|
cve-2026-110653
|
|
Appointment Booking Plugin <= 5.7.4 - Unauthenticated …
|
latepoint
|
Appointment Booking Plugin – LatePoint | Calendar & Scheduling for WordPress
|
2026-10-17T02:31:06.697Z |
2026-10-18T11:22:47.841Z |
|
cve-2026-111602
|
|
Appointment Booking Plugin <= 5.7.4 - Unauthenticated …
|
latepoint
|
Appointment Booking Plugin – LatePoint | Calendar & Scheduling for WordPress
|
2026-10-17T02:31:07.048Z |
2026-10-18T11:22:47.696Z |
|
cve-2026-110268
|
|
Post Export Import with Media <= 1.17.2 - Authenticate…
|
wpazleen
|
Post Export Import with Media
|
2026-10-17T03:43:26.196Z |
2026-10-18T11:22:47.553Z |
|
cve-2026-107752
|
|
Welcart e-Commerce <= 2.12.4 - Authenticated (Editor+)…
|
uscnanbu
|
Welcart e-Commerce
|
2026-10-17T03:43:27.014Z |
2026-10-18T11:22:47.396Z |
|
cve-2026-92715
|
|
Tutor LMS <= 4.1.0 - Insecure Direct Object Reference …
|
themeum
|
Tutor LMS – eLearning and online course solution
|
2026-10-17T03:43:27.343Z |
2026-10-18T11:22:47.245Z |
|
cve-2026-109368
|
|
WP Booking System <= 2.1.0.3 - Missing Authorization t…
|
murgroland
|
WP Booking System – Booking Calendar
|
2026-10-17T03:43:27.683Z |
2026-10-18T11:22:47.086Z |
|
cve-2026-104736
|
|
LearnPress <= 4.4.10 - Unauthenticated PHP Object Inje…
|
thimpress
|
LearnPress – WordPress LMS Plugin for Create and Sell Online Courses
|
2026-10-17T03:43:28.046Z |
2026-10-18T11:22:46.937Z |
|
cve-2026-109369
|
|
WP Booking System <= 2.1.0.3 - Missing Authorization t…
|
murgroland
|
WP Booking System – Booking Calendar
|
2026-10-17T03:43:28.717Z |
2026-10-18T11:22:46.780Z |
|
cve-2026-92978
|
|
User Registration & Membership <= 5.2.8 - Cross-Site R…
|
wpeverest
|
User Registration & Membership – Free & Paid Memberships, Subscriptions, Content Restriction, User Profile, Custom User Registration & Login Builder
|
2026-10-17T03:43:29.067Z |
2026-10-18T11:22:46.625Z |
|
cve-2026-108123
|
|
WP Booking System <= 2.1.0.3 - Missing Authorization t…
|
murgroland
|
WP Booking System – Booking Calendar
|
2026-10-17T03:43:29.401Z |
2026-10-18T11:22:46.479Z |
|
cve-2026-107744
|
|
LearnPress <= 4.4.10 - Missing Authorization to Authen…
|
thimpress
|
LearnPress – WordPress LMS Plugin for Create and Sell Online Courses
|
2026-10-17T03:43:30.064Z |
2026-10-18T11:22:46.337Z |
|
cve-2026-92798
|
|
User Registration & Membership <= 5.2.8 - Authenticate…
|
wpeverest
|
User Registration & Membership – Free & Paid Memberships, Subscriptions, Content Restriction, User Profile, Custom User Registration & Login Builder
|
2026-10-17T03:43:31.068Z |
2026-10-18T11:22:46.165Z |
|
cve-2026-110384
|
7.1 (v3.1)
|
WordPress Fancy Comments WordPress plugin <= 1.2.21 - …
|
Heateor Support
|
Fancy Comments WordPress
|
2026-10-17T07:00:31.036Z |
2026-10-18T11:22:46.019Z |
|
cve-2026-110253
|
|
weForms <= 1.6.28 - Unauthenticated Limited Media File…
|
boldgrid
|
weForms – Easy Drag & Drop Contact Form Builder For WordPress
|
2026-10-17T07:51:25.761Z |
2026-10-18T11:22:45.876Z |
|
cve-2026-110889
|
7.5 (v3.1)
|
WordPress Gantry 5 Framework plugin <= 5.6.4 - Sensiti…
|
Gantry
|
Gantry 5 Framework
|
2026-10-17T11:00:12.190Z |
2026-10-18T11:22:45.735Z |
|
cve-2026-109701
|
7.1 (v3.1)
|
WordPress PAYCOMET for WooCommerce plugin <= 5.45 - Cr…
|
PAYCOMET
|
PAYCOMET for WooCommerce
|
2026-10-17T17:00:45.175Z |
2026-10-18T11:22:45.594Z |
|
cve-2026-110882
|
4.3 (v3.1)
|
WordPress SMS Alert Order Notifications plugin <= 4.0.…
|
Cozy Vision Technologies Pvt. Ltd.
|
SMS Alert Order Notifications
|
2026-10-17T19:00:11.325Z |
2026-10-18T11:22:45.458Z |
|
cve-2026-111888
|
5.1 (v4.0)
2.7 (v3.1)
|
phpMyFAQ 4.0.0 before 4.1.9 Incorrect Authorization vi…
|
thorsten
|
phpMyFAQ
|
2026-10-17T18:46:13.202Z |
2026-10-18T11:21:59.896Z |
|
cve-2026-111898
|
7.7 (v4.0)
7.5 (v3.1)
|
phpMyFAQ 4.2.0-alpha before 4.2.0-beta Account Takeove…
|
thorsten
|
phpMyFAQ
|
2026-10-17T18:46:20.655Z |
2026-10-18T11:21:21.852Z |
|
cve-2026-111893
|
8.5 (v4.0)
6.5 (v3.1)
|
phpMyFAQ 4.2.0-alpha before 4.2.0-beta Privilege Escal…
|
thorsten
|
phpMyFAQ
|
2026-10-17T18:46:17.171Z |
2026-10-18T11:20:40.712Z |
|
cve-2026-111904
|
6.9 (v4.0)
5.3 (v3.1)
|
phpMyFAQ 4.2.0-alpha before 4.2.0-beta Information Dis…
|
thorsten
|
phpMyFAQ
|
2026-10-17T18:46:24.116Z |
2026-10-18T11:19:42.277Z |
|
cve-2026-111914
|
7.1 (v4.0)
6.5 (v3.1)
|
Admidio 5.0.11 before 5.0.16 Broken Access Control via…
|
Admidio
|
admidio
|
2026-10-17T18:46:31.095Z |
2026-10-18T11:18:13.498Z |
|
cve-2026-111920
|
5.3 (v4.0)
4.3 (v3.1)
|
Vikunja 2.6.0 Broken Access Control via Inherited Proj…
|
go-vikunja
|
vikunja
|
2026-10-17T18:46:34.636Z |
2026-10-18T11:17:27.926Z |
|
cve-2026-111997
|
6.3 (v4.0)
|
ip-address before 10.7.4 allows a denial of servi…
|
beaugunderson
|
ip-address
|
2026-10-18T00:07:21.112Z |
2026-10-18T11:12:55.202Z |
|
cve-2026-111601
|
|
Hippoo Mobile App for WooCommerce <= 1.12.0 - Reflecte…
|
hippooo
|
Hippoo Mobile App for WooCommerce
|
2026-10-17T02:31:06.019Z |
2026-10-18T11:12:35.093Z |
|
cve-2026-109208
|
|
LearnPress <= 4.4.10 - Unauthenticated Stored Cross-Si…
|
thimpress
|
LearnPress – WordPress LMS Plugin for Create and Sell Online Courses
|
2026-10-17T02:31:06.356Z |
2026-10-18T11:12:34.936Z |
|
cve-2026-109985
|
|
xSpeed Cache: AI-Powered Performance Hub with MCP, Cac…
|
wpdevteam
|
xSpeed Cache: AI-Powered Performance Hub with MCP, Caching & CDN
|
2026-10-17T03:43:26.663Z |
2026-10-18T11:12:34.780Z |
|
cve-2026-96660
|
|
User Registration & Membership <= 5.2.8 - Unauthentica…
|
wpeverest
|
User Registration & Membership – Free & Paid Memberships, Subscriptions, Content Restriction, User Profile, Custom User Registration & Login Builder
|
2026-10-17T03:43:28.389Z |
2026-10-18T11:12:34.629Z |
|
cve-2026-111726
|
|
Themify Builder <= 7.8.2 - Authenticated (Contributor+…
|
themifyme
|
Themify Builder
|
2026-10-17T03:43:29.731Z |
2026-10-18T11:12:34.477Z |
|
cve-2026-109989
|
|
Themify Popup <= 1.4.7 - Authenticated (Author+) Store…
|
themifyme
|
Themify Popup
|
2026-10-17T03:43:30.393Z |
2026-10-18T11:12:34.106Z |