EUVD-2026-36872

Unauthenticated Broken Access Control in Hippoo Mobile App for WooCommerce = 1.9.5 versions...

EUVD-2026-36871

Unauthenticated Privilege Escalation in Listdom = 5.5.0 versions...

EUVD-2026-36870

Unauthenticated Arbitrary File Download in WPC Product Options for WooCommerce = 3.2.1 versions...

EUVD-2026-36869

Unauthenticated Sensitive Data Exposure in WooCommerce PDF Invoices, Packing Slips, Delivery Notes and Shipping Labels = 4.9.4 versions...

EUVD-2026-36868

Unauthenticated Cross Site Scripting XSS in Drag and Drop Multiple File Upload – Contact Form 7 = 1.3.9.7 versions...

EUVD-2026-36867

Unauthenticated Cross Site Request Forgery CSRF in WP Migrate Lite = 2.7.8 versions...

EUVD-2026-36866

Unauthenticated Broken Authentication in Really Simple SSL = 9.5.10 versions...

EUVD-2026-36864

Subscriber Sensitive Data Exposure in XCloner = 4.8.6 versions...

EUVD-2026-36865

Unauthenticated Cross Site Scripting XSS in Funnel Builder by FunnelKit = 3.15.0.2 versions...

EUVD-2026-36863

Subscriber SQL Injection in ELEX WordPress HelpDesk & Customer Ticketing System = 3.3.6 versions...

EUVD-2026-36862

Subscriber Privilege Escalation in Amelia = 2.3 versions...

EUVD-2026-36861

Unauthenticated Broken Access Control in JS Help Desk = 3.0.9 versions...

EUVD-2026-36860

Unauthenticated SQL Injection in JS Help Desk = 3.0.9 versions...

EUVD-2026-36859

Unauthenticated Cross Site Scripting XSS in HollerBox = 2.3.10.1 versions...

EUVD-2026-36858

Unauthenticated Broken Access Control in WPC Product Bundles for WooCommerce = 8.5.3 versions...

EUVD-2026-36856

Unauthenticated Broken Access Control in TrueBooker = 1.1.9 versions...

EUVD-2026-36857

Subscriber SQL Injection in WP Time Slots Booking Form = 1.2.50 versions...

EUVD-2026-36855

Subscriber Cross Site Scripting XSS in WP Job Portal = 2.5.2 versions...

EUVD-2026-36853

Unauthenticated Cross Site Scripting XSS in Stop Spammers = 2026.3 versions...

EUVD-2026-36854

Subscriber Sensitive Data Exposure in Visual Link Preview = 2.4.1 versions...

EUVD-2026-36852

Subscriber SQL Injection in GamiPress = 7.8.7 versions...

EUVD-2026-36851

Unauthenticated Broken Access Control in Montonio for WooCommerce = 10.1.2 versions...

EUVD-2026-36850

Unauthenticated Sensitive Data Exposure in EmbedPress = 4.5.2 versions...

EUVD-2026-36849

Unauthenticated Cross Site Scripting XSS in MW WP Form = 5.1.3 versions...

EUVD-2026-36848

Subscriber Cross Site Scripting XSS in King Addons for Elementor = 51.1.62 versions...

EUVD-2026-36847

Unauthenticated Insecure Direct Object References IDOR in Simple Shopping Cart = 5.2.9 versions...

EUVD-2026-36846

Unauthenticated Cross Site Scripting XSS in Quiz And Survey Master = 11.1.2 versions...

EUVD-2026-36844

Unauthenticated Remote Code Execution RCE in Easy Invoice = 2.1.19 versions...

EUVD-2026-36845

Unauthenticated Cross Site Scripting XSS in Post SMTP = 3.6.2 versions...

EUVD-2026-36843

Unauthenticated Broken Access Control in Contact Form by WPForms = 1.10.0.4 versions...

EUVD-2026-36842

Unauthenticated Other Vulnerability Type in WpEvently = 5.3.3 versions...

EUVD-2026-36841

Unauthenticated SQL Injection in Realtyna Organic IDX plugin = 5.1.0 versions...

EUVD-2026-36840

Unauthenticated Cross Site Scripting XSS in Product Filter Widget for Elementor = 1.0.6 versions...

EUVD-2026-36839

Unauthenticated Cross Site Scripting XSS in AutomatorWP = 5.7.2 versions...

EUVD-2026-36838

Unauthenticated Bypass Vulnerability in Stripe Payments = 2.0.98 versions...

EUVD-2026-36836

Subscriber Cross Site Scripting XSS in Modula Image Gallery = 2.14.23 versions...

EUVD-2026-36837

Unauthenticated Broken Authentication in Masteriyo - LMS = 2.1.8 versions...

EUVD-2026-36835

Unauthenticated PHP Object Injection in EventPrime = 4.3.2.1 versions...

EUVD-2026-36833

Unauthenticated Broken Authentication in Email Marketing for WooCommerce by Omnisend = 1.18.0 versions...

EUVD-2026-36834

Subscriber Cross Site Scripting XSS in EventPrime = 4.3.2.1 versions...

EUVD-2026-36832

Unauthenticated Sensitive Data Exposure in Bookly = 27.4 versions...

EUVD-2026-36831

Unauthenticated Broken Access Control in Salon booking system = 10.30.25 versions...

EUVD-2026-36830

Unauthenticated SQL Injection in WP Data Access = 5.5.70 versions...

EUVD-2026-36829

Unauthenticated Broken Access Control in AI Product Search for WooCommerce Motive Commerce Search = 1.38.2 versions...

EUVD-2026-36828

Unauthenticated Cross Site Scripting XSS in Simple Membership = 4.7.2 versions...

EUVD-2026-36827

Unauthenticated Bypass Vulnerability in Event Tickets = 5.27.5 versions...

EUVD-2026-36826

Custom role Path Traversal in WP Customer Area = 8.3.4 versions...

EUVD-2026-36824

Subscriber Broken Access Control in Advanced Form Integration = 1.126.12 versions...

EUVD-2026-36825

Subscriber Sensitive Data Exposure in Contest Gallery = 28.1.7 versions...

EUVD-2026-36823

Unauthenticated Cross Site Scripting XSS in Classified Listing = 5.3.8 versions...