CVE-2026-66631
— WordPress MC Woocommerce Wishlist plugin <= 1.9.21 - SQL Injection vulnerability
Administrator SQL Injection in MC Woocommerce Wishlist <= 1.9.21 versions.
Remote
|
Injection
Sep 17, 2026
Sep 17, 2026
Sep 17, 2026
Sep 17, 2026
CVE-2026-66630
— WordPress PublishPress Series plugin <= 3.1.3 - SQL Injection vulnerability
Administrator SQL Injection in PublishPress Series <= 3.1.3 versions.
Remote
|
Injection
Sep 17, 2026
Sep 17, 2026
Sep 17, 2026
Sep 17, 2026
CVE-2026-66628
— WordPress WP-Lister Lite for eBay plugin <= 3.8.11 - SQL Injection vulnerability
Shop manager SQL Injection in WP-Lister Lite for eBay <= 3.8.11 versions.
Sep 17, 2026
Sep 17, 2026
Sep 17, 2026
Sep 17, 2026
CVE-2026-66626
— WordPress SKT Addons for Elementor plugin <= 4.0 - SQL Injection vulnerability
Editor SQL Injection in SKT Addons for Elementor <= 4.0 versions.
Remote
|
Injection
Sep 17, 2026
Sep 17, 2026
Sep 17, 2026
Sep 17, 2026
CVE-2026-66625
— WordPress WC Vendors Marketplace plugin <= 2.7.2.1 - SQL Injection vulnerability
Administrator SQL Injection in WC Vendors Marketplace <= 2.7.2.1 versions.
Sep 17, 2026
Sep 17, 2026
Sep 17, 2026
Sep 17, 2026
CVE-2026-66624
— WordPress WPMasterToolKit plugin <= 2.22.0 - SQL Injection vulnerability
Administrator SQL Injection in WPMasterToolKit <= 2.22.0 versions.
Remote
|
Injection
Sep 17, 2026
Sep 17, 2026
Sep 17, 2026
Sep 17, 2026
CVE-2026-66619
— WordPress Newsletters plugin <= 4.18 - SQL Injection vulnerability
Administrator SQL Injection in Newsletters <= 4.18 versions.
Sep 17, 2026
Sep 17, 2026
Sep 17, 2026
Sep 17, 2026
CVE-2026-66618
— WordPress WP Maps plugin <= 4.9.9 - SQL Injection vulnerability
Administrator SQL Injection in WP Maps <= 4.9.9 versions.
Remote
|
Injection
Sep 17, 2026
Sep 17, 2026
Sep 17, 2026
Sep 17, 2026
CVE-2026-66617
— WordPress PublishPress Series plugin <= 3.1.3 - Cross Site Scripting (XSS) vulnerability
Contributor Cross Site Scripting (XSS) in PublishPress Series <= 3.1.3 versions.
Remote
|
Cross-Site Scripting
Sep 17, 2026
Sep 17, 2026
Sep 17, 2026
Sep 17, 2026
CVE-2026-66608
— WordPress Unlimited Elements For Elementor (Free Widgets, Addons, Templates) plugin <= 2.…
Contributor Server Side Request Forgery (SSRF) in Unlimited Elements For Elementor (Free Widgets, Addons, Templates) <= 2.0.19 versions.
Remote
|
Server-Side Request Forgery
Sep 17, 2026
Sep 17, 2026
Sep 17, 2026
Sep 17, 2026
CVE-2026-66580
— WordPress Product Feed Manager plugin <= 7.12.0 - SQL Injection vulnerability
Contributor SQL Injection in Product Feed Manager <= 7.12.0 versions.
Remote
|
Injection
Sep 17, 2026
Sep 17, 2026
Sep 17, 2026
Sep 17, 2026
CVE-2026-66579
— WordPress JetElements For Elementor plugin <= 2.9.2.1 - Cross Site Scripting (XSS) vulner…
Contributor Cross Site Scripting (XSS) in JetElements For Elementor <= 2.9.2.1 versions.
Remote
|
Cross-Site Scripting
Sep 17, 2026
Sep 17, 2026
Sep 17, 2026
Sep 17, 2026
CVE-2026-66578
— WordPress PropertyHive plugin <= 2.2.6 - Cross Site Scripting (XSS) vulnerability
Contributor Cross Site Scripting (XSS) in PropertyHive <= 2.2.6 versions.
Remote
|
Cross-Site Scripting
Sep 17, 2026
Sep 17, 2026
Sep 17, 2026
Sep 17, 2026
CVE-2026-66577
— WordPress JetSearch plugin <= 3.6.3 - Cross Site Scripting (XSS) vulnerability
Contributor Cross Site Scripting (XSS) in JetSearch <= 3.6.3 versions.
Remote
|
Cross-Site Scripting
Sep 17, 2026
Sep 17, 2026
Sep 17, 2026
Sep 17, 2026
CVE-2026-66576
— WordPress JetBlocks For Elementor plugin <= 1.5.2 - Cross Site Scripting (XSS) vulnerabil…
Contributor Cross Site Scripting (XSS) in JetBlocks For Elementor <= 1.5.2 versions.
Remote
|
Cross-Site Scripting
Sep 17, 2026
Sep 17, 2026
Sep 17, 2026
Sep 17, 2026
CVE-2026-66575
— WordPress King Addons for Elementor plugin <= 51.1.81 - Insecure Direct Object References…
Unauthenticated Insecure Direct Object References (IDOR) in King Addons for Elementor <= 51.1.81 versions.
Remote
|
Authentication
Sep 17, 2026
Sep 17, 2026
Sep 17, 2026
Sep 17, 2026
CVE-2026-66574
— WordPress Element Pack Elementor Addons plugin <= 8.8.3 - Cross Site Scripting (XSS) vuln…
Contributor Cross Site Scripting (XSS) in Element Pack Elementor Addons <= 8.8.3 versions.
Remote
|
Cross-Site Scripting
Sep 17, 2026
Sep 17, 2026
Sep 17, 2026
Sep 17, 2026
CVE-2026-66573
— WordPress JetTabs plugin <= 2.3.3.1 - Cross Site Scripting (XSS) vulnerability
Contributor Cross Site Scripting (XSS) in JetTabs <= 2.3.3.1 versions.
Remote
|
Cross-Site Scripting
Sep 17, 2026
Sep 17, 2026
Sep 17, 2026
Sep 17, 2026
CVE-2026-66572
— WordPress JetBlog plugin <= 2.4.10 - Cross Site Scripting (XSS) vulnerability
Contributor Cross Site Scripting (XSS) in JetBlog <= 2.4.10 versions.
Remote
|
Cross-Site Scripting
Sep 17, 2026
Sep 17, 2026
Sep 17, 2026
Sep 17, 2026
CVE-2026-66571
— WordPress Asset CleanUp: Page Speed Booster plugin <= 1.4.0.5 - Cross Site Request Forger…
Unauthenticated Cross Site Request Forgery (CSRF) in Asset CleanUp: Page Speed Booster <= 1.4.0.5 versions.
Remote
|
Cross-Site Request Forgery
Sep 17, 2026
Sep 17, 2026
Sep 17, 2026
Sep 17, 2026