CVE-2026-14315

The Pixel Tag Manager for WooCommerce WordPress plugin is vulnerable in versions before 2.2.1: an AJAX action lacks authorization, letting unauthenticated users forge e‑commerce conversion events via the site’s configured server‑side advertising conversion APIs using stored credentials. Impact is...

CVE-2026-14822

CVE-2026-14822 affects the WordPress plugin “Event Tickets and Registration” (before 5.29.0.1). The vulnerability is an missing authorization check on an order-management REST endpoint, allowing unauthenticated users to alter the status of existing orders. The underlying root cause is lack of acc...

CVE-2026-14823

The Event Tickets and Registration WordPress plugin is affected by CVE-2026-14823: prior to version 5.29.0.1, it does not properly verify authorization on certain seating actions, allowing users with contributor-level access and above to overwrite the seating layout, ticket inventory, and attende...

CVE-2026-13725

The vulnerability CVE-2026-13725 affects the Dynamic Pricing With Discount Rules for WooCommerce WordPress plugin prior to 5.0.0. The issue arises because a nonce and user capability validation is not performed on one AJAX action, and the response reflects unsanitised user input, enabling unauthe...

CVE-2026-13604

CVE-2026-13604 affects the Pixelavo WordPress plugin (pre-1.5.4). The vulnerability is an unauthenticated AJAX action, gated only by a nonce emitted on every front-end page, that forwards client-supplied event data to the Facebook Conversions API using the administrator’s stored access token. Thi...

CVE-2026-13596

The CVE pertains to the WordPress plugin Participants Database, affected version prior to 2.7.8.4. The issue is improper sanitization/escaping of a user-supplied parameter used in an SQL query, enabling unauthenticated SQL injection. Impact is unauthenticated data access or manipulation via the v...

CVE-2026-13729

CVE-2026-13729 concerns the Podlove Podcast Publisher WordPress plugin, affected in versions before 4.5.3. The vulnerability arises because the plugin does not perform nonce validation on some administrative create and delete actions, enabling a forged request (CSRF). This can allow an attacker t...

CVE-2026-14195

The CVE concerns the Brizy WordPress plugin (before 2.8.18) where a request handler fails to verify authorization, enabling users with Contributor role or higher to read arbitrary post content, including other users’ private, pending, and draft posts. Affected component: Brizy WordPress plugin, v...

CVE-2026-11882

The Builderall for WordPress plugin (pre-3.0.2) has an OAuth flaw where the state value from public OAuth routes is not bound to the initiating user session. This allows unauthenticated attackers to complete the OAuth connection flow and overwrite the stored third‑party integration access token. ...

CVE-2026-13157

The CVE-2026-13157 entry concerns the Demo Import WordPress plugin up to version 1.1.3, where file-type validation is bypassed during demo-content import. This allows high-privilege users (Administrator by default, including non-super-admins on multisite) to upload executable PHP files to the upl...

CVE-2026-12696

The vulnerability CVE-2026-12696 affects the wpForo Forum WordPress plugin prior to 3.1.2. The issue is a stored XSS flaw where a user profile field is output inside an HTML attribute without proper sanitization/escaping on the public participant profile page. This enables subscribers to inject J...

CVE-2026-13329

The Buckaroo Woocommerce Payments Plugin for WordPress is affected: versions before 4.9.0 do not perform any capability check or nonce validation on an AJAX action that processes payment capture refunds. This allows any authenticated user, including Subscribers, to trigger refunds against capture...

CVE-2026-10827

The CVE-2026-10827 affects the Spectra Legacy WordPress plugin prior to version 2.20.0. It does not validate or escape several block style attributes when generating the CSS for a block, enabling users with the Contributor role and above to inject arbitrary CSS into pages that render the affected...

CVE-2026-15262

The CVE concerns the WordPress plugin Admin Columns for ACF Fields, affected through version 0.3.2. The root cause is that Advanced Custom Fields values are not escaped before being output in the WordPress admin post-list table. This allows users with contributor-level access or higher to store a...

CVE-2026-15234

The CVE-2026-15234 entry concerns the Codeless Page Builder plugin for WordPress (versions up to 1.1.4). It reports that the plugin does not sanitize or validate a shortcode attribute before using it as an HTML tag name when rendering content, enabling stored XSS where users with contributor-leve...

CVE-2026-13158

The Everest Toolkit WordPress plugin (

CVE-2026-14836

The CVE concerns the WordPress plugin Login & Register Forms (vulnerable through version 3.2.4 and earlier) where the password-reset verification-code flow does not enforce the rate limit correctly. The issue stems from keying both the verification code and the per-source attempt counter on an un...

CVE-2026-15368

The CVE applies to the WordPress plugin User Profile Builder and is triggered by versions before 3.16.4 . The vulnerability is that the plugin does not correctly bind the automatic login after user registration to the newly created account, enabling an unauthenticated attacker to obtain an authen...

CVE-2026-15244

Affected product: HUSKY WordPress plugin (before v1.4.1). Vulnerability: directory traversal in a stored setting value prior to concatenation into a file inclusion path, enabling the inclusion and execution of arbitrary local files. Impact: vulnerable on every front-end request, including for una...

CVE-2026-14309

The CVE-2026-14309 entry pertains to the WordPress plugin Chat On Desk Order Notifications prior to version 1.0.9 . The vulnerability arises because the plugin does not verify that the one-time password (OTP) has been validated before processing a password-reset request, enabling unauthenticated ...

CVE-2026-14197

The CVE concerns the Fluent Support WordPress plugin prior to version 2.3.1, where the plugin does not perform a per-ticket access check before reassigning a ticket’s customer. This permits a restricted support agent to arbitrarily change the assigned customer of any ticket, including those beyon...

CVE-2026-14596

The CVE concerns the DynamicKit for Elementor WordPress plugin prior to version 1.0.3. The vulnerability is: the plugin does not validate the host of a user-supplied URL used as the base for password-reset links sent via email. This enables an unauthenticated attacker to cause a target user to re...

CVE-2026-12966

The CVE-2026-12966 issue affects the Direct Payments for WooCommerce WordPress plugin (pre-2.5.3). It allows unauthenticated attackers to tamper with other customers’ orders by abusing several unauthenticated AJAX handlers that do not verify ownership before changing order status and overwriting ...

CVE-2025-15669

The CVE-2025-15669 pertains to the Bit Form WordPress plugin, affected version

CVE-2026-15932

The CVE concerns the Support Genix WordPress plugin (before version 1.4.48). A directory traversal flaw in the ticket-attachment download route permits unauthenticated read access to arbitrary files with an allowlisted extension, including other users’ private ticket attachments, on the server. D...

CVE-2026-3141

FormGent WordPress plugin (

CVE-2026-15403

Technical details about CVE-2026-15403 are not publicly available in the provided documents. Monitor for updates.

CVE-2026-15006

The Bit integrations plugin for WordPress (Form Integration, Webhook, Spreadsheets, CRM, LMS & Email Automation) is affected by a Directory Traversal vulnerability in the processAttachment function, impacting all versions up to 2.9.0. This allows unauthenticated attackers to read arbitrary server...

CVE-2026-15414

CVE-2026-15414 affects the Subscriptions for WooCommerce plugin for WordPress, is_role(), both accepting administrator, and the UI’s disabled attribute is client-side-only, enabling bypass by POST or DevTools. Because wps_membership_plan is registered with capabilty_type => 'post', any user wh...

CVE-2026-13362

Technical details about CVE-2026-13362 are not publicly available in the provided documents. Monitor for updates; no concrete exploit vectors, affected versions, or remediation are confirmed here.

CVE-2026-7623

CVE-2026-7623 - SureForms WordPress plugin : Affects SureForms – Contact Form, Payment Form & Other Custom Form Builder for WordPress, vulnerable in all versions up to and including 2.8.1. The issue is a Stored Cross-Site Scripting via the headingWrapper parameter caused by insufficient input san...

CVE-2026-67599

CVE-2026-67599 is a documented OS Command Injection in ClearOS (ClearFoundation) Webconfig interface. The vulnerability arises from the Log Viewer filter parameter being interpolated unsafely into a shell command in /usr/clearos/apps/base/libraries/File.php, allowing payloads like $(…) or backtic...

CVE-2026-17617

The CVE-2026-17617 entry maps to IBM Application Gateway Operator, which is vulnerable to Server-Side Request Forgery (SSRF) due to insufficient URL validation in custom resources. Affected versions are IBM Application Gateway Operator 22.2 to 26.06; CVSS Base score 8.5 (CVSS:3.1, AV:N/AC:L/PR:L/...

CVE-2026-55244

Technical details for CVE-2026-55244 are not publicly provided in the supplied documents; no affected products, root cause, or remediation are disclosed. Monitor SUSE page for updates.

CVE-2026-34641

CVE-2026-34641 (Premiere Pro) is an out-of-bounds write vulnerability (CWE-787) that could allow arbitrary code execution in the context of the current user. Exploitation requires user interaction: the victim must open a malicious file. This is supported by NVD and CVE listings that describe Prem...

CVE-2026-45377

CVE-2026-45377 affects Decidim where the normal download_your_data flow authenticates the export owner but redirects to a signed Active Storage blob URL that is not bound to the owner session. This allows replay of the redirect URL by anyone who obtains it, enabling access to private exports. Aff...

CVE-2026-45376

CVE-2026-45376 affects Decidim admin user search. The vulnerability occurs when untrusted input from params[:term] is interpolated into raw SQL in ORDER BY clauses, allowing an authenticated organization administrator to cause time-based blind SQL injections via the sort expression. Affected path...

CVE-2026-54785

CVE-2026-54785 affects gemini-bridge, a lightweight MCP server that bridges AI agents to Google’s Gemini CLI. From versions 1.0.0 through 1.3.1, the inline mode function consult_gemini_with_files accepts a files argument containing a file path and does not confine it to the working directory, cau...

CVE-2026-54768

WPGraphQL

CVE-2026-9044

Technical details about CVE-2026-9044 are not publicly available in the provided documents; monitor for updates.

CVE-2026-53573

CVE-2026-53573 affects GeoNetwork core-geonetwork (3.12.0 to 4.2.16 and 4.4.11) where unsafe redirect validation in GeonetworkOAuth2LoginAuthenticationFilter and KeycloakAuthenticationProcessingFilter allows an attacker-controlled external redirect after login. Root cause: improper validation ena...

CVE-2026-45330

Summary: The vulnerability in Decidim affects the verification admin flow where the pending_authorizations are loaded by raw identifiers without verifying current_organization ownership, allowing a tenant admin to view/approve/reject another tenant’s id_documents. The technical trigger is the use...

CVE-2026-54909

CVE-2026-54909 affects the Go library pion/stun. The vulnerability arises when parsing a malformed short XOR-MAPPED-ADDRESS attribute in STUN/ICE Binding responses, where XORMappedAddress.GetFromAs can panic. This leads to a remote denial of service. The issue is fixed in version 3.1.3; upgrading...

CVE-2026-8400

CVE-2026-8400 is reported in IBM SDK, Java Technology Edition (OpenJ9). The IBM bulletin describes a flaw in the ORB component that may allow a malicious IIOP server to load and instantiate arbitrary classes, reflecting unsafe input handling (CWE-470). Affected IBM Java versions are 7.1.0.0–7.1.5...

CVE-2026-54787

CVE-2026-54787 affects the Go library sigstore-go. Before 1.2.1, it does not check a bundle signing timestamp against the validity window of an ExpiringKey wrapping a long‑lived signing key without a certificate, enabling an attacker with expired key material to sign accepted bundles. The issue i...

CVE-2026-45086

CVE-2026-45086 (Decidim) affects the demographics questionnaire admin editor feature. A route under /admin/demographics/questions renders the editor interface without validating admin authorization, allowing a normal participant to access and view the live update form action. This constitutes an ...

CVE-2026-68771

Technical details about this CVE are not publicly available in the provided documents. Monitor for updates from the vendor and CVE databases for affected versions, impact, and remediation.

CVE-2026-18420

Technical details for CVE-2026-18420 are not publicly available in the provided documents. Monitor for updates.

CVE-2026-65981

CVE-2026-65981 affects Coturn prior to 4.15.0. A MOBILITY-TICKET–based session-resume flaw allows an authenticated attacker to bypass per-allocation authorization: a resumed REFRESH is validated against the attacker’s identity instead of the original allocation owner, enabling cross-user receipt ...

CVE-2026-68770

The CVE affects the sentence-transformers library, where a logic flaw in the import_module_class helper (sentence_transformers/util/misc.py) adds an incorrect guard: os.path.exists(model_name_or_path) causes the trust_remote_code gate to pass whenever the provided path exists locally. This enable...