Wordfence Intelligence Weekly WordPress Vulnerability Report (February 16, 2026 to February 22, 2026)

🗓️ 26 Feb 2026 16:02:30Reported by Chloe ChamberlandType

wordfence🔗 www.wordfence.com👁 48 Views

Wordfence reports WordPress vulnerabilities and a Triple Threat Bug Bounty with bonuses to April 6, 2026.

Reporter	Title	Published	Views	Family All 1790
Packet Storm	📄 WordPress EventPrime 4.2.8.1 Arbitrary File Upload	10 Apr 202600:00	–	packetstorm
Packet Storm	📄 WordPress Prodigy Commerce 3.2.9 Local File Inclusion	29 May 202600:00	–	packetstorm
Packet Storm	📄 WordPress Slider‑Future 1.0.5 Arbitrary File Upload	27 Feb 202600:00	–	packetstorm
Patchstack	WordPress ShopLentor plugin <= 3.3.2 - Unauthenticated Email Relay Abuse via 'woolentor_suggest_price_action' AJAX Action vulnerability	18 Feb 202607:46	–	patchstack
Patchstack	WordPress Wolmart Core plugin <= 1.9.6 - SQL Injection vulnerability	17 Feb 202612:14	–	patchstack
Patchstack	WordPress Rent Fetch plugin <= 0.32.4 - Unauthenticated Stored Cross-Site Scripting via 'keyword' Parameter vulnerability	18 Feb 202607:37	–	patchstack
Patchstack	WordPress Brevo plugin <= 3.3.0 - Unauthenticated Authorization Bypass via Type Juggling vulnerability	19 Feb 202612:58	–	patchstack
Patchstack	WordPress BackWPup plugin <= 5.6.2 - Authenticated (BackWPup Helper+) Privilege Escalation via Arbitrary Options Update vulnerability	19 Feb 202600:11	–	patchstack
Patchstack	WordPress Complianz \| GDPR/CCPA Cookie Consent plugin <= 7.4.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode vulnerability	18 Feb 202600:43	–	patchstack
Patchstack	WordPress CTX Feed - WooCommerce Product Feed Manager plugin <= 6.6.11 - Missing Authorization to Authenticated (Shop Manager+) Arbitrary Plugin Installation vulnerability	18 Feb 202622:44	–	patchstack

26 Feb 2026 16:02Current

6Medium risk

Vulners AI Score6

CVSS 3.19.9

EPSS0.09396

SSVC

Wordfence Intelligence WordPress vulnerabilities Bug bounty program High threat vulnerabilities Active installs threshold Three vulnerability submissions Payout bonuses Vulnerability database update Vulnerability researchers