CVE IDSeverityCVSSDescriptionDate
CVE-2026-123468MEDIUM4.3Missing Authorization vulnerability in StylemixThemes Motors motors-car-dealership-classified-listings allows …2026-11-07
CVE-2026-123470MEDIUM4.3Missing Authorization vulnerability in HivePress HivePress hivepress allows Exploiting Incorrectly Configured …2026-11-07
CVE-2026-123961CRITICAL9.9A security vulnerability has been detected in TOTOLINK CA300-PoE 6.2c.884. This impacts the function setWiFiBa…2026-11-07
CVE-2026-102564MEDIUM6.5The The Dynific Addons for Elementor (formerly Anywhere Elementor) plugin for WordPress is vulnerable to arbit…2026-11-07
CVE-2026-103914MEDIUM6.5The Dynific Addons for Elementor plugin for WordPress is vulnerable to SQL Injection via the 'q' parameter in …2026-11-07
CVE-2026-104014CRITICAL9.8The Naimur Email OTP Verification for WooCommerce plugin for WordPress is vulnerable to authentication bypass …2026-11-07
CVE-2026-104746HIGH8.1The Motors – Car Dealership & Classified Listings Plugin plugin for WordPress is vulnerable to arbitrary file …2026-11-07
CVE-2026-104760MEDIUM6.4The weDocs: AI Powered Knowledge Base, Docs, Documentation, Wiki & AI Chatbot plugin for WordPress is vulnerab…2026-11-07
CVE-2026-104768HIGH7.5The AutomatorWP – No-Code Workflow Automation, Integration & Webhooks Plugin, now with AI plugin for WordPress…2026-11-07
CVE-2026-109214HIGH7.2The User Frontend – Membership, User Registration, User Profile, User Directory & Content Restriction with Fro…2026-11-07
CVE-2026-109230HIGH7.2The WP Visitor Statistics (Real Time Traffic) plugin for WordPress is vulnerable to Stored Cross-Site Scriptin…2026-11-07
CVE-2026-109991HIGH7.5The FunnelKit Payment Gateway for Stripe WooCommerce plugin for WordPress is vulnerable to Insecure Direct Obj…2026-11-07
CVE-2026-111317HIGH7.2The JetFormBuilder — Dynamic Blocks Form Builder plugin for WordPress is vulnerable to Stored Cross-Site Scrip…2026-11-07
CVE-2026-111370HIGH7.2The WP Visitor Statistics (Real Time Traffic) plugin for WordPress is vulnerable to Stored Cross-Site Scriptin…2026-11-07
CVE-2026-115548HIGH7.2The Quttera ThreatSign – Web Malware Scanner for WordPress plugin for WordPress is vulnerable to Stored Cross-…2026-11-07
CVE-2026-116537HIGH7.2The Link Library plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'link_description' …2026-11-07
CVE-2026-116751HIGH7.5The Booking for Appointments and Events Calendar – Amelia Pro plugin for WordPress is vulnerable to time-based…2026-11-07
CVE-2026-118047MEDIUM6.4The Falang multilanguage for WordPress plugin for WordPress is vulnerable to Stored Cross-Site Scripting via t…2026-11-07
CVE-2026-118050MEDIUM6.4The Football Pool plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'shouttext' parame…2026-11-07
CVE-2026-118056MEDIUM4.9The Image Hover Effects Ultimate ( Image Gallery, Effects, Lightbox, Comparison & Magnifier ) plugin for WordP…2026-11-07
CVE-2026-118066CRITICAL9.1The Appointment Booking Plugin – LatePoint | Calendar & Scheduling for WordPress plugin for WordPress is vulne…2026-11-07
CVE-2026-118267HIGH8.1The WP Data Access – App Builder for Tables, Forms, Dashboards, Charts & Maps plugin for WordPress is vulnerab…2026-11-07
CVE-2026-119075CRITICAL9.8The Registration Form for WooCommerce plugin for WordPress is vulnerable to privilege escalation due to a miss…2026-11-07
CVE-2026-119183HIGH7.2The JetFormBuilder — Dynamic Blocks Form Builder plugin for WordPress is vulnerable to Stored Cross-Site Scrip…2026-11-07
CVE-2026-119498MEDIUM5.3Authentication Bypass Using an Alternate Path or Channel vulnerability in RelyWP Simple Cloudflare Turnstile s…2026-11-07
CVE-2026-120509MEDIUM4.7The Real Testimonials – Testimonial Slider, Collect Customer Reviews and Video Testimonials plugin for WordPre…2026-11-07
CVE-2026-120683MEDIUM5.4The Real Testimonials – Testimonial Slider, Collect Customer Reviews and Video Testimonials plugin for WordPre…2026-11-07
CVE-2026-120685MEDIUM5.4The Real Testimonials – Testimonial Slider, Collect Customer Reviews and Video Testimonials plugin for WordPre…2026-11-07
CVE-2026-121265NAN/ASQL::Abstract versions before 2.000003 for Perl allow SQL injection via an arrayref column value in insert and…2026-11-07
CVE-2026-121765HIGH7.1Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Cozmosla…2026-11-07
CVE-2026-121976MEDIUM6.4The Modula plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'items' parameter in vers…2026-11-07
CVE-2026-121977MEDIUM5.4The JetFormBuilder — Dynamic Blocks Form Builder plugin for WordPress is vulnerable to Stored Cross-Site Scrip…2026-11-07
CVE-2026-122059MEDIUM6.4The WP ImageViewer plugin for WordPress is vulnerable to Stored DOM-Based Cross-Site Scripting via the 'img.al…2026-11-07
CVE-2026-122231HIGH7.2The WS Form LITE – Drag & Drop Contact Form Builder plugin for WordPress is vulnerable to Stored Cross-Site Sc…2026-11-07
CVE-2026-123418HIGH7.2The Church Admin plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'lat' parameter in …2026-11-07
CVE-2026-123776NAN/ARRD::CGI::Image versions through 0.01 for Perl pass CGI query parameters containting "tz" to tzset(), , so a F…2026-11-07
CVE-2026-93429HIGH7.2The VikBooking Hotel Booking Engine & PMS plugin for WordPress is vulnerable to Stored Cross-Site Scripting vi…2026-11-07
CVE-2026-93755HIGH7.2The Happyforms plugin for WordPress is vulnerable to Stored Cross-Site Scripting via spoofable client IP heade…2026-11-07
CVE-2026-93766HIGH7.2The Happyforms Pro plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'happyforms_clien…2026-11-07
CVE-2026-96565MEDIUM6.4The WP-Members Membership Plugin plugin for WordPress is vulnerable to Stored Cross-Site Scripting via WooComm…2026-11-07
CVE-2026-109973MEDIUM6.4The Image Hover Effects Ultimate Visual Composer (Flipbox - Awesomes Flip Boxes Image Overlay) plugin for Word…2026-11-07
CVE-2026-119156HIGH7.2The Download Manager plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'wpdm_reg[first…2026-11-07
CVE-2026-120579MEDIUM6.4The Active Woot Products Tables for WooCommerce. 100% FREE plugin for WordPress is vulnerable to Stored Cross-…2026-11-07
CVE-2026-120839HIGH8.8Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulner…2026-11-07
CVE-2026-120841HIGH8.8Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulner…2026-11-07
CVE-2026-121575MEDIUM5.3Missing Authorization vulnerability in WP User Manager WP User Manager wp-user-manager allows Exploiting Incor…2026-11-07
CVE-2026-121579MEDIUM6.5Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Unlimite…2026-11-07
CVE-2026-121775MEDIUM5.3Missing Authorization vulnerability in VillaTheme CURCY woo-multi-currency allows Exploiting Incorrectly Confi…2026-11-07
CVE-2026-121777MEDIUM5.3Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) vulnerability in Cool Plugins Co…2026-11-07
CVE-2026-121784MEDIUM6.5Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Magepeop…2026-11-07
←105 / 8516→