CVE-2026-10522
The MemberHero WordPress plugin through 6.9 does not restrict which account fields can be supplied...
8.6 CVE-2026-16061
The Rest Routes WordPress plugin through 5.5.5 does not sanitize and validate a value taken from the...
9.8 CVE-2026-16259
The Uix UserCenter WordPress plugin through 1.0.3 does not verify that the account being modified through...
7.7 CVE-2026-16600
The SmartAIPress WordPress plugin through 1.2.0 does not perform a capability check on one of its AJAX...
9.1 CVE-2026-16947
The Total processing card payments for WooCommerce WordPress plugin through 7.3 does not validate a...
4.8 CVE-2026-17520
The Newsletters WordPress plugin before 4.17 does not generate its API key using a sufficiently random...
5.4 CVE-2026-17522
The Newsletters WordPress plugin before 4.17 does not perform any nonce or capability check when saving...
6.5 CVE-2026-18233
The MStore API WordPress plugin before 4.21.1 does not verify that the order targeted by one of its...
6.5 CVE-2026-18234
The MStore API WordPress plugin before 4.21.1 does not verify that the order targeted by its wallet...
5.3 CVE-2026-19430
The Catfolders Document Gallery Pro WordPress plugin before 2.0.7 does not authorise some of its REST...
6.8 CVE-2026-76546
The User Profile Builder WordPress plugin before 4.0.1 does not escape the output of one of its optional...
6.6 CVE-2026-76547
The User Profile Builder WordPress plugin before 4.0.1 does not validate the type of data being deserialized...
8.2 CVE-2026-76548
The User Profile Builder WordPress plugin before 4.0.1 does not properly restrict its front-end file...
7.5 CVE-2026-76586
The Appointment Booking Calendar Plugin and Scheduling Plugin WordPress plugin before 1.6.3 does not...
7.5 CVE-2026-77007
The HEL Online Classroom: AI-powered Online Classrooms WordPress plugin through 1.0.3 does not perform...
6.5 CVE-2026-77008
The HEL Online Classroom: AI-powered Online Classrooms WordPress plugin through 1.0.3 does not have...
6.5 CVE-2026-77010
The HEL Online Classroom: AI-powered Online Classrooms WordPress plugin through 1.0.3 does not perform...
9.3 CVE-2026-77012
The ç±ééæ°æ®ééååå¸æ件 WordPress plugin through...
2.7 CVE-2026-77704
The Booking for Appointments and Events Calendar WordPress plugin before 2.4.9 does not check that...
4.9 CVE-2026-77786
The Rank Math SEO WordPress plugin before 1.0.277 does not check that the user requesting an automated...
4.3 CVE-2026-80311
The Stripe Payment Forms by WP Full Pay WordPress plugin before 8.5.5 does not verify that a subscription...