CVE-2026-65546
— WordPress Qode Tours plugin <= 3.1.3.1 - SQL Injection vulnerability
Unauthenticated SQL Injection in Qode Tours <= 3.1.3.1 versions.
Remote
|
Injection
Aug 06, 2026
Aug 06, 2026
Aug 06, 2026
Aug 06, 2026
CVE-2026-65545
— WordPress AI Engine plugin <= 3.6.8 - Cross Site Scripting (XSS) vulnerability
Unauthenticated Cross Site Scripting (XSS) in AI Engine <= 3.6.8 versions.
Aug 06, 2026
Aug 06, 2026
Aug 06, 2026
Aug 06, 2026
CVE-2026-65544
— WordPress Super Socializer plugin <= 7.14.5 - Cross Site Scripting (XSS) vulnerability
Unauthenticated Cross Site Scripting (XSS) in Super Socializer <= 7.14.5 versions.
Remote
|
Cross-Site Scripting
Aug 06, 2026
Aug 06, 2026
Aug 06, 2026
Aug 06, 2026
CVE-2026-65543
— WordPress Vimeo plugin <= 1.2.2 - Sensitive Data Exposure vulnerability
Subscriber Sensitive Data Exposure in Vimeo <= 1.2.2 versions.
Remote
|
Information Disclosure
Aug 06, 2026
Aug 06, 2026
Aug 06, 2026
Aug 06, 2026
CVE-2026-65542
— WordPress Super Socializer plugin <= 7.14.5 - Broken Authentication vulnerability
Unauthenticated Broken Authentication in Super Socializer <= 7.14.5 versions.
Remote
|
Authentication
Aug 06, 2026
Aug 06, 2026
Aug 06, 2026
Aug 06, 2026
CVE-2026-65541
— WordPress Staff Training plugin <= 1.0.7 - Broken Access Control vulnerability
Unauthenticated Broken Access Control in Staff Training <= 1.0.7 versions.
Remote
|
Authorization
Aug 06, 2026
Aug 06, 2026
Aug 06, 2026
Aug 06, 2026
CVE-2026-65523
— WordPress Formidable Forms Signature Online Contract Automation plugin <= 2.0.1 - Insecur…
Unauthenticated Insecure Direct Object References (IDOR) in Formidable Forms Signature Online Contract Automation <= 2.0.1 versions.
Remote
|
Authorization
Aug 06, 2026
Aug 06, 2026
Aug 06, 2026
Aug 06, 2026
CVE-2026-65520
— WordPress WP OAuth Server plugin <= 6.2.0 - SQL Injection vulnerability
Unauthenticated SQL Injection in WP OAuth Server <= 6.2.0 versions.
Aug 06, 2026
Aug 06, 2026
Aug 06, 2026
Aug 06, 2026
CVE-2026-65517
— WordPress Easy PayPal Buy Now Button plugin <= 2.0.4 - Cross Site Scripting (XSS) vulnera…
Unauthenticated Cross Site Scripting (XSS) in Easy PayPal Buy Now Button <= 2.0.4 versions.
Remote
|
Cross-Site Scripting
Aug 06, 2026
Aug 06, 2026
Aug 06, 2026
Aug 06, 2026
CVE-2026-65515
— WordPress AffiliateWP plugin <= 2.35.0 - Cross Site Scripting (XSS) vulnerability
Unauthenticated Cross Site Scripting (XSS) in AffiliateWP <= 2.35.0 versions.
Remote
|
Cross-Site Scripting
Aug 06, 2026
Aug 06, 2026
Aug 06, 2026
Aug 06, 2026
CVE-2026-65513
— WordPress Simply Schedule Appointments plugin <= 1.6.12.10 - Cross Site Scripting (XSS) v…
Unauthenticated Cross Site Scripting (XSS) in Simply Schedule Appointments <= 1.6.12.10 versions.
Aug 06, 2026
Aug 06, 2026
Aug 06, 2026
Aug 06, 2026
CVE-2026-65509
— WordPress wpDataTables plugin <= 7.5.1 - Cross Site Scripting (XSS) vulnerability
Unauthenticated Cross Site Scripting (XSS) in wpDataTables <= 7.5.1 versions.
Remote
|
Cross-Site Scripting
Aug 06, 2026
Aug 06, 2026
Aug 06, 2026
Aug 06, 2026
CVE-2026-65508
— WordPress Simply Schedule Appointments plugin <= 1.6.12.10 - SQL Injection vulnerability
Unauthenticated SQL Injection in Simply Schedule Appointments <= 1.6.12.10 versions.
Aug 06, 2026
Aug 06, 2026
Aug 06, 2026
Aug 06, 2026
CVE-2026-65507
— WordPress AIWU plugin <= 1.5.6 - Privilege Escalation vulnerability
Unauthenticated Privilege Escalation in AIWU <= 1.5.6 versions.
Remote
|
Authorization
Aug 06, 2026
Aug 06, 2026
Aug 06, 2026
Aug 06, 2026
CVE-2026-65504
— WordPress BOX NOW Delivery Croatia plugin <= 3.3.0 - Broken Access Control vulnerability
Unauthenticated Broken Access Control in BOX NOW Delivery Croatia <= 3.3.0 versions.
Remote
|
Authorization
Aug 06, 2026
Aug 06, 2026
Aug 06, 2026
Aug 06, 2026
CVE-2026-65502
— WordPress Element Pack Elementor Addons plugin <= 8.7.13 - Captcha Bypass vulnerability
Unauthenticated Bypass Vulnerability in Element Pack Elementor Addons <= 8.7.13 versions.
Remote
|
Authentication
Aug 06, 2026
Aug 06, 2026
Aug 06, 2026
Aug 06, 2026
CVE-2026-61982
— WordPress SiteGuard WP Plugin plugin <= 1.8.6 - Cross Site Scripting (XSS) vulnerability
Unauthenticated Cross Site Scripting (XSS) in SiteGuard WP Plugin <= 1.8.6 versions.
Remote
|
Cross-Site Scripting
Aug 06, 2026
Aug 06, 2026
Aug 06, 2026
Aug 06, 2026
CVE-2026-61964
— WordPress Ninja Tables plugin <= 5.2.9 - Cross Site Scripting (XSS) vulnerability
Unauthenticated Cross Site Scripting (XSS) in Ninja Tables <= 5.2.9 versions.
Aug 06, 2026
Aug 06, 2026
Aug 06, 2026
Aug 06, 2026
CVE-2026-61963
— WordPress Media LIbrary Assistant plugin <= 3.38 - Cross Site Scripting (XSS) vulnerabili…
Unauthenticated Cross Site Scripting (XSS) in Media LIbrary Assistant <= 3.38 versions.
Aug 06, 2026
Aug 06, 2026
Aug 06, 2026
Aug 06, 2026
CVE-2026-61961
— WordPress EmbedPress plugin <= 4.5.6 - Cross Site Scripting (XSS) vulnerability
Unauthenticated Cross Site Scripting (XSS) in EmbedPress <= 4.5.6 versions.
Aug 06, 2026
Aug 06, 2026
Aug 06, 2026
Aug 06, 2026