CVE-2026-61951

The CVE covers WordPress TrueBooker plugin <= 1.2.3 with unauthenticated privilege escalation. Public details in the connected documents confirm: affected product/component = TrueBooker WordPress plugin; vulnerability type = privilege escalation; root cause/technical specifics are not describe...

CVE-2026-61949

CVE-2026-61949 describes an unauthenticated SQL injection in the WordPress plugin Bookly (versions

CVE-2026-61948

WordPress WPDM – Premium Packages plugin ≤ 6.2.0 is affected by unauthenticated SQL injection. The vulnerability is documented in CVE-2026-61948 with a CVSS v3.1 base score of 9.3 (CRITICAL) and a network attack vector, no privileges required, no user interaction. Details indicate the issue is an...

CVE-2026-61947

The CVE covers WordPress Form Vibes – Database Manager for Forms plugin (

CVE-2026-61944

The CVE-2026-61944 entry concerns an unauthenticated Cross Site Scripting (XSS) vulnerability in the WordPress Bookly plugin, affecting versions up to 27.7. The issue lies in the Bookly plugin for WordPress and is exploitable over the network with user interaction required. CVSS v3.1 metrics indi...

CVE-2026-61946

WordPress Easy Appointments plugin

CVE-2026-61943

CVE-2026-61943 describes an unauthenticated Broken Access Control in the WordPress WPDM – Premium Packages plugin, affected versions

CVE-2026-59555

CVE-2026-59555 affects WordPress: Participants Database plugin version

CVE-2026-59554

CVE-2026-59554 affects the WordPress Ziina plugin

CVE-2026-59547

CVE-2026-59547 describes an unauthenticated Broken Access Control in the WordPress Payment Gateway for PayPal on WooCommerce plugin, versions

CVE-2026-59545

The vulnerability CVE-2026-59545 affects the WordPress plugin miniOrange Discord Integration (versions

CVE-2026-59544

The CVE covers WordPress Thrive Quiz Builder plugin versions

CVE-2026-59543

CVE-2026-59543 describes a Remote Code Execution (RCE) vulnerability in the WordPress Advanced Views plugin, affecting versions

CVE-2026-59541

Affected software: WordPress WP BASE Booking plugin

CVE-2026-59542

The vulnerability CVE-2026-59542 affects the WordPress Kali Forms plugin

CVE-2026-59540

The CVE concerns WordPress plugin SMS Alert Order Notifications, affected in versions

CVE-2026-59525

The CVE covers the WordPress plugin Participants Database (affected version:

CVE-2026-59526

CVE-2026-59526 : Unauthenticated SQL injection in WordPress MapSVG plugin ≤ 8.14.0. Reported as a critical vulnerability (CVSS 3.1: 9.3) with network access and no privileges required; confidentiality impact High, availability Low, no integrity impact. The connected documents confirm the issue bu...

CVE-2026-59524

The CVE concerns WordPress Easy Digital Downloads plugin ≤ 3.6.7 with Unauthenticated Broken Authentication . Affected component: the EDD plugin for WordPress; versions up to 3.6.7 are implicated. Root cause details are not specified in the provided documents. Impact is described as unauthenticat...

CVE-2026-59517

CVE-2026-59517 concerns the WordPress plugin Easy Form Builder (versions <= 4.0.12). The supplied documents confirm an unauthenticated Cross-Site Scripting (XSS) vulnerability affecting this plugin, with the affected component/version explicitly stated as Easy Form Builder