Latest CVE Vulnerabilities by Published Date – Page 8

5.9 MEDIUM

CVE-2026-65538 — WordPress Machete plugin <= 5.2 - Cross Site Scripting (XSS) vulnerability

Author Cross Site Scripting (XSS) in Machete <= 5.2 versions.

Remote | Cross-Site Scripting

Jul 23, 2026 Jul 23, 2026

Jul 23, 2026

4.3 MEDIUM

CVE-2026-65537 — WordPress Cyr to Lat reloaded – transliteration of links and file names plugin <= 1.3.3 -…

Subscriber Broken Access Control in Cyr to Lat reloaded – transliteration of links and file names <= 1.3.3 versions.

Remote | Authorization

Jul 23, 2026 Jul 23, 2026

Jul 23, 2026

6.5 MEDIUM

CVE-2026-65536 — WordPress افزونه حمل و نقل ووکامرس (پست پیشتاز و سفارشی، پیک موتوری) plugin <= 4.4.5 - Cr…

Unauthenticated Cross Site Request Forgery (CSRF) in افزونه حمل و نقل ووکامرس (پست پیشتاز و سفارشی، پیک موتوری) <= 4.4.5 versions.

Remote | Cross-Site Request Forgery

Jul 23, 2026 Jul 23, 2026

Jul 23, 2026

4.3 MEDIUM

CVE-2026-65535 — WordPress TinyMCE Templates plugin <= 4.8.1 - Sensitive Data Exposure vulnerability

Contributor Sensitive Data Exposure in TinyMCE Templates <= 4.8.1 versions.

Remote | Information Disclosure

Jul 23, 2026 Jul 23, 2026

Jul 23, 2026

5.9 MEDIUM

CVE-2026-65534 — WordPress Custom links in Elementor Image Carousel plugin <= 1.1.1 - Cross Site Scripting…

Author Cross Site Scripting (XSS) in Custom links in Elementor Image Carousel <= 1.1.1 versions.

Remote | Cross-Site Scripting

Jul 23, 2026 Jul 23, 2026

Jul 23, 2026

6.5 MEDIUM

CVE-2026-65533 — WordPress Smart SEO Tool plugin <= 4.1.2 - Cross Site Scripting (XSS) vulnerability

Contributor Cross Site Scripting (XSS) in Smart SEO Tool <= 4.1.2 versions.

Remote | Cross-Site Scripting

Jul 23, 2026 Jul 23, 2026

Jul 23, 2026

7.6 HIGH

CVE-2026-65532 — WordPress Persian Woocommerce SMS plugin <= 7.2.2 - SQL Injection vulnerability

Shop manager SQL Injection in Persian Woocommerce SMS <= 7.2.2 versions.

Remote | Injection

Jul 23, 2026 Jul 23, 2026

Jul 23, 2026

4.8 MEDIUM

CVE-2026-65531 — WordPress Qubely plugin <= 1.8.14 - Broken Access Control vulnerability

Unauthenticated Broken Access Control in Qubely <= 1.8.14 versions.

qubely | Remote | Authorization

Jul 23, 2026 Jul 23, 2026

Jul 23, 2026

4.3 MEDIUM

CVE-2026-65530 — WordPress TemplateSpare plugin <= 4.2.2 - Broken Access Control vulnerability

Subscriber Broken Access Control in TemplateSpare <= 4.2.2 versions.

templatespare | Remote | Authorization

Jul 23, 2026 Jul 23, 2026

Jul 23, 2026

5.3 MEDIUM

CVE-2026-65529 — WordPress Graphina plugin <= 3.1.12 - Broken Access Control vulnerability

Unauthenticated Broken Access Control in Graphina <= 3.1.12 versions.

Remote | Authorization

Jul 23, 2026 Jul 23, 2026

Jul 23, 2026

6.5 MEDIUM

CVE-2026-65528 — WordPress BSK PDF Manager plugin <= 3.8 - Cross Site Scripting (XSS) vulnerability

Contributor Cross Site Scripting (XSS) in BSK PDF Manager <= 3.8 versions.

bsk_pdf_manager | Remote | Cross-Site Scripting

Jul 23, 2026 Jul 23, 2026

Jul 23, 2026

6.5 MEDIUM

CVE-2026-65527 — WordPress LIQUID SPEECH BALLOON plugin <= 1.2.5 - Cross Site Scripting (XSS) vulnerability

Contributor Cross Site Scripting (XSS) in LIQUID SPEECH BALLOON <= 1.2.5 versions.

liquid_speech_balloon | Remote | Cross-Site Scripting

Jul 23, 2026 Jul 23, 2026

Jul 23, 2026

8.5 HIGH

CVE-2026-65526 — WordPress Visualizer plugin <= 4.0.6 - SQL Injection vulnerability

Contributor SQL Injection in Visualizer <= 4.0.6 versions.

visualizer | Remote | Injection

Jul 23, 2026 Jul 23, 2026

Jul 23, 2026

5.3 MEDIUM

CVE-2026-65525 — WordPress Civi Framework plugin <= 2.2.0 - Broken Access Control vulnerability

Unauthenticated Broken Access Control in Civi Framework <= 2.2.0 versions.

Remote | Authorization

Jul 23, 2026 Jul 23, 2026

Jul 23, 2026

4.3 MEDIUM

CVE-2026-65524 — WordPress Avada Custom Branding plugin <= 1.2 - Broken Access Control vulnerability

Contributor Broken Access Control in Avada Custom Branding <= 1.2 versions.

Remote | Authorization

Jul 23, 2026 Jul 23, 2026

Jul 23, 2026

6.5 MEDIUM

CVE-2026-65522 — WordPress Manual - Documentation, Knowledge Base & Education WordPress theme theme <= 7.5…

Contributor Cross Site Scripting (XSS) in Manual - Documentation, Knowledge Base & Education WordPress Theme <= 7.5.4 versions.

Remote | Cross-Site Scripting

Jul 23, 2026 Jul 23, 2026

Jul 23, 2026

5.3 MEDIUM

CVE-2026-65521 — WordPress WP Social Ninja plugin <= 4.3.0 - Sensitive Data Exposure vulnerability

Unauthenticated Sensitive Data Exposure in WP Social Ninja <= 4.3.0 versions.

Remote | Information Disclosure

Jul 23, 2026 Jul 23, 2026

Jul 23, 2026

6.5 MEDIUM

CVE-2026-65519 — WordPress Photo Gallery plugin <= 2.7.7.29 - Cross Site Scripting (XSS) vulnerability

Author Cross Site Scripting (XSS) in Photo Gallery <= 2.7.7.29 versions.

Remote | Cross-Site Scripting

Jul 23, 2026 Jul 23, 2026

Jul 23, 2026

6.5 MEDIUM

CVE-2026-65518 — WordPress Accept Donations with PayPal & Stripe plugin <= 1.5.5 - Cross Site Scripting (X…

Contributor Cross Site Scripting (XSS) in Accept Donations with PayPal & Stripe <= 1.5.5 versions.

accept_donations_with_paypal | Remote | Cross-Site Scripting

Jul 23, 2026 Jul 23, 2026

Jul 23, 2026

7.2 HIGH

CVE-2026-65516 — WordPress PeproDev Ultimate Invoice plugin <= 2.2.6 - Server Side Request Forgery (SSRF) …

Unauthenticated Server Side Request Forgery (SSRF) in PeproDev Ultimate Invoice <= 2.2.6 versions.

peprodev_ultimate_invoice | Remote | Server-Side Request Forgery

Jul 23, 2026 Jul 23, 2026

Jul 23, 2026

Browse by Apps

Latest CVE Feed

Cookie Preferences