🚨 CVE-2026-84758
Unauthenticated Broken Access Control in Business Directory <= 6.4.26 versions.
🎖@cveNotify
Unauthenticated Broken Access Control in Business Directory <= 6.4.26 versions.
🎖@cveNotify
🚨 CVE-2026-84761
Unauthenticated Server Side Request Forgery (SSRF) in LiteSpeed Cache <= 7.9 versions.
🎖@cveNotify
Unauthenticated Server Side Request Forgery (SSRF) in LiteSpeed Cache <= 7.9 versions.
🎖@cveNotify
🚨 CVE-2026-84765
Unauthenticated Cross Site Scripting (XSS) in Breadcrumb NavXT <= 7.5.1 versions.
🎖@cveNotify
Unauthenticated Cross Site Scripting (XSS) in Breadcrumb NavXT <= 7.5.1 versions.
🎖@cveNotify
Patchstack
Cross Site Scripting (XSS) in WordPress Breadcrumb NavXT Plugin
Patchstack is the leading open source vulnerability research organization. Find information and protection for all WordPress and Drupal security issues.
🚨 CVE-2026-84766
Unauthenticated Bypass Vulnerability in FluentBooking Pro <= 2.2.1 versions.
🎖@cveNotify
Unauthenticated Bypass Vulnerability in FluentBooking Pro <= 2.2.1 versions.
🎖@cveNotify
🚨 CVE-2026-84768
Unauthenticated SQL Injection in VikAppointments Services Booking Calendar <= 1.2.20 versions.
🎖@cveNotify
Unauthenticated SQL Injection in VikAppointments Services Booking Calendar <= 1.2.20 versions.
🎖@cveNotify
🚨 CVE-2026-84769
Unauthenticated Insecure Direct Object References (IDOR) in Business Directory <= 6.4.26 versions.
🎖@cveNotify
Unauthenticated Insecure Direct Object References (IDOR) in Business Directory <= 6.4.26 versions.
🎖@cveNotify
Patchstack
Insecure Direct Object References (IDOR) in WordPress Business Directory Plugin
Patchstack is the leading open source vulnerability research organization. Find information and protection for all WordPress and Drupal security issues.
🚨 CVE-2026-84773
Unauthenticated Cross Site Scripting (XSS) in EWWW Image Optimizer <= 8.7.6 versions.
🎖@cveNotify
Unauthenticated Cross Site Scripting (XSS) in EWWW Image Optimizer <= 8.7.6 versions.
🎖@cveNotify
Patchstack
Cross Site Scripting (XSS) in WordPress EWWW Image Optimizer Plugin
Patchstack is the leading open source vulnerability research organization. Find information and protection for all WordPress and Drupal security issues.
🚨 CVE-2026-84774
Unauthenticated Cross Site Scripting (XSS) in WP Statistics <= 14.16.11 versions.
🎖@cveNotify
Unauthenticated Cross Site Scripting (XSS) in WP Statistics <= 14.16.11 versions.
🎖@cveNotify
🚨 CVE-2026-84776
Unauthenticated Denial of Service Attack in MalCare Security <= 6.69 versions.
🎖@cveNotify
Unauthenticated Denial of Service Attack in MalCare Security <= 6.69 versions.
🎖@cveNotify
Patchstack
Denial of Service Attack in WordPress MalCare Security Plugin
Patchstack is the leading open source vulnerability research organization. Find information and protection for all WordPress and Drupal security issues.
🚨 CVE-2026-84777
Unauthenticated Broken Authentication in Really Simple SSL <= 9.8.0 versions.
🎖@cveNotify
Unauthenticated Broken Authentication in Really Simple SSL <= 9.8.0 versions.
🎖@cveNotify
Patchstack
Broken Authentication in WordPress Really Simple SSL Plugin
Patchstack is the leading open source vulnerability research organization. Find information and protection for all WordPress and Drupal security issues.
🚨 CVE-2026-84778
Unauthenticated Denial of Service Attack in Migrate Guru – Site Migration & Cloning <= 6.65 versions.
🎖@cveNotify
Unauthenticated Denial of Service Attack in Migrate Guru – Site Migration & Cloning <= 6.65 versions.
🎖@cveNotify
Patchstack
Denial of Service Attack in WordPress Migrate Guru – Site Migration & Cloning Plugin
Patchstack is the leading open source vulnerability research organization. Find information and protection for all WordPress and Drupal security issues.
🚨 CVE-2026-84779
Subscriber Broken Access Control in Agentimus – AI SEO, llms.txt & MCP for AI Agents <= 1.51.0 versions.
🎖@cveNotify
Subscriber Broken Access Control in Agentimus – AI SEO, llms.txt & MCP for AI Agents <= 1.51.0 versions.
🎖@cveNotify
🚨 CVE-2026-84812
Unauthenticated Cross Site Scripting (XSS) in BP Better Messages <= 2.15.27 versions.
🎖@cveNotify
Unauthenticated Cross Site Scripting (XSS) in BP Better Messages <= 2.15.27 versions.
🎖@cveNotify
Patchstack
Cross Site Scripting (XSS) in WordPress BP Better Messages Plugin
Patchstack is the leading open source vulnerability research organization. Find information and protection for all WordPress and Drupal security issues.
🚨 CVE-2026-84836
Subscriber Insecure Direct Object References (IDOR) in WC Ukraine Shipping <= 1.22.3 versions.
🎖@cveNotify
Subscriber Insecure Direct Object References (IDOR) in WC Ukraine Shipping <= 1.22.3 versions.
🎖@cveNotify
Patchstack
Insecure Direct Object References (IDOR) in WordPress WC Ukraine Shipping Plugin
Patchstack is the leading open source vulnerability research organization. Find information and protection for all WordPress and Drupal security issues.
🚨 CVE-2026-84847
Unauthenticated Broken Access Control in Quick Event Manager <= 9.17 versions.
🎖@cveNotify
Unauthenticated Broken Access Control in Quick Event Manager <= 9.17 versions.
🎖@cveNotify