Latest CVE Vulnerabilities by Published Date – Page 39

7.1 HIGH

CVE-2026-59512 — WordPress Product Enquiry for WooCommerce plugin <= 2.2.34.43 - Cross Site Scripting (XSS…

Unauthenticated Cross Site Scripting (XSS) in Product Enquiry for WooCommerce <= 2.2.34.43 versions.

product_enquiry_for_woocommerce | Remote | Cross-Site Scripting

Jul 23, 2026 Jul 23, 2026

Jul 23, 2026

7.1 HIGH

CVE-2026-57809 — WordPress AffiliateWP plugin <= 2.34.0 - Reflected Cross Site Scripting (XSS) vulnerabili…

Unauthenticated Cross Site Scripting (XSS) in AffiliateWP <= 2.34.0 versions.

affiliatewp | Remote | Cross-Site Scripting

Jul 23, 2026 Jul 23, 2026

Jul 23, 2026

6.5 MEDIUM

CVE-2026-57808 — WordPress WP EasyPay plugin <= 4.5.0 - Arbitrary Content Deletion vulnerability

Subscriber Arbitrary Content Deletion in WP EasyPay <= 4.5.0 versions.

Remote | Authorization

Jul 23, 2026 Jul 23, 2026

Jul 23, 2026

8.8 HIGH

CVE-2026-57785 — WordPress ApusListing theme <= 1.2.63 - Cross Site Request Forgery (CSRF) vulnerability

Unauthenticated Cross Site Request Forgery (CSRF) in ApusListing <= 1.2.63 versions.

Remote | Cross-Site Request Forgery

Jul 23, 2026 Jul 23, 2026

Jul 23, 2026

9.6 CRITICAL

CVE-2026-57784 — WordPress Ninja Forms File Uploads Extension plugin <= 3.3.26 - Cross Site Request Forge…

Unauthenticated Cross Site Request Forgery (CSRF) in Ninja Forms File Uploads Extension <= 3.3.26 versions.

Remote | Cross-Site Request Forgery

Jul 23, 2026 Jul 23, 2026

Jul 23, 2026

7.1 HIGH

CVE-2026-57769 — WordPress Grand Photography theme <= 5.7.8 - Reflected Cross Site Scripting (XSS) vulnera…

Unauthenticated Cross Site Scripting (XSS) in Grand Photography <= 5.7.8 versions.

Remote | Cross-Site Scripting

Jul 23, 2026 Jul 23, 2026

Jul 23, 2026

7.1 HIGH

CVE-2026-57767 — WordPress WP Google Maps Pro plugin <= 10.1.02 - Cross Site Scripting (XSS) vulnerability

Unauthenticated Cross Site Scripting (XSS) in WP Google Maps Pro <= 10.1.02 versions.

Remote | Cross-Site Scripting

Jul 23, 2026 Jul 23, 2026

Jul 23, 2026

7.1 HIGH

CVE-2026-57735 — WordPress Breakdance plugin <= 2.7.1 - Cross Site Scripting (XSS) vulnerability

Unauthenticated Cross Site Scripting (XSS) in Breakdance <= 2.7.1 versions.

breakdance | Remote | Cross-Site Scripting

Jul 23, 2026 Jul 23, 2026

Jul 23, 2026

6.5 MEDIUM

CVE-2026-57717 — WordPress Knit Pay plugin <= 9.6.0.0 - Broken Access Control vulnerability

Unauthenticated Broken Access Control in Knit Pay <= 9.6.0.0 versions.

Remote | Authorization

Jul 23, 2026 Jul 23, 2026

Jul 23, 2026

5.3 MEDIUM

CVE-2026-57716 — WordPress Broadcast Live Video plugin <= 7.2.4 - Arbitrary File Deletion vulnerability

Unauthenticated Arbitrary File Deletion in Broadcast Live Video <= 7.2.4 versions.

videowhisper_live_streaming_integration broadcast_live_video | Remote | Authorization

Jul 23, 2026 Jul 23, 2026

Jul 23, 2026

7.1 HIGH

CVE-2026-57704 — WordPress Smart Manager plugin <= 8.90.0 - Cross Site Scripting (XSS) vulnerability

Unauthenticated Cross Site Scripting (XSS) in Smart Manager <= 8.90.0 versions.

smart_manager | Remote | Cross-Site Scripting

Jul 23, 2026 Jul 23, 2026

Jul 23, 2026

6.3 MEDIUM

CVE-2026-57703 — WordPress Sunshine Photo Cart plugin <= 3.6.10.1 - Broken Access Control vulnerability

Subscriber Broken Access Control in Sunshine Photo Cart <= 3.6.10.1 versions.

sunshine_photo_cart | Remote | Authorization

Jul 23, 2026 Jul 23, 2026

Jul 23, 2026

7.1 HIGH

CVE-2026-57701 — WordPress Real Estate Manager Pro plugin <= 12.8.5 - Reflected Cross Site Scripting (XSS)…

Unauthenticated Cross Site Scripting (XSS) in Real Estate Manager Pro <= 12.8.5 versions.

Remote | Cross-Site Scripting

Jul 23, 2026 Jul 23, 2026

Jul 23, 2026

7.1 HIGH

CVE-2026-57699 — WordPress Slider Pro plugin <= 4.8.13 - Cross Site Scripting (XSS) vulnerability

Subscriber Cross Site Scripting (XSS) in Slider Pro <= 4.8.13 versions.

Remote | Cross-Site Scripting

Jul 23, 2026 Jul 23, 2026

Jul 23, 2026

7.1 HIGH

CVE-2026-57696 — WordPress Picture Gallery plugin <= 1.6.5 - Arbitrary File Deletion vulnerability

Contributor Arbitrary File Deletion in Picture Gallery <= 1.6.5 versions.

picture_gallery | Remote | Path Traversal

Jul 23, 2026 Jul 23, 2026

Jul 23, 2026

7.1 HIGH

CVE-2026-57626 — WordPress MailPoet plugin 5.30.0-5.33.0 - Cross Site Request Forgery (CSRF) vulnerability

Cross-Site Request Forgery (CSRF) vulnerability in MailPoet allows Cross Site Request Forgery. This issue affects MailPoet: from 5.30.0 through 5.33.0.

mailpoet | Remote | Cross-Site Request Forgery

Jul 23, 2026 Jul 23, 2026

Jul 23, 2026

7.1 HIGH

CVE-2026-57428 — WordPress Sprout Clients plugin <= 3.2.3 - Cross Site Scripting (XSS) vulnerability

Unauthenticated Cross Site Scripting (XSS) in Sprout Clients <= 3.2.3 versions.

Remote | Cross-Site Scripting

Jul 23, 2026 Jul 23, 2026

Jul 23, 2026

7.1 HIGH

CVE-2026-57427 — WordPress Download Monitor - WPForms Lock plugin <= 1.0.4 - Cross Site Scripting (XSS) vu…

Unauthenticated Cross Site Scripting (XSS) in Download Monitor - WPForms Lock <= 1.0.4 versions.

Remote | Cross-Site Scripting

Jul 23, 2026 Jul 23, 2026

Jul 23, 2026

6.5 MEDIUM

CVE-2026-57425 — WordPress Autopay dla WooCommerce plugin <= 2.2.27 - Broken Access Control vulnerability

Unauthenticated Broken Access Control in Autopay dla WooCommerce <= 2.2.27 versions.

Remote | Authorization

Jul 23, 2026 Jul 23, 2026

Jul 23, 2026

7.1 HIGH

CVE-2026-57397 — WordPress Coaching theme <= 3.9.2 - Cross Site Scripting (XSS) vulnerability

Unauthenticated Cross Site Scripting (XSS) in Coaching <= 3.9.2 versions.

Remote | Cross-Site Scripting

Jul 23, 2026 Jul 23, 2026

Jul 23, 2026

Browse by Apps

Latest CVE Feed

Cookie Preferences