🚨 CVE-2026-32572
Unauthenticated Cross Site Scripting (XSS) in WP User Frontend Pro <= 4.2.13 versions.
🎖@cveNotify
Unauthenticated Cross Site Scripting (XSS) in WP User Frontend Pro <= 4.2.13 versions.
🎖@cveNotify
Patchstack
Cross Site Scripting (XSS) in WordPress WP User Frontend Pro Plugin
Patchstack is the leading open source vulnerability research organization. Find information and protection for all WordPress and Drupal security issues.
🚨 CVE-2026-32574
Unauthenticated Cross Site Scripting (XSS) in Smart Forms <= 2.6.104 versions.
🎖@cveNotify
Unauthenticated Cross Site Scripting (XSS) in Smart Forms <= 2.6.104 versions.
🎖@cveNotify
Patchstack
Cross Site Scripting (XSS) in WordPress Smart Forms Plugin
Patchstack is the leading open source vulnerability research organization. Find information and protection for all WordPress and Drupal security issues.
🚨 CVE-2026-32575
Unauthenticated Cross Site Scripting (XSS) in SUMO Affiliates Pro <= 11.7.0 versions.
🎖@cveNotify
Unauthenticated Cross Site Scripting (XSS) in SUMO Affiliates Pro <= 11.7.0 versions.
🎖@cveNotify
Patchstack
Cross Site Scripting (XSS) in WordPress SUMO Affiliates Pro Plugin
Patchstack is the leading open source vulnerability research organization. Find information and protection for all WordPress and Drupal security issues.
🚨 CVE-2026-32577
Unauthenticated Cross Site Scripting (XSS) in Frontend File Manager <= 23.6 versions.
🎖@cveNotify
Unauthenticated Cross Site Scripting (XSS) in Frontend File Manager <= 23.6 versions.
🎖@cveNotify
Patchstack
Cross Site Scripting (XSS) in WordPress Frontend File Manager Plugin
Patchstack is the leading open source vulnerability research organization. Find information and protection for all WordPress and Drupal security issues.
🚨 CVE-2026-32578
Subscriber Broken Access Control in ECPay Ecommerce for WooCommerce <= 1.1.2606090 versions.
🎖@cveNotify
Subscriber Broken Access Control in ECPay Ecommerce for WooCommerce <= 1.1.2606090 versions.
🎖@cveNotify
Patchstack
Broken Access Control in WordPress ECPay Ecommerce for WooCommerce Plugin
Patchstack is the leading open source vulnerability research organization. Find information and protection for all WordPress and Drupal security issues.
🚨 CVE-2026-32579
Unauthenticated Arbitrary File Upload in Kognetiks Chatbot for WordPress <= 2.4.9 versions.
🎖@cveNotify
Unauthenticated Arbitrary File Upload in Kognetiks Chatbot for WordPress <= 2.4.9 versions.
🎖@cveNotify
Patchstack
Arbitrary File Upload in WordPress Kognetiks Chatbot for WordPress Plugin
Patchstack is the leading open source vulnerability research organization. Find information and protection for all WordPress and Drupal security issues.
🚨 CVE-2026-39719
Unauthenticated Server Side Request Forgery (SSRF) in PDF Smart Viewer for Elementor <= 1.0.4 versions.
🎖@cveNotify
Unauthenticated Server Side Request Forgery (SSRF) in PDF Smart Viewer for Elementor <= 1.0.4 versions.
🎖@cveNotify
Patchstack
Server Side Request Forgery (SSRF) in WordPress PDF Smart Viewer for Elementor Plugin
Patchstack is the leading open source vulnerability research organization. Find information and protection for all WordPress and Drupal security issues.
🚨 CVE-2026-39720
Unauthenticated Cross Site Scripting (XSS) in Mapster WP Maps <= 2.0.4 versions.
🎖@cveNotify
Unauthenticated Cross Site Scripting (XSS) in Mapster WP Maps <= 2.0.4 versions.
🎖@cveNotify
Patchstack
Cross Site Scripting (XSS) in WordPress Mapster WP Maps Plugin
Patchstack is the leading open source vulnerability research organization. Find information and protection for all WordPress and Drupal security issues.
🚨 CVE-2026-39724
Unauthenticated Cross Site Scripting (XSS) in HTTP Requests Manager <= 1.3.11 versions.
🎖@cveNotify
Unauthenticated Cross Site Scripting (XSS) in HTTP Requests Manager <= 1.3.11 versions.
🎖@cveNotify
Patchstack
Cross Site Scripting (XSS) in WordPress HTTP Requests Manager Plugin
Patchstack is the leading open source vulnerability research organization. Find information and protection for all WordPress and Drupal security issues.
🚨 CVE-2026-39725
Contributor Remote Code Execution (RCE) in Content Visibility for Divi Builder <= 5.03 versions.
🎖@cveNotify
Contributor Remote Code Execution (RCE) in Content Visibility for Divi Builder <= 5.03 versions.
🎖@cveNotify
Patchstack
Remote Code Execution (RCE) in WordPress Content Visibility for Divi Builder Plugin
Patchstack is the leading open source vulnerability research organization. Find information and protection for all WordPress and Drupal security issues.
🚨 CVE-2026-39726
Unauthenticated Cross Site Scripting (XSS) in Lumise Product Designer <= 2.1.1 versions.
🎖@cveNotify
Unauthenticated Cross Site Scripting (XSS) in Lumise Product Designer <= 2.1.1 versions.
🎖@cveNotify
Patchstack
Cross Site Scripting (XSS) in WordPress Lumise Product Designer Plugin
Patchstack is the leading open source vulnerability research organization. Find information and protection for all WordPress and Drupal security issues.
🚨 CVE-2026-39727
Subscriber Cross Site Scripting (XSS) in WC Fields Factory <= 4.1.12 versions.
🎖@cveNotify
Subscriber Cross Site Scripting (XSS) in WC Fields Factory <= 4.1.12 versions.
🎖@cveNotify
Patchstack
Cross Site Scripting (XSS) in WordPress WC Fields Factory Plugin
Patchstack is the leading open source vulnerability research organization. Find information and protection for all WordPress and Drupal security issues.
🚨 CVE-2026-39728
Unauthenticated Server Side Request Forgery (SSRF) in Instapage Plugin <= 3.7.2 versions.
🎖@cveNotify
Unauthenticated Server Side Request Forgery (SSRF) in Instapage Plugin <= 3.7.2 versions.
🎖@cveNotify
Patchstack
Server Side Request Forgery (SSRF) in WordPress Instapage Plugin Plugin
Patchstack is the leading open source vulnerability research organization. Find information and protection for all WordPress and Drupal security issues.
🚨 CVE-2026-39729
Unauthenticated Sensitive Data Exposure in Edwiser Bridge <= 4.3.4 versions.
🎖@cveNotify
Unauthenticated Sensitive Data Exposure in Edwiser Bridge <= 4.3.4 versions.
🎖@cveNotify
Patchstack
Sensitive Data Exposure in WordPress Edwiser Bridge Plugin
Patchstack is the leading open source vulnerability research organization. Find information and protection for all WordPress and Drupal security issues.
🚨 CVE-2026-39731
Unauthenticated Cross Site Scripting (XSS) in Database for CF7 <= 1.2.6 versions.
🎖@cveNotify
Unauthenticated Cross Site Scripting (XSS) in Database for CF7 <= 1.2.6 versions.
🎖@cveNotify
Patchstack
Cross Site Scripting (XSS) in WordPress Database for CF7 Plugin
Patchstack is the leading open source vulnerability research organization. Find information and protection for all WordPress and Drupal security issues.
🚨 CVE-2026-39745
Unauthenticated Cross Site Scripting (XSS) in Contact Form to DB by BestWebSoft <= 1.7.6 versions.
🎖@cveNotify
Unauthenticated Cross Site Scripting (XSS) in Contact Form to DB by BestWebSoft <= 1.7.6 versions.
🎖@cveNotify
Patchstack
Cross Site Scripting (XSS) in WordPress Contact Form to DB by BestWebSoft Plugin
Patchstack is the leading open source vulnerability research organization. Find information and protection for all WordPress and Drupal security issues.