CVE-2026-57674

Unauthenticated Cross Site Scripting XSS in Timetics = 1.0.58 versions...

CVE-2026-57682

Unauthenticated Cross Site Scripting XSS in Simple Link Directory = 15.0.5 versions...

CVE-2026-57621

Unauthenticated PHP Object Injection in Booktics = 1.0.21 versions...

CVE-2026-57623

Unauthenticated Arbitrary Code Execution in W3 Total Cache = 2.9.4 versions...

CVE-2026-57625

Unauthenticated Cross Site Scripting XSS in Admin and Site Enhancements ASE Pro = 8.8.5 versions...

CVE-2026-57670

Unauthenticated Cross Site Scripting XSS in Google Maps CP = 1.2.5 versions...

CVE-2026-57671

Unauthenticated Cross Site Scripting XSS in perfmatters = 2.6.4 versions...

CVE-2026-57673

Unauthenticated Cross Site Scripting XSS in Optimole = 4.2.7 versions...

CVE-2026-57624

Unauthenticated Remote Code Execution RCE in Blocksy Companion Pro = 2.1.46 versions...

CVE-2026-57669

Subscriber Broken Access Control in Advanced Contact form 7 DB = 2.0.9 versions...

CVE-2026-57672

Unauthenticated Cross Site Scripting XSS in wpDataTables = 6.5.1.1 versions...

CVE-2026-57358

Unauthenticated Cross Site Scripting XSS in Customize My Account for WooCommerce = 4.3.9 versions...

CVE-2026-57361

Unauthenticated Cross Site Scripting XSS in Survey Maker = 5.2.2.5 versions...

CVE-2026-57359

Unauthenticated Cross Site Scripting XSS in ReviewX = 2.3.10 versions...

CVE-2026-57362

Unauthenticated Cross Site Scripting XSS in ChatBot = 8.3.2 versions...

CVE-2026-57426

Unauthenticated Cross Site Scripting XSS in Modula - PRO = 2.10.8 versions...

CVE-2026-57357

Unauthenticated Cross Site Scripting XSS in Search Atlas SEO = 2.6.6 versions...

CVE-2026-57360

Unauthenticated Cross Site Scripting XSS in eCommerce Product Catalog = 3.5.4 versions...

CVE-2026-57366

Unauthenticated Cross Site Scripting XSS in WPAdverts = 2.3.1 versions...

CVE-2026-57351

Unauthenticated Cross Site Scripting XSS in HandL UTM Grabber = 2.9.2 versions...

CVE-2026-57354

Subscriber Cross Site Scripting XSS in JetReviews = 3.0.0.1 versions...

CVE-2026-57349

Unauthenticated Cross Site Scripting XSS in WPeMatico RSS Feed Fetcher = 2.8.17 versions...

CVE-2026-57350

Unauthenticated Cross Site Scripting XSS in WP Debugging = 2.12.2 versions...

CVE-2026-57352

Unauthenticated Broken Authentication in ALD – Dropshipping and Fulfillment for AliExpress and WooCommerce = 2.2.0 versions...

CVE-2026-57353

Subscriber Broken Access Control in Link Whisper Premium = 2.9.0 versions...

CVE-2026-57355

Subscriber Broken Access Control in Classified Listing = 5.4.2 versions...

CVE-2026-57356

Unauthenticated Cross Site Scripting XSS in MC Woocommerce Wishlist = 1.9.19 versions...

CVE-2026-57343

Unauthenticated Cross Site Scripting XSS in Real Estate 7 = 3.5.9 versions...

CVE-2026-57344

Unauthenticated Cross Site Scripting XSS in Classified Listing = 5.4.2 versions...

CVE-2026-57347

Subscriber Sensitive Data Exposure in Hotel Booking Lite = 6.0.3 versions...

CVE-2026-57348

Unauthenticated Server Side Request Forgery SSRF in Paid Member Subscriptions = 3.0.4 versions...

CVE-2026-56037

Deserialization of Untrusted Data vulnerability in Themify Themify Popup allows Object Injection. This issue affects Themify Popup: from n/a through 1.4.3...

CVE-2026-57342

Subscriber Cross Site Scripting XSS in ShortPixel Adaptive Images = 3.11.3 versions...

CVE-2026-57345

Unauthenticated Cross Site Scripting XSS in Internal Links Manager = 3.0.3 versions...

CVE-2026-49779

Customer Path Traversal in Tax Exempt for WooCommerce = 1.9.3 versions...

CVE-2026-42382

Unauthenticated Local File Inclusion in Audrey = 1.5 versions...

CVE-2026-39448

Unauthenticated Broken Access Control in NOWPayments for WooCommerce = 1.4.0 versions...

CVE-2026-27436

Editor Arbitrary Code Execution in Five Star Business Profile and Schema = 2.3.19 versions...

CVE-2026-27412

Unauthenticated Local File Inclusion in Pearl - Corporate Business = 3.4.10 versions...

CVE-2026-27408

Unauthenticated Cross Site Scripting XSS in NativeChurch = 4.8.8.2 versions...

CVE-2026-27419

Subscriber Arbitrary File Upload in Zegen = 1.1.9 versions...

CVE-2026-27414

Contributor PHP Object Injection in Werkstatt = 4.8.3 versions...

CVE-2026-27426

Unauthenticated Cross Site Scripting XSS in Automotive Car Dealership Business = 13.3.3 versions...

CVE-2026-27430

Unauthenticated Cross Site Scripting XSS in TheFox = 3.9.76 versions...

CVE-2026-27425

Unauthenticated Cross Site Scripting XSS in Automotive Listings = 18.6 versions...

CVE-2026-27433

Unauthenticated Broken Access Control in Motors = 5.6.80 versions...

CVE-2026-27404

Unauthenticated Cross Site Scripting XSS in LMS = 9.7 versions...

CVE-2026-27402

Unauthenticated Cross Site Scripting XSS in Kids Life | Children School WordPress = 5.2 versions...

CVE-2026-27060

Contributor PHP Object Injection in ARMember Premium = 7.0 versions...

CVE-2026-14449

u5CMS through v12.8.8 is vulnerable to reflected XSS via the ‘thanks’ parameter in multiple form components...