High

CVE-2026-121722

Missing Authorization

CVE-2026-121722 is a Missing Authorization vulnerability in the WordPress plugin forms-signature-formidable-online-contract-automation (for…

Medium

CVE-2026-122665

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

CVE-2026-122665 is a Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in the WordPress pl…

High

CVE-2026-122666

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

CVE-2026-122666 is a Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in the WordPress pl…

High

CVE-2026-123460

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

CVE-2026-123460 is a Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in the WordPress pl…

High

CVE-2026-123475

Missing Authorization

CVE-2026-123475 is a Missing Authorization vulnerability in the WordPress plugin mapsvg-lite-interactive-vector-maps (mapsvg-lite-interacti…

High

CVE-2026-120856

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

CVE-2026-120856 is a Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in the WordPress pl…

High

CVE-2026-121576

Incorrect Privilege Assignment

CVE-2026-121576 is a Incorrect Privilege Assignment vulnerability in the WordPress plugin ai-workflow-automation-ai-agent-hub (ai-workflow-…

Medium

CVE-2026-121612

Weak Authentication

CVE-2026-121612 is a Weak Authentication vulnerability in the WordPress plugin goodbye-captcha (goodbye-captcha). Versions before 3.6.3 are…

High

CVE-2026-122664

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

CVE-2026-122664 is a Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in the WordPress pl…

High

CVE-2026-120834

Incorrect Privilege Assignment

CVE-2026-120834 is a Incorrect Privilege Assignment vulnerability in the WordPress plugin wp2leads (wp2leads). Versions before 3.5.18 are a…

Medium

CVE-2026-121573

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

CVE-2026-121573 is a Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in the WordPress pl…

High

CVE-2026-121769

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')

CVE-2026-121769 is a Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in the WordPress pl…

High

CVE-2026-109899

Missing Authorization

CVE-2026-109899 is a Missing Authorization vulnerability in the WordPress plugin melapress-role-editor (melapress-role-editor). Versions be…

Critical

CVE-2026-109900

Incorrect Privilege Assignment

CVE-2026-109900 is a Incorrect Privilege Assignment vulnerability in the WordPress plugin melapress-role-editor (melapress-role-editor). Ve…

High

CVE-2026-103900

Improper Privilege Management

CVE-2026-103900 is a Improper Privilege Management vulnerability in the WordPress plugin wpjam-basic (wpjam-basic). Versions up to and incl…

High

CVE-2026-116751

Improper Neutralization of Special Elements used in an SQL Command

CVE-2026-116751 is a Improper Neutralization of Special Elements used in an SQL Command vulnerability in the WordPress plugin Ameliabooking…

High

CVE-2026-119164

Improper Privilege Management

CVE-2026-119164 is a Improper Privilege Management vulnerability in the WordPress plugin wpforo (wpforo). Versions up to and including 3.2.…

High

CVE-2026-95870

Improper Neutralization of Special Elements used in an SQL Command

CVE-2026-95870 is a Improper Neutralization of Special Elements used in an SQL Command vulnerability in the WordPress plugin wpforo (wpforo…

Medium

CVE-2026-110004

Improper Limitation of a Pathname to a Restricted Directory

CVE-2026-110004 is a Improper Limitation of a Pathname to a Restricted Directory vulnerability in the WordPress plugin wpforo (wpforo). Ver…

High

CVE-2026-119155

Improper Neutralization of Special Elements used in an SQL Command

CVE-2026-119155 is a Improper Neutralization of Special Elements used in an SQL Command vulnerability in the WordPress plugin wpforo (wpfor…

High

CVE-2026-120531

Improper Neutralization of Input During Web Page Generation

CVE-2026-120531 is a Improper Neutralization of Input During Web Page Generation vulnerability in the WordPress plugin 3709549 (3709549). V…

Medium

CVE-2026-103917

Improper Control of Generation of Code

CVE-2026-103917 is a Improper Control of Generation of Code vulnerability in the WordPress plugin quiz-master-next (quiz-master-next). Vers…

High

CVE-2026-104738

Deserialization of Untrusted Data

CVE-2026-104738 is a Deserialization of Untrusted Data vulnerability in the WordPress plugin advanced-form-integration (advanced-form-integ…

Medium

CVE-2026-118801

Exposure of Sensitive Information to an Unauthorized Actor

CVE-2026-118801 is a Exposure of Sensitive Information to an Unauthorized Actor vulnerability in the WordPress plugin ablocks (ablocks). Ve…

Medium

CVE-2026-120548

Insertion of Sensitive Information into Log File

CVE-2026-120548 is a Insertion of Sensitive Information into Log File vulnerability in the WordPress plugin yml-for-yandex-market (yml-for-…

Medium

CVE-2026-120555

Missing Authorization

CVE-2026-120555 is a Missing Authorization vulnerability in the WordPress plugin jupiterx-core (jupiterx-core). Versions up to and includin…

Medium

CVE-2026-120737

Missing Authorization

CVE-2026-120737 is a Missing Authorization vulnerability in the WordPress plugin jupiterx-core (jupiterx-core). Versions up to and includin…

Medium

CVE-2026-121536

Improper Neutralization of Special Elements used in an SQL Command

CVE-2026-121536 is a Improper Neutralization of Special Elements used in an SQL Command vulnerability in the WordPress plugin wp-data-acces…

Medium

CVE-2026-121792

Improper Neutralization of Special Elements used in an SQL Command

CVE-2026-121792 is a Improper Neutralization of Special Elements used in an SQL Command vulnerability in the WordPress plugin gamipress (ga…

Critical

CVE-2026-19803

Improper Control of Generation of Code

CVE-2026-19803 is a Improper Control of Generation of Code vulnerability in the WordPress plugin printcart-integration (printcart-integrati…

High

CVE-2026-87112

Deserialization of Untrusted Data

CVE-2026-87112 is a Deserialization of Untrusted Data vulnerability in the WordPress plugin qa-heatmap-analytics (qa-heatmap-analytics). Ve…

Medium

CVE-2026-93370

Exposure of Sensitive Information to an Unauthorized Actor

CVE-2026-93370 is a Exposure of Sensitive Information to an Unauthorized Actor vulnerability in the WordPress plugin woo-paystack (woo-pays…

Critical

CVE-2026-93754

Unrestricted Upload of File with Dangerous Type

CVE-2026-93754 is a Unrestricted Upload of File with Dangerous Type vulnerability in the WordPress plugin payever-woocommerce-gateway (paye…

Medium

CVE-2026-121767

Missing Authorization

CVE-2026-121767 is a Missing Authorization vulnerability in the WordPress plugin wedocs (wedocs). Versions before 2.6.2 are affected. Fixed…

Medium

CVE-2026-119490

Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS)

CVE-2026-119490 is a Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) vulnerability in the WordPress plugin bn…

Medium

CVE-2026-121761

Missing Authorization

CVE-2026-121761 is a Missing Authorization vulnerability in the WordPress plugin vod-infomaniak (vod-infomaniak). Versions before 1.5.16 ar…

Medium

CVE-2026-119494

Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS)

CVE-2026-119494 is a Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) vulnerability in the WordPress plugin si…

Medium

CVE-2026-120857

Missing Authorization

CVE-2026-120857 is a Missing Authorization vulnerability in the WordPress plugin webcam-2way-videochat (webcam-2way-videochat). Versions be…

High

CVE-2026-87964

Improper Control of Generation of Code

CVE-2026-87964 is a Improper Control of Generation of Code vulnerability in the WordPress plugin webappick-product-feed-for-woocommerce (we…

Medium

CVE-2026-123471

Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS)

CVE-2026-123471 is a Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) vulnerability in the WordPress plugin my…