Medium

CVE-2026-125781

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

CVE-2026-125781 is a Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in the WordPress pl…

High

CVE-2026-125784

Cross-Site Request Forgery (CSRF)

CVE-2026-125784 is a Cross-Site Request Forgery (CSRF) vulnerability in the WordPress plugin restropress (restropress). Versions before 3.5…

Medium

CVE-2026-125439

Missing Authorization

CVE-2026-125439 is a Missing Authorization vulnerability in the WordPress plugin convertkit (convertkit). Versions before 3.5.1 are affecte…

Medium

CVE-2026-125451

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

CVE-2026-125451 is a Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in the WordPress pl…

Medium

CVE-2026-125455

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

CVE-2026-125455 is a Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in the WordPress pl…

Medium

CVE-2026-125680

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

CVE-2026-125680 is a Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in the WordPress pl…

Medium

CVE-2026-121014

Missing Authorization

CVE-2026-121014 is a Missing Authorization vulnerability in the WordPress plugin wp-job-portal (wp-job-portal). Versions before 2.8.0 are a…

Medium

CVE-2026-124753

Missing Authorization

CVE-2026-124753 is a Missing Authorization vulnerability in the WordPress plugin wp-job-portal (wp-job-portal). Versions before 2.8.0 are a…

Medium

CVE-2026-124417

Missing Authorization

CVE-2026-124417 is a Missing Authorization vulnerability in the WordPress plugin wp-job-portal (wp-job-portal). Versions before 2.8.0 are a…

Medium

CVE-2026-124416

Missing Authorization

CVE-2026-124416 is a Missing Authorization vulnerability in the WordPress plugin wp-job-portal (wp-job-portal). Versions before 2.8.0 are a…

Medium

CVE-2026-121770

Cross-Site Request Forgery (CSRF)

CVE-2026-121770 is a Cross-Site Request Forgery (CSRF) vulnerability in the WordPress plugin viseek-easy-custom-search (viseek-easy-custom-…

Medium

CVE-2026-121773

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

CVE-2026-121773 is a Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in the WordPress pl…

Medium

CVE-2026-121574

Missing Authorization

CVE-2026-121574 is a Missing Authorization vulnerability in the WordPress plugin content-protector (content-protector). Versions before 4.3…

Medium

CVE-2026-125454

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

CVE-2026-125454 is a Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in the WordPress pl…

Medium

CVE-2026-121028

Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS)

CVE-2026-121028 is a Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) vulnerability in the WordPress plugin st…

Medium

CVE-2026-124255

Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS)

CVE-2026-124255 is a Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) vulnerability in the WordPress plugin ev…

Medium

CVE-2026-124421

Missing Authorization

CVE-2026-124421 is a Missing Authorization vulnerability in the WordPress plugin zoloblocks (zoloblocks). Versions before 2.8.4 are affecte…

High

CVE-2026-125446

Cross-Site Request Forgery (CSRF)

CVE-2026-125446 is a Cross-Site Request Forgery (CSRF) vulnerability in the WordPress plugin edwiser-bridge (edwiser-bridge). Versions befo…

Medium

CVE-2026-125782

Missing Authorization

CVE-2026-125782 is a Missing Authorization vulnerability in the WordPress plugin powerpress (powerpress). Versions before 11.18.3 are affec…

Medium

CVE-2026-124261

Missing Authorization

CVE-2026-124261 is a Missing Authorization vulnerability in the WordPress plugin ecab-taxi-booking-manager (ecab-taxi-booking-manager). Ver…

Medium

CVE-2026-124263

Cross-Site Request Forgery (CSRF)

CVE-2026-124263 is a Cross-Site Request Forgery (CSRF) vulnerability in the WordPress plugin locatoraid (locatoraid). Versions before 3.9.7…

Medium

CVE-2026-125045

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

CVE-2026-125045 is a Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in the WordPress pl…

Medium

CVE-2026-125046

Missing Authorization

CVE-2026-125046 is a Missing Authorization vulnerability in the WordPress plugin mediavine-create (mediavine-create). Versions before 3.1.2…

Medium

CVE-2026-125431

Missing Authorization

CVE-2026-125431 is a Missing Authorization vulnerability in the WordPress plugin tlp-food-menu (tlp-food-menu). Versions before 6.0.8 are a…

Medium

CVE-2026-123480

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

CVE-2026-123480 is a Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in the WordPress pl…

Medium

CVE-2026-123481

Missing Authorization

CVE-2026-123481 is a Missing Authorization vulnerability in the WordPress plugin wpextended (wpextended). Versions before 3.4.3 are affecte…

Medium

CVE-2026-125448

Missing Authorization

CVE-2026-125448 is a Missing Authorization vulnerability in the WordPress plugin kali-forms (kali-forms). Versions before 2.4.32 are affect…

Medium

CVE-2026-125766

Insertion of Sensitive Information Into Sent Data

CVE-2026-125766 is a Insertion of Sensitive Information Into Sent Data vulnerability in the WordPress plugin instagram-widget-by-wpzoom (in…

Medium

CVE-2026-125767

Insertion of Sensitive Information Into Sent Data

CVE-2026-125767 is a Insertion of Sensitive Information Into Sent Data vulnerability in the WordPress plugin social-pug (social-pug). Versi…

Medium

CVE-2026-125746

Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS)

CVE-2026-125746 is a Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) vulnerability in the WordPress plugin ba…

High

CVE-2026-125850

Cross-Site Request Forgery (CSRF)

CVE-2026-125850 is a Cross-Site Request Forgery (CSRF) vulnerability in the WordPress plugin appointment-dark (appointment-dark). Versions …

High

CVE-2026-125843

Cross-Site Request Forgery (CSRF)

CVE-2026-125843 is a Cross-Site Request Forgery (CSRF) vulnerability in the WordPress plugin spasalon (spasalon). Versions up to and includ…

High

CVE-2026-125844

Cross-Site Request Forgery (CSRF)

CVE-2026-125844 is a Cross-Site Request Forgery (CSRF) vulnerability in the WordPress plugin vice (vice). Versions up to and including 1.4 …

High

CVE-2026-125845

Cross-Site Request Forgery (CSRF)

CVE-2026-125845 is a Cross-Site Request Forgery (CSRF) vulnerability in the WordPress plugin vdequator (vdequator). Versions up to and incl…

High

CVE-2026-125846

Cross-Site Request Forgery (CSRF)

CVE-2026-125846 is a Cross-Site Request Forgery (CSRF) vulnerability in the WordPress plugin mazino (mazino). Versions up to and including …

High

CVE-2026-125847

Cross-Site Request Forgery (CSRF)

CVE-2026-125847 is a Cross-Site Request Forgery (CSRF) vulnerability in the WordPress plugin vdperanto (vdperanto). Versions up to and incl…

High

CVE-2026-125848

Cross-Site Request Forgery (CSRF)

CVE-2026-125848 is a Cross-Site Request Forgery (CSRF) vulnerability in the WordPress plugin leo (leo). Versions up to and including 1.7.4 …

High

CVE-2026-125849

Cross-Site Request Forgery (CSRF)

CVE-2026-125849 is a Cross-Site Request Forgery (CSRF) vulnerability in the WordPress plugin shk-corporate (shk-corporate). Versions up to …

High

CVE-2026-125841

Cross-Site Request Forgery (CSRF)

CVE-2026-125841 is a Cross-Site Request Forgery (CSRF) vulnerability in the WordPress plugin heroic (heroic). Versions up to and including …

High

CVE-2026-125842

Cross-Site Request Forgery (CSRF)

CVE-2026-125842 is a Cross-Site Request Forgery (CSRF) vulnerability in the WordPress plugin wallstreet-agency (wallstreet-agency). Version…

High

CVE-2026-125838

Cross-Site Request Forgery (CSRF)

CVE-2026-125838 is a Cross-Site Request Forgery (CSRF) vulnerability in the WordPress plugin quality (quality). Versions up to and includin…

High

CVE-2026-125839

Cross-Site Request Forgery (CSRF)

CVE-2026-125839 is a Cross-Site Request Forgery (CSRF) vulnerability in the WordPress plugin elitepress (elitepress). Versions up to and in…

High

CVE-2026-125840

Cross-Site Request Forgery (CSRF)

CVE-2026-125840 is a Cross-Site Request Forgery (CSRF) vulnerability in the WordPress plugin rambo (rambo). Versions up to and including 3.…

Medium

CVE-2026-125745

Missing Authorization

CVE-2026-125745 is a Missing Authorization vulnerability in the WordPress plugin wck-custom-fields-and-custom-post-types-creator (wck-custo…

High

CVE-2026-124251

Cross-Site Request Forgery (CSRF)

CVE-2026-124251 is a Cross-Site Request Forgery (CSRF) vulnerability in the WordPress plugin wpide (wpide). Versions before 3.6.5 are affec…

Critical

CVE-2026-119506

Incorrect Privilege Assignment

CVE-2026-119506 is a Incorrect Privilege Assignment vulnerability in the WordPress plugin acf-frontend-form-element (acf-frontend-form-elem…

High

CVE-2026-119504

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

CVE-2026-119504 is a Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in the WordPress pl…

High

CVE-2026-111403

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

CVE-2026-111403 is a Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in the WordPress pl…

High

CVE-2026-119483

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

CVE-2026-119483 is a Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in the WordPress pl…

Medium

CVE-2026-119514

Incorrect Privilege Assignment

CVE-2026-119514 is a Incorrect Privilege Assignment vulnerability in the WordPress plugin computer-repair-shop (computer-repair-shop). Vers…

High

CVE-2026-121760

Missing Authorization

CVE-2026-121760 is a Missing Authorization vulnerability in the WordPress plugin wedocs (wedocs). Versions before 2.6.2 are affected. Fixed…

Medium

CVE-2026-121763

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

CVE-2026-121763 is a Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in the WordPress pl…

High

CVE-2026-121780

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

CVE-2026-121780 is a Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in the WordPress pl…

High

CVE-2026-123463

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

CVE-2026-123463 is a Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in the WordPress pl…

High

CVE-2026-123465

Exposure of Sensitive System Information to an Unauthorized Control Sphere

CVE-2026-123465 is a Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in the WordPress plugin mycre…

High

CVE-2026-54863

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

CVE-2026-54863 is a Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in the WordPress plu…

Medium

CVE-2026-66675

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

CVE-2026-66675 is a Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in the WordPress plu…

Medium

CVE-2026-119515

Missing Authorization

CVE-2026-119515 is a Missing Authorization vulnerability in the WordPress plugin radius-booking (radius-booking). Versions before 1.0.21 ar…

Medium

CVE-2026-119524

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

CVE-2026-119524 is a Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in the WordPress pl…

High

CVE-2026-121570

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

CVE-2026-121570 is a Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in the WordPress pl…