Contributor Cross Site Scripting (XSS) in BetterDocs <= 4.6.2 versions....
Fresh 2026 Zero-Days & Newly Disclosed CVEs
Continuous surveillance of newly registered CVE advisories with CVSS threat scores, attack vector metrics, and impacted software libraries.
Contributor Cross Site Scripting (XSS) in WordPress Social Login and Register <= 7.8.0 versions....
Unauthenticated Server Side Request Forgery (SSRF) in AffiliateX <= 2.3.5 versions....
Shop manager Cross Site Scripting (XSS) in Abandoned Cart Lite for WooCommerce <= 6.8.0 versions....
Editor Arbitrary File Deletion in Kirki <= 6.0.13 versions....
Unauthenticated Broken Access Control in Thrive Leads Version <= 10.9.2 versions....
Subscriber Sensitive Data Exposure in ะฎKassa ะดะปั WooCommerce <= 2.16.1 versions....
Subscriber Broken Access Control in RT Mega Menu โ Mega Menu Builder for Elementor & Gutenberg <= 1.5.1 versions....
Subscriber Broken Access Control in FundEngine <= 1.7.8 versions....
Subscriber Cross Site Scripting (XSS) in RT Mega Menu โ Mega Menu Builder for Elementor & Gutenberg <= 1.5.1 versions....
Unauthenticated Cross Site Scripting (XSS) in Booking Calendar <= 11.4.2 versions....
Unauthenticated Broken Access Control in Events Made Easy <= 3.1.3 versions....
Unauthenticated Cross Site Scripting (XSS) in Dynamic Pricing With Discount Rules for WooCommerce <= 4.5.11 versions....
Unauthenticated Cross Site Scripting (XSS) in Product Feed Manager <= 7.6.1 versions....
Unauthenticated Server Side Request Forgery (SSRF) in 3D Flipbook PDF Viewer & Embedder <= 1.4.2 versions....
Subscriber SQL Injection in rtMedia for WordPress, BuddyPress and bbPress <= 4.7.10 versions....
Unauthenticated SQL Injection in AWP Classifieds <= 4.4.7 versions....
Unauthenticated SQL Injection in rtMedia for WordPress, BuddyPress and bbPress <= 4.7.10 versions....
Unauthenticated Sensitive Data Exposure in Byteflows Travel & Hotel Booking <= 1.0.0 versions....
Subscriber Broken Authentication in Hide My WP Ghost <= 7.0.06 versions....
Subscriber Insecure Direct Object References (IDOR) in Paid Member Subscriptions <= 3.0.7 versions....
Unauthenticated SQL Injection in GamiPress <= 7.9.7 versions....
Administrator SQL Injection in Sender โ Newsletter, SMS and Email Marketing Automation for WooCommerce <= 2.10.22 versions....
Unauthenticated Broken Access Control in CoCart โ Headless ecommerce <= 4.8.4 versions....