EUVD-2026-60936

Subscriber Privilege Escalation in MasterStudy LMS = 3.7.41 versions...

EUVD-2026-60935

Unauthenticated Cross Site Scripting XSS in Convert Pro = 1.0.1 versions...

EUVD-2026-60934

Contributor Cross Site Scripting XSS in GeoDirectory = 2.8.172 versions...

EUVD-2026-60933

Unauthenticated Broken Access Control in Appointment Hour Booking = 1.5.91 versions...

EUVD-2026-60932

Unauthenticated Cross Site Scripting XSS in Templately = 3.7.1 versions...

EUVD-2026-60931

Unauthenticated Broken Access Control in MultiVendorX = 5.0.14 versions...

EUVD-2026-60930

Contributor Cross Site Scripting XSS in WP Tab Widget = 1.2.11 versions...

EUVD-2026-60929

Contributor Cross Site Scripting XSS in Table Of Contents Block = 1.5.0 versions...

EUVD-2026-60928

Contributor Cross Site Scripting XSS in Typing Effect = 1.3.7 versions...

EUVD-2026-60927

Contributor Cross Site Scripting XSS in Wufoo Shortcode = 1.55 versions...

EUVD-2026-60926

Contributor Cross Site Scripting XSS in Video Conferencing with Zoom = 4.6.8 versions...

EUVD-2026-60925

Contributor Cross Site Scripting XSS in Login With Ajax = 4.5.1 versions...

EUVD-2026-60924

Contributor Cross Site Scripting XSS in WPZOOM Forms – Contact Form Plugin for Gutenberg = 2.0.4 versions...

EUVD-2026-60923

Contributor Cross Site Scripting XSS in Frontend Admin by DynamiApps = 3.29.10 versions...

EUVD-2026-60922

Contributor Cross Site Scripting XSS in Featured Video Plus = 2.3.3 versions...

EUVD-2026-60921

Contributor Cross Site Scripting XSS in Wise Chat = 3.4 versions...

EUVD-2026-60920

Unauthenticated Cross Site Request Forgery CSRF in Slider by 10Web = 1.2.62 versions...

EUVD-2026-60919

Subscriber Insecure Direct Object References IDOR in Modal Survey = 2.0.2.2.3 versions...

EUVD-2026-60918

Unauthenticated Cross Site Scripting XSS in Fluent Forms Pro Add On Pack 6.2.12 versions...

EUVD-2026-60917

Unauthenticated Cross Site Scripting XSS in Kirki = 6.2.3 versions...

EUVD-2026-60916

Contributor Arbitrary File Upload in GP Premium = 2.5.5 versions...

EUVD-2026-60915

Unauthenticated SQL Injection in Depicter Slider = 4.8.0 versions...

EUVD-2026-60914

Unauthenticated Cross Site Scripting XSS in Ultimate Dashboard = 3.11.2 versions...

EUVD-2026-60913

Editor PHP Object Injection in OptionTree = 2.7.3 versions...

EUVD-2026-60912

Unauthenticated Server Side Request Forgery SSRF in OttoKit = 1.1.35 versions...

EUVD-2026-60911

Unauthenticated Broken Access Control in ThumbPress 6.5 versions...

EUVD-2026-60910

Unauthenticated Cross Site Scripting XSS in BP Better Messages = 2.15.22 versions...

EUVD-2026-60909

Unauthenticated Broken Authentication in Ezoic = 2.22.11 versions...

EUVD-2026-60908

Contributor Arbitrary File Upload in Templatiq = 0.2.5 versions...

EUVD-2026-60907

Unauthenticated Server Side Request Forgery SSRF in PDF Smart Viewer for Elementor = 1.0.4 versions...

EUVD-2026-60906

Unauthenticated Broken Access Control in Online Contact Widget = 1.3.0 versions...

EUVD-2026-60905

Unauthenticated PHP Object Injection in FundEngine = 1.7.9 versions...

EUVD-2026-60904

Unauthenticated Sensitive Data Exposure in Duitku Payment Gateway = 2.11.14 versions...

EUVD-2026-60903

Subscriber Server Side Request Forgery SSRF in Aotuman Grab WeChat Articles = 2.0.1 versions...

EUVD-2026-60902

Subscriber SQL Injection in Gravity Forms Bookings premium = 2.1 versions...

EUVD-2026-60901

Customer PHP Object Injection in Essential Real Estate = 5.3.3 versions...

EUVD-2026-60900

Unauthenticated Local File Inclusion in Theme Test Drive = 2.9.1 versions...

EUVD-2026-60899

Contributor Arbitrary File Upload in Sync Post With Other Site = 1.9.3 versions...

EUVD-2026-60898

Contributor Remote Code Execution RCE in Cwicly = 1.4.4 versions...

EUVD-2026-60897

Unauthenticated Cross Site Scripting XSS in Mayosis Core = 5.4.7 versions...

EUVD-2026-60896

Unauthenticated Broken Access Control in FormyChat = 2.15.7 versions...

EUVD-2026-60895

Unauthenticated Local File Inclusion in Vavo Core = 2.3.0 versions...

EUVD-2026-60894

Unauthenticated Cross Site Scripting XSS in SSL Zen = 4.7.43 versions...

EUVD-2026-60893

Unauthenticated Cross Site Scripting XSS in Quill Forms = 5.7.1 versions...

EUVD-2026-60892

Unauthenticated Broken Access Control in WP Sort Order = 1.3.5 versions...

EUVD-2026-60891

Unauthenticated Arbitrary File Upload in Piotnet Addons For Elementor Pro = 7.1.67 versions...

EUVD-2026-60890

Subscriber Privilege Escalation in The Grid = 2.7.9.1 versions...

EUVD-2026-60889

The "stringprep" module didn't process characters from RFC 3454 tables B.2 or B.3 correctly: the latest Unicode codepoint attributes were used instead of the specified Unicode 3.2.0. This behavior would cause mismatches when processing domain names using IDNA 2003 the "idna" codec and the intable...

EUVD-2026-60764

This CVE ID has been rejected or withdrawn by its CVE Numbering Authority...

EUVD-2026-60763

BetterDesk is a remote desktop management solution. BetterDesk versions through 2.3.0 improperly invalidate deleted device identities, allowing an unauthenticated client to replay or spoof a device ID and bypass registration controls. Version 3.0.0-alpha contains a patch. No known workarounds are...