CVE-2026-59555

CVE-2026-59555 affects WordPress: Participants Database plugin version

CVE-2026-59554

CVE-2026-59554 affects the WordPress Ziina plugin

CVE-2026-59547

CVE-2026-59547 describes an unauthenticated Broken Access Control in the WordPress Payment Gateway for PayPal on WooCommerce plugin, versions

CVE-2026-59545

The vulnerability CVE-2026-59545 affects the WordPress plugin miniOrange Discord Integration (versions

CVE-2026-59544

The CVE covers WordPress Thrive Quiz Builder plugin versions

CVE-2026-59543

CVE-2026-59543 describes a Remote Code Execution (RCE) vulnerability in the WordPress Advanced Views plugin, affecting versions

CVE-2026-59542

The vulnerability CVE-2026-59542 affects the WordPress Kali Forms plugin

CVE-2026-59541

Affected software: WordPress WP BASE Booking plugin

CVE-2026-59540

The CVE concerns WordPress plugin SMS Alert Order Notifications, affected in versions

CVE-2026-59525

The CVE covers the WordPress plugin Participants Database (affected version:

CVE-2026-59526

CVE-2026-59526 : Unauthenticated SQL injection in WordPress MapSVG plugin ≤ 8.14.0. Reported as a critical vulnerability (CVSS 3.1: 9.3) with network access and no privileges required; confidentiality impact High, availability Low, no integrity impact. The connected documents confirm the issue bu...

CVE-2026-59524

The CVE concerns WordPress Easy Digital Downloads plugin ≤ 3.6.7 with Unauthenticated Broken Authentication . Affected component: the EDD plugin for WordPress; versions up to 3.6.7 are implicated. Root cause details are not specified in the provided documents. Impact is described as unauthenticat...

CVE-2026-59517

CVE-2026-59517 concerns the WordPress plugin Easy Form Builder (versions <= 4.0.12). The supplied documents confirm an unauthenticated Cross-Site Scripting (XSS) vulnerability affecting this plugin, with the affected component/version explicitly stated as Easy Form Builder

CVE-2026-59522

The CVE-2026-59522 entry concerns the WordPress WP ERP plugin (versions

CVE-2026-59513

CVE-2026-59513 concerns the WordPress Masteriyo LMS plugin (versions ≤ 2.3.0). The issue is a Cross Site Scripting (XSS) vulnerability in the Subscriber context. Per Patchstack, the CVSSv3.1 base score is 6.5 (Medium) with vector AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L , indicating network attack sur...

CVE-2026-59514

The CVE-2026-59514 entry concerns the WordPress Buddyboss Platform plugin, affected versions

CVE-2026-59512

CVE-2026-59512 describes an unauthenticated XSS in WordPress plugin Product Enquiry for WooCommerce, versions

CVE-2026-57808

The CVE-2026-57808 entry concerns the WordPress WP EasyPay plugin (

CVE-2026-57809

The CVE-2026-57809 entry describes an Unauthenticated Reflected Cross-Site Scripting (XSS) vulnerability in the WordPress AffiliateWP plugin up to version 2.34.0 . Affected component is the plugin’s input handling leading to reflected XSS; the issue is exploitable without authentication. Official...

CVE-2026-57785

The CVE concerns the WordPress ApusListing theme (versions <= 1.2.63) with an unauthenticated Cross Site Request Forgery (CSRF) vulnerability. The available data specify the affected product (ApusListing), the vulnerable version range (