CVE-2026-42634

The Video Background Block – Use video as background in the section. WordPress plugin, versions

CVE-2026-42418

The Social Rocket WordPress plugin, versions

CVE-2026-42417

The WordPress ARMember Premium plugin, version 7.8 and below , is vulnerable to an unauthenticated SQL Injection (CWE-89). This flaw allows an attacker to execute arbitrary SQL commands against the database. The vulnerability is categorized with a CRITICAL base severity score of 9.3 , indicating ...

CVE-2026-42416

The UDesign Core plugin for WordPress versions

CVE-2026-42415

The Porto Theme - Functionality plugin for WordPress (versions

CVE-2026-42414

The ListingPro plugin for WordPress versions

CVE-2026-42413

The Snapshotify – All-in-One Backup & Restore & Migrate WordPress plugin (versions

CVE-2026-41562

The WordPress Norvis Backup plugin (versions

CVE-2026-41561

The Museder RestoreOne WordPress plugin, version 2.7.276 and below , is vulnerable to an Unauthenticated Sensitive Data Exposure (CWE-201). This vulnerability allows an unauthenticated attacker to access sensitive information over the network with low complexity. No specific remediation steps, ro...

CVE-2026-41560

The WXD Backup Lite plugin for WordPress (versions

CVE-2026-41559

The SafeSnap – Verified WordPress Backup & Restore plugin (versions

CVE-2026-41555

The Newsletter Subscription Form – User Subscriptions Form, Capture Email WordPress plugin (versions

CVE-2026-40807

The CF7 Views – Complete Entry Management for Contact Form 7 plugin for WordPress, version 3.2.6 and below , is vulnerable to an unauthenticated Cross Site Scripting (XSS) vulnerability. The issue is rooted in the improper neutralization of input during web page generation (CWE-79). Successful ex...

CVE-2026-40806

The Blog, Posts and Category Filter for Elementor plugin for WordPress is vulnerable to an unauthenticated Cross-Site Scripting (XSS) vulnerability in versions

CVE-2026-39798

The WordPress TrueBooker plugin versions

CVE-2026-39796

The Advanced Posts Listing – Show Post List Easily WordPress plugin (versions

CVE-2026-39797

The WordPress GDPR Framework By Data443 plugin versions

CVE-2026-39795

The SendPress Newsletters plugin for WordPress (versions

CVE-2026-39794

The WooCommerce Multivendor Marketplace – REST API plugin for WordPress (versions

CVE-2026-39793

The Simple JWT Login plugin for WordPress version 4.0.0 is affected by a Broken Authentication vulnerability. The issue involves an authentication bypass using an alternate path or channel, as identified by CWE-288 . This vulnerability can lead to a high impact on confidentiality , integrity , an...