Latest CVE Vulnerabilities by Published Date – Page 580

7.2 HIGH

CVE-2026-39719 — WordPress PDF Smart Viewer for Elementor plugin <= 1.0.4 - Server Side Request Forgery (S…

Unauthenticated Server Side Request Forgery (SSRF) in PDF Smart Viewer for Elementor <= 1.0.4 versions.

Remote | Server-Side Request Forgery

Oct 06, 2026 Oct 06, 2026

Oct 06, 2026

7.1 HIGH

CVE-2026-32581 — WordPress Mooberry Book Manager plugin 4.16.2 - SQL Injection vulnerability

Subscriber SQL Injection in Mooberry Book Manager 4.16.2 versions.

Remote | Injection

Oct 06, 2026 Oct 06, 2026

Oct 06, 2026

7.5 HIGH

CVE-2026-32580 — WordPress WooCommerce Lottery plugin <= 2.2.9 - SQL Injection vulnerability

Unauthenticated SQL Injection in WooCommerce Lottery <= 2.2.9 versions.

Remote | Injection

Oct 06, 2026 Oct 06, 2026

Oct 06, 2026

10.0 CRITICAL

CVE-2026-32579 — WordPress Kognetiks Chatbot for WordPress plugin <= 2.4.9 - Arbitrary File Upload vulnera…

Unauthenticated Arbitrary File Upload in Kognetiks Chatbot for WordPress <= 2.4.9 versions.

kognetiks_chatbot | Remote | Authentication

Oct 06, 2026 Oct 06, 2026

Oct 06, 2026

7.1 HIGH

CVE-2026-32578 — WordPress ECPay Ecommerce for WooCommerce plugin <= 1.1.2606090 - Broken Access Control v…

Subscriber Broken Access Control in ECPay Ecommerce for WooCommerce <= 1.1.2606090 versions.

Remote | Authorization

Oct 06, 2026 Oct 06, 2026

Oct 06, 2026

7.1 HIGH

CVE-2026-32577 — WordPress Frontend File Manager plugin <= 23.6 - Cross Site Scripting (XSS) vulnerability

Unauthenticated Cross Site Scripting (XSS) in Frontend File Manager <= 23.6 versions.

frontend_file_manager | Remote | Cross-Site Scripting

Oct 06, 2026 Oct 06, 2026

Oct 06, 2026

7.1 HIGH

CVE-2026-32575 — WordPress SUMO Affiliates Pro plugin <= 11.7.0 - Cross Site Scripting (XSS) vulnerability

Unauthenticated Cross Site Scripting (XSS) in SUMO Affiliates Pro <= 11.7.0 versions.

Remote | Cross-Site Scripting

Oct 06, 2026 Oct 06, 2026

Oct 06, 2026

7.1 HIGH

CVE-2026-32574 — WordPress Smart Forms plugin <= 2.6.104 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in EDGARROJAS Smart Forms smart-forms allows DOM-Based XSS.This issue affects Smart Forms: from n/a …

smart_forms | Remote | Cross-Site Scripting

Oct 06, 2026 Oct 13, 2026

Oct 06, 2026

Oct 13, 2026

7.1 HIGH

CVE-2026-32572 — WordPress WP User Frontend Pro plugin <= 4.2.13 - Cross Site Scripting (XSS) vulnerability

Unauthenticated Cross Site Scripting (XSS) in WP User Frontend Pro <= 4.2.13 versions.

Remote | Cross-Site Scripting

Oct 06, 2026 Oct 06, 2026

Oct 06, 2026

6.5 MEDIUM

CVE-2026-32571 — WordPress Ohio Extra plugin <= 3.6.8 - Cross Site Scripting (XSS) vulnerability

Subscriber Cross Site Scripting (XSS) in Ohio Extra <= 3.6.8 versions.

Remote | Cross-Site Scripting

Oct 06, 2026 Oct 06, 2026

Oct 06, 2026

7.1 HIGH

CVE-2026-32570 — WordPress Progressify - Progressive Web App (PWA) plugin <= 1.6.0 - Cross Site Scripting …

Unauthenticated Cross Site Scripting (XSS) in Progressify - Progressive Web App (PWA) <= 1.6.0 versions.

Remote | Cross-Site Scripting

Oct 06, 2026 Oct 06, 2026

Oct 06, 2026

7.1 HIGH

CVE-2026-32569 — WordPress WP Media folder plugin <= 6.2.2 - Cross Site Scripting (XSS) vulnerability

Unauthenticated Cross Site Scripting (XSS) in WP Media folder <= 6.2.2 versions.

wp_media_folder | Remote | Cross-Site Scripting

Oct 06, 2026 Oct 06, 2026

Oct 06, 2026

9.9 CRITICAL

CVE-2026-32568 — WordPress WooCommerce Designer Pro plugin <= 1.9.33 - Remote Code Execution (RCE) vulnera…

Subscriber Remote Code Execution (RCE) in WooCommerce Designer Pro <= 1.9.33 versions.

Remote | Injection

Oct 06, 2026 Oct 06, 2026

Oct 06, 2026

9.3 CRITICAL

CVE-2026-32557 — WordPress WooCommerce Appointments plugin <= 5.3.2 - SQL Injection vulnerability

Unauthenticated SQL Injection in WooCommerce Appointments <= 5.3.2 versions.

Remote | Injection

Oct 06, 2026 Oct 06, 2026

Oct 06, 2026

8.5 HIGH

CVE-2026-25434 — WordPress WP2LEADS plugin <= 3.5.7 - SQL Injection vulnerability

Subscriber SQL Injection in WP2LEADS <= 3.5.7 versions.

Remote | Injection

Oct 06, 2026 Oct 06, 2026

Oct 06, 2026

7.1 HIGH

CVE-2026-25433 — WordPress WP2LEADS plugin <= 3.5.7 - Broken Access Control vulnerability

Subscriber Broken Access Control in WP2LEADS <= 3.5.7 versions.

Remote | Authorization

Oct 06, 2026 Oct 06, 2026

Oct 06, 2026

6.5 MEDIUM

CVE-2026-105879 — WordPress JetElements For Elementor plugin <= 2.9.2.2 - Cross Site Scripting (XSS) vulner…

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Crocoblock JetElements For Elementor jet-elements allows Stored XSS.This issue affects JetElement…

jetelements_for_elementor | Remote | Cross-Site Scripting

Oct 06, 2026 Oct 06, 2026

Oct 06, 2026

5.0 MEDIUM

CVE-2026-105809 — SourceCodester Simple Student Information System Profile Field register.php cross site sc…

A vulnerability was identified in SourceCodester Simple Student Information System 1.0. This issue affects some unknown processing of the file /register.php of the component Profile Field Handler. Th…

simple_student_information_system | Remote | Cross-Site Scripting

Oct 06, 2026 Oct 06, 2026

Oct 06, 2026

4.0 MEDIUM

CVE-2026-105808 — SourceCodester Simple Student Information System searchresults.php clean cross site scrip…

A vulnerability was determined in SourceCodester Simple Student Information System 1.0. This vulnerability affects the function clean of the file searchresults.php. Executing a manipulation of the ar…

simple_student_information_system | Remote | Cross-Site Scripting

Oct 06, 2026 Oct 09, 2026

Oct 06, 2026

Oct 09, 2026

8.5 HIGH

CVE-2026-105317 — WordPress Paid Member Subscriptions plugin <= 3.1.1 - SQL Injection vulnerability

Subscriber SQL Injection in Paid Member Subscriptions <= 3.1.1 versions.

paid_membership_subscriptions | Remote | Injection

Oct 06, 2026 Oct 06, 2026

Oct 06, 2026

Browse by Apps

Latest CVE Feed

Cookie Preferences