulnerable to Reflected DOM-Based Cross-Site Scripting (XSS) in all versions up to and including 5.5.1.5 . The flaw arises from insufficient input sanitization and output escaping within the arbitrary (whichever names the admin ...

CVE-2026-100148

The Rich Showcase for Google Reviews plugin for WordPress is vulnerable to Stored Cross-Site Scripting (XSS) in all versions up to and including 7.1.3 . The root cause is insufficient input sanitization and output escaping of the 'reviews[].text' parameter. An authenticated attacker with subscrib...

CVE-2026-96575

The Transliterator – Multilingual and Multi-script Text Conversion plugin for WordPress is vulnerable to Stored Cross-Site Scripting (XSS) in all versions up to and including 2.5.8 . The root cause is insufficient input sanitization and output escaping related to a predictable {rstr_keep} placeho...

CVE-2026-101357

The SEOPress – AI SEO Plugin & On-site SEO plugin for WordPress is vulnerable to Stored Cross-Site Scripting (XSS) in all versions up to and including 10.2 . The root cause is insufficient input sanitization and output escaping associated with the seopress_google_analytics_matomo_id parameter. Th...

CVE-2026-100149

The WPZOOM Connect: AI Chat, Click to Chat, Social Icons & Share Buttons plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to and including 4.7.3 . An unauthenticated attacker can exploit an HMAC Signature Collision (due to missing domain separation) in the x...

CVE-2026-87091

The Welcart e-Commerce plugin for WordPress is vulnerable to Stored Cross-Site Scripting (XSS) in all versions up to and including 2.12.2 . The root cause is insufficient input sanitization and output escaping regarding the 'rel' and 'option' parameters within the IPN endpoint. Because these para...

CVE-2026-101923

The Photo Reviews for WooCommerce plugin for WordPress (versions up to and including 1.2.30 ) is vulnerable to Arbitrary Content Deletion due to a missing authorization check. The plugin saves attacker-controlled post IDs from the wcpr_image_upload_id parameter of a public review submission into ...

CVE-2026-97337

The Simple Membership plugin for WordPress is vulnerable to unauthorized data modification and sensitive information disclosure in versions up to and including 4.8.3 . The root cause is a missing authorization check (including no nonce, capability, or ownership verification) on the resend-activat...

CVE-2025-12828

The Ultra Addons Lite for Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting (XSS) in all versions up to and including 1.3.2 . The root cause is insufficient input sanitization and output escaping on user-supplied attributes within the Type Out widget . This allows authen...

CVE-2026-100152

The All in One SEO WordPress plugin (versions up to and including 5.0.2 ) is vulnerable to unauthenticated arbitrary shortcode execution . The root cause is the software's failure to properly validate a value before passing it to the do_shortcode function. An attacker can exploit this by triggeri...

CVE-2026-96564

The SEOPress – AI SEO Plugin & On-site SEO plugin for WordPress is vulnerable to Stored Cross-Site Scripting (XSS) in all versions up to and including 10.2 . The root cause is insufficient input sanitization and output escaping of the Author Display Name. An unauthenticated attacker can inject ar...

CVE-2026-101928

The Magic Tooltips For Contact Form 7 plugin for WordPress is vulnerable to Stored Cross-Site Scripting (XSS) in all versions up to and including 1.0.34 . The root cause is insufficient input sanitization and output escaping in the 'author' parameter. Specifically, the plugin's esc_html filter ca...

CVE-2026-96650

The Strong Testimonials plugin for WordPress is vulnerable to Stored Cross-Site Scripting (XSS) in all versions up to and including 3.3.11 . The root cause is insufficient input sanitization and output escaping of the 'platform_user_photo' Custom Field. An unauthenticated attacker can inject arbi...

CVE-2026-93430

The GD Rating System plugin for WordPress is vulnerable to Stored Cross-Site Scripting (XSS) in all versions up to and including 3.7.1 . The root cause is insufficient input sanitization and output escaping within the gdrts_live_handler AJAX action, specifically affecting the 'title' and 'url' Re...

CVE-2026-103913

The GeoDirectory plugin for WordPress (versions up to and including 2.8.186 ) is vulnerable to SQL Injection . The flaw stems from a lack of numeric validation and insufficient escaping of latitude/longitude coordinates when a listing is saved. These values are later directly interpolated into a ...

CVE-2026-97341

The Visitor Traffic Real Time Statistics plugin for WordPress is vulnerable to Stored DOM-Based Cross-Site Scripting in all versions up to and including 8.16 . The root cause is insufficient input sanitization and output escaping when handling the 'X-Real-IP' HTTP header. Specifically, the wp_aja...

CVE-2026-97344

The Wp Social Login and Register Social Counter plugin for WordPress is vulnerable to Stored Cross-Site Scripting (XSS) in all versions up to and including 3.2.1 . The root cause is insufficient input sanitization and output escaping regarding the Avatar Alt Attribute via Arbitrary User Meta Writ...

CVE-2026-91108

The Alt Text AI WordPress plugin is vulnerable to an authorization bypass in all versions up to and including 1.10.41 . The flaw occurs because the plugin fails to properly verify if a user is authorized to perform specific actions, specifically via the atai_enrich_post_content AJAX action. This ...

CVE-2026-11399

The Helpdesk Support Ticket System for WooCommerce plugin for WordPress is vulnerable to an Insecure Direct Object Reference (IDOR) in all versions up to and including 2.1.6 . The root cause is a lack of validation on a user-controlled 'id' parameter during deletion requests. This allows authenti...

CVE-2026-92727

The EmbedPress plugin for WordPress (versions up to and including 4.6.6 ) is vulnerable to Stored Cross-Site Scripting (XSS) . The root cause is insufficient input sanitization and output escaping within the 'slidesShow' Block Attribute . Specifically, the attribute is interpolated into an unquot...

CVE-2026-92538

The LearnPress – WordPress LMS Plugin for WordPress (versions up to and including 4.4.7 ) is vulnerable to Reflected DOM-Based Cross-Site Scripting . The flaw exists in the 'orderby' parameter due to insufficient input sanitization and output escaping. An unauthenticated attacker can inject arbit...

CVE-2026-97644

The Groundhogg — CRM, Newsletters, and Marketing Automation plugin for WordPress is vulnerable to Privilege Escalation in all versions up to and including 4.9 . The flaw exists because the create_contact function in the v3 REST endpoint (POST /gh/v3/contacts) is only gated by the add_contacts cap...

CVE-2026-92977

The Real Cookie Banner: GDPR & ePrivacy Cookie Consent plugin for WordPress is vulnerable to Stored Cross-Site Scripting (XSS) in all versions up to and including 5.3.5 . The root cause is insufficient input sanitization and output escaping, specifically where a page-wide regex strips closing quo...

CVE-2026-92826

The EWWW Image Optimizer plugin for WordPress is vulnerable to Reflected Cross-Site Scripting (XSS) in all versions up to and including 8.7.7 . The root cause is insufficient input sanitization and output escaping within the REQUEST_URI Parameter Key . An unauthenticated attacker can inject arbit...

CVE-2026-92536

The ProfilePress plugin for WordPress (all versions up to and including 4.17.4 ) is vulnerable to Sensitive Information Exposure via the get_user_profile_structure function. Authenticated attackers with subscriber-level access or higher can extract other users' email addresses, login names, and r...

CVE-2026-92551

The ProfilePress plugin for WordPress (all versions up to and including 4.17.4 ) is vulnerable to Reflected Cross-Site Scripting (XSS) . The root cause is insufficient input sanitization and output escaping of the ppress_billing_address Filename Parameter. Unauthenticated attackers can inject arb...

CVE-2026-93428

The Ultimate Member plugin for WordPress is vulnerable to an authorization bypass in all versions up to and including 2.13.1 . The root cause is the plugin's failure to properly verify user authorization when accessing the publicly available wp_ajax_nopriv_um_get_members endpoint. Specifically, t...

CVE-2026-94378

The SupportCandy – AI Customer Support Ticket System & Live Chatbot Agent plugin for WordPress is vulnerable to Stored Cross-Site Scripting (XSS) in all versions up to and including 3.5.3 . The root cause is insufficient input sanitization and output escaping of the 'name' parameter . This allows...

CVE-2026-92243

The Ivory Search – WordPress Search Plugin for WordPress is vulnerable to Reflected Cross-Site Scripting (XSS) in all versions up to and including 5.5.18 . The root cause is insufficient input sanitization and output escaping associated with the 's' parameter . This allows unauthenticated attacke...

CVE-2026-94539

The SupportCandy – AI Customer Support Ticket System & Live Chatbot Agent plugin for WordPress is vulnerable to a time-based SQL Injection in all versions up to and including 3.5.3 . The flaw exists due to insufficient escaping and a lack of sufficient preparation on the user-supplied 'sort_by' p...

CVE-2026-95865

The Beaver Builder Page Builder plugin for WordPress is vulnerable to blind SQL Injection in all versions up to and including 2.11.0.5 . The root cause is insufficient escaping of the fields[][value] parameter and a lack of sufficient preparation on the existing SQL query. Authenticated attackers...

CVE-2026-100180

The Jeg Kit for Elementor WordPress plugin is vulnerable to Stored Cross-Site Scripting (XSS) in versions up to and including 3.2.19 . The root cause is insufficient input sanitization and output escaping within the comment functionality. This allows unauthenticated attackers to inject arbitrary ...

CVE-2026-96270

The Ultimate Member plugin for WordPress (versions up to and including 2.13.1 ) is vulnerable to Stored Cross-Site Scripting (XSS) via the 'form_id' parameter. The root cause is insufficient input sanitization and output escaping, allowing unauthenticated attackers to inject arbitrary web scripts...

CVE-2026-105090

Formbricks versions before 5.4.4 and 6 before 6.0.1 are vulnerable to stored XSS due to an insufficient permission check in the Custom Head Scripts feature. A workspace member with only readWrite permissions can bypass the intended Manage role restriction to configure scripts. These scripts execu...

CVE-2026-85747

The docker-distribution package, which provides the Docker Registry service for storing and distributing OCI and Docker container images, is affected by CVE-2026-85747 . A fix is available in version 3.1.2-1 for Fedora 43, 44, 45, and 46. Specific technical details regarding the root cause or imp...

CVE-2026-105083

A policy bypass vulnerability exists in ImageMagick versions before 7.1.2-32 and 6.9.13-57 within the LoadPolicyCache component. A local attacker with permission to modify the security policy configuration file can bypass restrictions by providing an alternate XML document type declaration (DOCTY...

CVE-2026-79113

The software OpenAPV (versions prior to 1.1.1.0 ) is vulnerable to a heap-based buffer overflow within the read_bitstream function. This vulnerability is associated with CWE-190 (Integer Overflow or Wraparound). The impact of this flaw is classified as MEDIUM severity with a CVSS v4.0 score of 5....

CVE-2026-105080

In ConvertX versions prior to 0.19.0 , the converters/calibre.ts component fails to block recipe files . Instead, it passes these files to the ebook-convert program from Calibre. This vulnerability allows for the execution of arbitrary code contained within .recipe or .downloaded_recipe files. Re...

CVE-2026-105030

Kener versions 4.0.0 before 4.1.6 are vulnerable to an information disclosure vulnerability. The root cause is a lack of visibility filters in dashboard API handlers, allowing unauthenticated attackers to retrieve hidden or inactive monitor data. By supplying a known or guessed monitor tag to end...

CVE-2026-105029

The UVdesk support-center-bundle version prior to 1.1.3.3 is vulnerable to an Insecure Direct Object Reference (IDOR) vulnerability within the rateTicket action of Controller/Ticket.php . Because the system fails to perform an ownership check, authenticated customers can supply arbitrary ticket I...

CVE-2026-104479

Versions of Shopclass prior to 6.2.0 are vulnerable to a stored cross-site scripting (XSS) vulnerability. When the frontend TinyMCE is enabled, self-registered non-admin users can inject malicious JavaScript into item listing descriptions. The root cause is that the ItemActions.php component save...

CVE-2026-104478

Formwork versions prior to 2.3.13 are vulnerable to a path traversal vulnerability in the BackupController component. Authenticated panel users with backup download or delete permissions can exploit this by supplying a base64-encoded backslash-separated traversal payload . This payload bypasses t...

CVE-2026-104477

The Showdown library (versions through 2.1.0 ) is vulnerable to Cross-Site Scripting (XSS) due to a flaw in the makehtml link and image subparsers. The root cause is the failure to properly sanitize or escape double quotes in destination URLs when rendering HTML attributes like href and src. A re...

CVE-2026-104476

Backdrop CMS versions prior to 1.35.1 are susceptible to an information disclosure vulnerability. This flaw allows unauthenticated attackers to retrieve configuration export archives that remain on the server after a transfer is completed. By downloading these compressed archives, an attacker can...

CVE-2026-104475

IDURAR ERP CRM, versions through 4.1.1 , is vulnerable to a stored cross-site scripting (XSS) flaw. The root cause is the application's failure to sanitize SVG files during the upload process. Authenticated users can exploit this by uploading JavaScript-laden SVGs via the profile update or settin...

CVE-2026-104474

OpenLiteSpeed versions prior to 1.9.3 are susceptible to a local privilege escalation vulnerability within the admin/misc/lsup.sh script. The root cause is the execution of unverified update packages from a directory (/usr/local/lsws/autoupdate/) that is writable by the nobody user. An attacker w...

CVE-2026-104433

The Mooncake transfer engine (versions before 0.3.12 ) is vulnerable to an out-of-bounds read in the readString function located in include/common.h. This flaw allows unauthenticated attackers to crash the service, such as an SGLang inference server , by connecting to the handshake port listening...

CVE-2026-73802

The gitea-runner (specifically the act_runner app) contains a vulnerability where it incorrectly handles workflow-controlled jobs..container.options. When the runner's privileged mode is disabled, the application only forces Privileged to false but fails to strip dangerous Docker CLI-style option...

CVE-2026-105051

Versions of Denuvo Anti-Tamper released through 2026-03-04 are vulnerable to a bypass of a hypervisor presence check . The root cause is CPUID interception involving specific system files: SimpleSvm.sys on AMD systems, and hyperkd.sys or hyperhv.dll on Intel systems. This vulnerability allows for...

CVE-2026-105050

Versions of PeaZip prior to 11.3.0 are vulnerable to OS command injection when running in a non-default configuration. The root cause is the mishandling of the string "quotation character already used in the string" when processing a filename in an archive . Impacting the local system, this vulne...