Recent vulnerabilities


ID CVSS Description Vendor Product Published Updated
cve-2026-100159 Popup Box 6.4.1 - 6.4.2 - Unauthenticated Arbitrary Sh… ays-pro
Popup Box – Create Countdown, Coupon, Video, Contact Form Popups
2026-10-16T02:26:09.256Z 2026-10-16T15:09:41.509Z
cve-2026-103518 FluentCart A New Era of eCommerce <= 1.7.0 - Authentic… wpmanageninja
FluentCart A New Era of eCommerce – Faster, Lighter, and Simpler
2026-10-16T03:38:40.123Z 2026-10-16T15:09:41.350Z
cve-2026-93953 Backuply <= 1.5.8 - Authenticated (Subscriber+) Second… softaculous
Backuply – Backup, Restore, Migrate and Clone
2026-10-16T03:38:40.799Z 2026-10-16T15:09:41.205Z
cve-2026-104745 Customer Email Verification for WooCommerce <= 3.3.0 -… wpcodefactory
Customer Email Verification for WooCommerce
2026-10-16T03:38:41.491Z 2026-10-16T15:09:41.042Z
cve-2026-89280 Dokan: AI Powered WooCommerce Multivendor Marketplace … dokaninc
Dokan: AI Powered WooCommerce Multivendor Marketplace Solution – Build Your Own Amazon, eBay, Etsy
2026-10-16T03:38:42.851Z 2026-10-16T15:09:40.901Z
cve-2026-96562 Broken Link Checker <= 2.4.14.1 - Unauthenticated Arbi… wpmudev
Broken Link Checker
2026-10-16T04:26:58.157Z 2026-10-16T15:09:40.737Z
cve-2026-101335 Forminator Forms <= 1.58.1 - Unauthenticated Arbitrary… wpmudev
Forminator Forms – Contact Form, Payment Form & Custom Form Builder
2026-10-16T04:26:58.967Z 2026-10-16T15:09:40.456Z
cve-2026-111106 Mail Mint <= 1.31.4 - Authenticated (Custom+) SQL Inje… getwpfunnels
Mail Mint – Email Marketing, Automation & WooCommerce Emails with AI Assistance
2026-10-16T04:26:59.962Z 2026-10-16T15:09:40.294Z
cve-2026-103525 FluentCart A New Era of eCommerce <= 1.7.0 - Insecure … wpmanageninja
FluentCart A New Era of eCommerce – Faster, Lighter, and Simpler
2026-10-16T04:27:00.357Z 2026-10-16T15:09:40.130Z
cve-2026-110721 NotificationX <= 3.3.3 - Missing Authorization to Unau… wpdevteam
NotificationX – FOMO, Live Sales Notification, WooCommerce Sales Popup, GDPR, Social Proof, Announcement Banner & Floating Notification Bar
2026-10-16T04:27:00.768Z 2026-10-16T15:09:39.990Z
cve-2026-109515 MailOptin <= 1.2.78.6 - Unauthenticated Privilege Esca… properfraction
MailOptin – Popup, Optin Forms & Email Newsletters for Mailchimp, HubSpot, AWeber Etc.
2026-10-16T04:27:01.480Z 2026-10-16T15:09:39.848Z
cve-2026-109191 Image Hub <= 1.2.0 - Authenticated (Subscriber+) Sensi… extendthemes
Image Hub – Free Images from Unsplash, Pixabay, Pexels, Openverse & Giphy
2026-10-16T04:27:01.828Z 2026-10-16T15:09:39.704Z
cve-2026-103911 Forminator Forms <= 1.58.1 - Unauthenticated Arbitrary… wpmudev
Forminator Forms – Contact Form, Payment Form & Custom Form Builder
2026-10-16T04:27:02.364Z 2026-10-16T15:09:39.559Z
cve-2026-110590 Klarna for WooCommerce <= 4.13.3 - Missing Authorizati… klarnaplugin
Klarna for WooCommerce
2026-10-16T04:27:03.790Z 2026-10-16T15:09:39.428Z
cve-2026-104001 Slim SEO <= 4.11.1 - Authenticated (Subscriber+) Arbit… rilwis
Slim SEO – AI SEO Plugin, Lightweight, Fast & Automated
2026-10-16T05:30:23.705Z 2026-10-16T15:09:39.289Z
cve-2026-103896 10Web Booster <= 2.34.5 - Unauthenticated Limited File… 10web
10Web Booster – Website speed optimization, Cache & Page Speed optimizer
2026-10-16T05:30:24.365Z 2026-10-16T15:09:39.142Z
cve-2026-109447 User Profile Builder <= 4.0.3 - Unauthenticated Privil… cozmoslabs
User Profile Builder – Beautiful User Registration Forms, User Profiles & User Role Editor
2026-10-16T05:30:24.704Z 2026-10-16T15:09:38.993Z
cve-2026-103768 ELEX WordPress HelpDesk & Customer Ticketing System <=… elextensions
ELEX WordPress HelpDesk & Customer Ticketing System
2026-10-16T05:30:25.043Z 2026-10-16T15:09:38.837Z
cve-2026-109414 Vitepos <= 3.6.1 - Authenticated (Vendor+) SQL Injecti… appsbd
Vitepos – Point of Sale (POS) for WooCommerce
2026-10-16T05:30:26.454Z 2026-10-16T15:09:38.699Z
cve-2026-111178 WP Booking System <= 2.1.0.1 - Authenticated (Administ… murgroland
WP Booking System – Booking Calendar
2026-10-16T06:41:00.178Z 2026-10-16T15:09:38.559Z
cve-2026-92553 YaySMTP <= 2.7.7 - Authenticated (Subscriber+) Arbitra… yaycommerce
YaySMTP – WP Mail SMTP with Email Logs, Tracking & Reports
2026-10-16T06:41:03.415Z 2026-10-16T15:09:38.412Z
cve-2026-104755 WP Compress <= 7.25.00 - Unauthenticated Privilege Esc… aresit
WP Compress – Instant Performance & Speed Optimization
2026-10-16T06:41:04.957Z 2026-10-16T15:09:38.262Z
cve-2026-109382 WSP MCP <= 2.9.5 - Authenticated (Subscriber+) Sensiti… bilalnaseer
WSP MCP – Free MCP Plugin for WordPress: Connect Claude, ChatGPT & AI Agents
2026-10-16T06:41:05.349Z 2026-10-16T15:09:38.121Z
cve-2026-15222 User Registration & Membership <= 5.2.8 - Authenticate… wpeverest
User Registration & Membership – Free & Paid Memberships, Subscriptions, Content Restriction, User Profile, Custom User Registration & Login Builder
2026-10-16T06:41:08.118Z 2026-10-16T15:09:37.979Z
cve-2026-92115 WP Photo Album Plus <= 9.3.02.002 - Authenticated (Cus… opajaap
WP Photo Album Plus
2026-10-16T06:41:08.509Z 2026-10-16T15:09:37.836Z
cve-2026-110366 5.3 (v3.1) WordPress Site Reviews plugin <= 8.3.4 - Broken Access… Gemini Labs
Site Reviews
2026-10-16T06:54:11.866Z 2026-10-16T15:09:37.698Z
cve-2026-97296 8.1 (v3.1) WordPress Gravity Forms plugin < 3.1.1 - PHP Object In… Rocketgenius, Inc
Gravity Forms
2026-10-16T07:00:37.595Z 2026-10-16T15:09:37.442Z
cve-2026-94388 9.3 (v3.1) WordPress Green Popups plugin < 7.6.3 - SQL Injection … halfdata
Green Popups
2026-10-16T07:00:37.973Z 2026-10-16T15:09:36.628Z
cve-2026-75903 Vulnity Security <= 1.4.3 - Unauthenticated Authentica… manuelgalan
Vulnity Security
2026-10-16T07:44:02.515Z 2026-10-16T15:09:36.465Z
cve-2026-110806 N/A Incorrect authorization in add-on properties in D… Devolutions
Server
2026-10-16T13:44:20.481Z 2026-10-16T15:09:31.579Z
ID CVSS Description Vendor Product Published Updated
ID Description Package Published Updated
ID Description Type
ID Description Updated
ID Description Updated
ID Description Updated
ID Description