CVE-2026-93756

The Smash Balloon Social Post Feed – Simple Social Feeds for WordPress plugin (all versions up to and including 4.13.0 ) is vulnerable to Stored Cross-Site Scripting (XSS) . The root cause is insufficient input sanitization and output escaping when handling Facebook Comment Messages via v-html in...

CVE-2026-96871

The Mang Board plugin for WordPress is vulnerable to Stored Cross-Site Scripting (XSS) in all versions up to and including 2.4.2 . The root cause is insufficient input sanitization and output escaping involving the 'data_type' parameter. This allows unauthenticated attackers to inject arbitrary w...

CVE-2026-100107

The Kubio AI Page Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting (XSS) in all versions up to and including 2.9.2 . The root cause is insufficient input sanitization and output escaping associated with the 'comment' parameter , specifically involving an SVG Comment Conte...

CVE-2026-97342

The JetFormBuilder — Dynamic Blocks Form Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting (XSS) in all versions up to and including 3.6.5.4 . The root cause is insufficient input sanitization and output escaping within the 'choice' Post Meta via the Insert/Update Post Act...

CVE-2026-103426

The Relevanssi Premium plugin for WordPress is vulnerable to Stored Cross-Site Scripting (XSS) in all versions up to and including 2.31.4 . The vulnerability exists because of insufficient input sanitization and output escaping of the '_rt' parameter . An unauthenticated attacker can inject arbit...

CVE-2026-102002

The Otter Blocks – Gutenberg Blocks, Page Builder for Gutenberg Editor & FSE plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to and including 3.2.6 . The root cause lies in the 'otter_form_widget_filter' parameter, which allows authenticated attackers with ...

CVE-2026-96566

The Newsletter – Send awesome emails from WordPress plugin is vulnerable to Stored Cross-Site Scripting (XSS) in all versions up to and including 9.4.0 . The root cause is insufficient input sanitization and output escaping within the 'np1' Custom Field Parameter . Unauthenticated attackers can i...

CVE-2026-97641

The Relevanssi – A Better Search plugin for WordPress is vulnerable to Stored Cross-Site Scripting (XSS) in all versions up to and including 4.28.3 . The root cause is insufficient input sanitization and output escaping within the Comment Content feature. This flaw allows unauthenticated attacker...

CVE-2026-100182

The Download Monitor plugin for WordPress is vulnerable to Stored Cross-Site Scripting (XSS) in all versions up to and including 5.2.10 . The root cause is insufficient input sanitization and output escaping involving Cross-Origin postMessage to the Admin Editor. An unauthenticated attacker can t...

CVE-2026-12951

The Dc Woocommerce Multi Vendor plugin for WordPress is vulnerable to SQL Injection in versions up to and including 5.0.18 . The flaw exists in the order_by parameter of the /multivendorx/v1/compliance/report-abuse REST endpoint. The root cause is the direct concatenation of user-supplied input i...

CVE-2026-95817

The DoFollow Case by Case plugin for WordPress is vulnerable to Stored Cross-Site Scripting (XSS) in all versions up to and including 3.6.0 . The root cause is insufficient input sanitization and output escaping within the Comment Content functionality. This allows unauthenticated attackers to in...

CVE-2026-102772

The CMB2 plugin for WordPress is vulnerable to Stored Cross-Site Scripting (XSS) in all versions up to and including 2.13.1 . The root cause is insufficient input sanitization and output escaping within the parameter (e.g., kl_code, kl_post_code). This flaw allows unauthenticated attackers to in...

CVE-2026-97336

The CMB2 plugin for WordPress is vulnerable to Stored Cross-Site Scripting (XSS) in all versions up to and including 2.13.0 . The root cause is insufficient input sanitization and output escaping within the 'file_list' Field Type . This allows unauthenticated attackers to inject arbitrary web scr...

CVE-2026-93880

The Greenshift – animation and page builder blocks plugin for WordPress is vulnerable to Reflected Cross-Site Scripting (XSS) in all versions up to and including 13.2.0 . The root cause is insufficient input sanitization and output escaping involving the '{{GET:}}' Dynamic Placeholder . Specifica...

CVE-2026-96578

The GSpeech TTS – WordPress Text To Speech Plugin for WordPress is vulnerable to Stored Cross-Site Scripting (XSS) in all versions up to and including 3.22.0 . The root cause is insufficient input sanitization and output escaping within the Comment Content functionality. Specifically, an mXSS-sty...

CVE-2026-96567

The MW WP Form plugin for WordPress is vulnerable to Stored Cross-Site Scripting (XSS) in all versions up to and including 5.1.7 . The root cause is insufficient input sanitization and output escaping of the 'post_id' parameter, which stores malicious payloads in form-submitted post meta . Unauth...

CVE-2026-97663

The Customer Reviews for WooCommerce plugin for WordPress is vulnerable to Stored Cross-Site Scripting (XSS) in all versions up to and including 5.122.0 . The root cause is insufficient input sanitization and output escaping of the Comment Author Name. This allows unauthenticated attackers to inj...

CVE-2026-96539

The WordPress Ultimate Member plugin (versions

CVE-2026-17508

The Bouncy Castle for Java cryptographic library (versions before 1.86 , LTS before 2.73.13 , and FIPS before bcpkix-fips 1.0.13, 2.0.13, and 2.1.13) contains a vulnerability where password-based key derivation functions (KDFs) use unbounded cost parameters from untrusted input. Specifically, the...

CVE-2026-17507

The Bouncy Castle for Java library (before version 1.86 ) contains a vulnerability in the MLS implementation (org.bouncycastle.mls). The root cause is a signed to unsigned conversion error where an RFC 9420 uint32 leaf_index is stored as a signed integer. Because values with the top bit set decod...

CVE-2026-103604

The bc-csharp library by Legion of the Bouncy Castle Inc. (versions before 2.7.0 ) is vulnerable to a denial of service via CPU exhaustion due to inefficient algorithmic complexity. The issue resides in the X.509 distinguished name string conversion within the X509Name.ToString and IetfUtilities....

CVE-2026-103603

In Legion of the Bouncy Castle Inc. bc-csharp before version 2.7.0 , a memory allocation vulnerability exists in the HSS/LMS signature code (HssPublicKeyParameters , HssSignature ). An unauthenticated remote attacker can trigger a denial of service via memory exhaustion by providing an HSS public...

CVE-2026-103602

The bc-csharp library by Legion of the Bouncy Castle Inc. versions before 2.7.0 is vulnerable to improper certificate validation in the PkixNameConstraintValidator component. The root cause is a failure to remove the RFC 1034 root-label trailing dot during comparison between names and constraints...

CVE-2026-103601

The bc-csharp library by Legion of the Bouncy Castle Inc. (versions before 2.7.0 ) is vulnerable to an issue where unverified plaintext is released in the CCM (CcmBlockCipher ) and DSTU 7624 CCM (KCcmBlockCipher ) AEAD modes. The root cause is that the decryption process writes recovered plaintex...

CVE-2026-103600

The bc-csharp library by Legion of the Bouncy Castle Inc. (versions before 2.7.0 ) is vulnerable to a denial of service due to uncontrolled recursion in the ASN.1 parser (Asn1InputStream , Asn1StreamParser ). An unauthenticated remote attacker can provide a crafted ASN.1 encoding with deeply nest...

CVE-2026-63578

The bc-csharp library (versions before 2.7.0 ) by Legion of the Bouncy Castle Inc. is vulnerable to a denial of service via CPU exhaustion in the PbeUtilities.GenerateCipherParameters function. This is caused by the allocation of resources without limits during password-based private-key decrypti...

CVE-2026-63577

The bc-csharp library (versions before 2.7.0 ) by Legion of the Bouncy Castle Inc. contains an improper certificate validation flaw in the PkixNameConstraintValidator.WithinDNSubtree check. The root cause is that the validator identifies the first Relative Distinguished Name (RDN) of a constraint...

CVE-2026-63576

The bc-csharp library by Legion of the Bouncy Castle Inc. (versions before 2.7.0 ) contains an improper certificate validation vulnerability in the PkixNameConstraintValidator (specifically the ExtractHostFromURL function). The root cause is that the software extracts the host from a URI using st...

CVE-2026-63575

The Bouncy Castle Inc. bc-csharp library (versions before 2.7.0 ) is vulnerable to a Denial of Service (DoS) attack due to a loop with an unreachable exit condition in the Pkcs12ParametersGenerator component. An attacker can provide a PKCS#12 (PFX) file or a PKCS#8 encrypted private key using a P...

CVE-2026-63574

The bc-csharp library (versions before 2.7.0 ) by Legion of the Bouncy Castle Inc. contains a memory allocation vulnerability in the OpenPGP signature and user attribute subpacket parsers (SignatureSubpacketsParser.ReadPacket , UserAttributeSubpacketsParser.ReadPacket ). A remote, unauthenticated...

CVE-2026-63573

A Bleichenbacher-style adaptive chosen-ciphertext attack exists in Legion of the Bouncy Castle Inc. bc-csharp versions before 2.7.0 . The vulnerability is located in the CMS RSA PKCS#1 v1.5 key-transport unwrap (KeyTransRecipientInformation.UnwrapKey) component. Because the system rejects ciphert...

CVE-2026-63572

The bc-csharp library by Legion of the Bouncy Castle Inc. is vulnerable to a denial of service via CPU exhaustion in versions prior to 2.7.0 . The root cause is the allocation of resources without limits during PKCS#12 keystore loading (Pkcs12Store.Load ) and within Pkcs12Utilities.ConvertToDefin...

CVE-2026-63571

The bc-csharp library by Legion of the Bouncy Castle Inc. is vulnerable to improper verification of cryptographic signatures in the attribute certificate path validator (PkixAttrCertPathValidator , also used by PkixAttrCertPathBuilder ) in versions before 2.7.0 . The root cause is that RFC 3281 v...

CVE-2026-63570

The bc-csharp library by Legion of the Bouncy Castle Inc. (versions before 2.7.0 ) is vulnerable to a denial of service (DoS) via an infinite loop in Pkcs12Store.GetCertificateChain . An attacker can provide a crafted PKCS#12 file containing certificates with cyclic issuer links —such as two cert...

CVE-2026-63569

The bc-csharp library by Legion of the Bouncy Castle Inc. (versions before 2.7.0 ) is vulnerable to improper input validation in the DHAgreement.CalculateAgreement function during MTI/A0 two-pass Diffie-Hellman key exchanges. An on-path attacker can provide a crafted out-of-range or small-order e...

CVE-2026-63568

The Bouncy Castle Inc. bc-csharp library (versions before 2.7.0 ) is vulnerable to a denial of service via CPU exhaustion. The flaw exists in the PKMacBuilder component, which handles CMP/CRMF password-based MAC verification. Specifically, the ProtectedPkiMessage.Verify and CertificateRequestMess...

CVE-2026-63567

The bc-csharp library by Bouncy Castle Inc. is vulnerable in versions before 2.7.0 due to an observable discrepancy in IesEngine.DecryptBlock. In block-cipher mode, the engine decrypts the ciphertext and removes padding before verifying the MAC. This allows a remote attacker to perform a CBC padd...

CVE-2026-63566

The bc-csharp library (versions before 2.7.0 ) by Legion of the Bouncy Castle Inc. is vulnerable to a memory exhaustion denial of service. The flaw exists in the DTLS handshake reassembly (DtlsReliableHandshake , DtlsReassembler ), where the system allocates a reassembly buffer based on a 24-bit ...

CVE-2026-97219

The MStore API WordPress plugin before version 4.22.1 is vulnerable to a payment bypass due to a lack of restriction on which fields of an order a customer can update. This allows any authenticated user with a self-registerable account to modify the status of their own unpaid orders to a paid or ...

CVE-2026-92924

The Unlimited Elements for Elementor WordPress plugin versions prior to 2.0.21 is vulnerable to arbitrary WordPress shortcode execution. The root cause is a lack of authorization checks when rendering widget output, specifically via the get_addon_output_data function. Depending on the version, th...

CVE-2026-91020

The WebToffee Gift Cards for WooCommerce WordPress plugin (versions before 1.3.1 ) is vulnerable to an unauthenticated gift card amount manipulation (CWE-472). The root cause is a lack of server-side validation for the user-supplied wt_credit_amount parameter. An attacker can submit an arbitrary ...

CVE-2026-90987

The Easy PayPal & Stripe Buy Now Button WordPress plugin, in versions 1.8 through 2.0.5 , is vulnerable to unauthenticated payment amount manipulation . The root cause is that the plugin fails to derive the payment amount on the server, instead relying on a client-supplied field . This allows an ...

CVE-2026-90952

The WP Edit Password Protected WordPress plugin, versions 2.0.0 through 2.0.6 , contains a vulnerability where it fails to enforce site-wide access restrictions on the WordPress REST API . This flaw allows unauthenticated users to read the content of published posts and pages that were specifical...

CVE-2026-85005

The Popup Maker WP WordPress plugin (versions 1.2.2.1 through 1.4.5 ) is vulnerable to a Missing Authorization flaw. The plugin fails to perform adequate authorization checks on several actions, exposing its management page to any authenticated user. This allows users with low-privileged roles, s...

CVE-2026-84740

The Events Calendar WordPress plugin (versions 6.12.0 through 6.17.5 ) is vulnerable to unauthenticated arbitrary shortcode execution . The root cause is a failure to validate or sanitise data submitted via an unauthenticated AJAX action, specifically involving the 'view_data' parameter, before i...

CVE-2026-79618

The WP User Frontend WordPress plugin, prior to version 4.3.12 , fails to enforce subscription-purchase requirements in one of its post-creation handlers. This Missing Authorization (CWE-862) flaw allows authenticated users with subscriber-level access and above to create and, depending on specif...

CVE-2026-1661

The WP Mail Logging WordPress plugin, in versions prior to 1.17.0 , is vulnerable to HTML injection because it fails to properly restrict the HTML and CSS of logged emails before rendering them in admin log screens. This allows unauthenticated users to inject styled content and links—for instance...

CVE-2026-13413

The CMP – Coming Soon & Maintenance WordPress plugin, in versions prior to 4.1.20 , contains an Improper Access Control (CWE-284) vulnerability. When maintenance or coming-soon mode is active, unauthenticated visitors can bypass the landing page to access hidden site content, including published ...

CVE-2026-16001

The Bouncy Castle Inc. bc-csharp library (versions before 2.7.0 ) is vulnerable to a message authentication key exposure in the IesEngine stream mode. Specifically, when an IesEngine is constructed without a block cipher, the MAC key is taken from the key derivation output immediately following a...

CVE-2026-16000

The bc-csharp library (before version 2.7.0 ) by Legion of the Bouncy Castle Inc. contains a missing cryptographic step in the DSTU 7624 CCM mode implementation (KCcmBlockCipher ). The vulnerability occurs because the G1 block , which is responsible for binding the nonce , message length, and par...