CVE-2026-62024

The CodeBard Help Desk WordPress plugin, versions

CVE-2026-62022

The Tonda Membership WordPress plugin versions

CVE-2026-62021

The Angio theme for WordPress (versions

CVE-2026-62020

The WordPress TouchUp theme (versions prior to 1.4 ) is vulnerable to an unauthenticated Local File Inclusion (LFI) . This vulnerability is associated with CWE-98 , involving improper control of filenames in PHP include/require statements. The impact of successful exploitation is rated as High , ...

CVE-2026-48194

The DukaMarket WordPress theme (versions

CVE-2026-48193

The WordPress Uminex theme versions

CVE-2026-45440

The WP Ultimate CSV Importer plugin for WordPress, specifically versions

CVE-2026-42777

The WordPress Aalto theme (versions

CVE-2026-42724

The WordPress CleanSkin theme (versions

CVE-2026-42723

The CleanSkin WordPress theme, versions

CVE-2026-42722

The Frontend Admin by DynamiApps WordPress plugin, in versions

CVE-2026-42718

The Booster for WooCommerce WordPress plugin (versions

CVE-2026-42719

The WordPress Dynamic User Directory plugin (versions

CVE-2026-42717

The WordPress Leyka plugin (versions

CVE-2026-42715

The Photo Gallery by 10Web WordPress plugin, in versions

CVE-2026-42716

The Payever - WooCommerce Gateway plugin for WordPress (versions

CVE-2026-42712

The Qode Tours WordPress plugin (versions

CVE-2026-42711

The Slider by 10Web WordPress plugin (versions

CVE-2026-42706

The WordPress DK theme (versions

CVE-2026-42709

The Food Menu – Restaurant Menu & Online Ordering for WooCommerce WordPress plugin, in versions