CVE-2026-39719

The WordPress PDF Smart Viewer for Elementor plugin (versions

CVE-2026-32581

The Mooberry Book Manager plugin for WordPress (version 4.16.2 ) is vulnerable to a Subscriber SQL Injection (CWE-89). This vulnerability allows for improper neutralization of special elements used in an SQL command, potentially impacting the database. The CVSS 3.1 score is 7.1 (High) , with a ne...

CVE-2026-32580

The WordPress WooCommerce Lottery plugin in versions

CVE-2026-32579

The Kognetiks Chatbot for WordPress plugin (versions

CVE-2026-32578

The ECPay Ecommerce for WooCommerce plugin for WordPress, version

CVE-2026-32577

The Frontend File Manager plugin for WordPress (versions

CVE-2026-32575

The SUMO Affiliates Pro plugin for WordPress, version

CVE-2026-32574

The WordPress Smart Forms plugin versions

CVE-2026-32572

The WP User Frontend Pro plugin for WordPress (versions

CVE-2026-32571

The WordPress Ohio Extra plugin, specifically versions

CVE-2026-32570

The Progressify - Progressive Web App (PWA) plugin for WordPress is affected by an unauthenticated Cross-Site Scripting (XSS) vulnerability in versions

CVE-2026-32568

The WooCommerce Designer Pro plugin for WordPress (versions

CVE-2026-32569

The WP Media folder plugin for WordPress (versions

CVE-2026-32557

The WooCommerce Appointments plugin for WordPress versions

CVE-2026-25433

The WP2LEADS plugin for WordPress (versions

CVE-2026-25434

The WP2LEADS plugin for WordPress (versions

CVE-2026-4889

The eLoanApp platform by RDL Technologies contains a SQL injection (SQLi) vulnerability in the '/ajax/users.php?op=verify' endpoint. The vulnerability exists in the 'logina' POST parameter, which is susceptible to both boolean-based and time-based SQL injection. Successful exploitation enables an...

CVE-2026-105809

A cross-site scripting (XSS) vulnerability exists in SourceCodester Simple Student Information System 1.0 . The flaw is located in the Profile Field Handler component, specifically within the register.php file. Attackers can initiate a remote attack by manipulating the firstname or lastname argum...

CVE-2026-105879

The JetElements For Elementor WordPress plugin (versions

CVE-2026-105808

A cross-site scripting (XSS) vulnerability exists in SourceCodester Simple Student Information System 1.0 . The flaw is located within the clean function of the searchresults.php file. An attacker can perform a remote manipulation of the searchbox argument to execute the XSS attack. The exploit h...