CVE-2026-109232 The Salon Booking System – Appointment Booking for Salons, Barbershops & Spas plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'sln[<checko… cve.org/CVERecord?id=CVE-202…

CVE-2026-89051 The WP Ghost (Hide My WP Ghost) – Security & Firewall plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'replaceHeadersAndTags' function in ve… cve.org/CVERecord?id=CVE-202…

CVE-2026-111122 The SiteOrigin CSS plugin for WordPress is vulnerable to Stored DOM-Based Cross-Site Scripting via the 'href' parameter in all versions up to, and including, 1.6.7 … cve.org/CVERecord?id=CVE-202…

CVE-2026-107764 The SiteOrigin CSS plugin for WordPress is vulnerable to Stored DOM-Based Cross-Site Scripting via the 'url (comment_author_url)' parameter in all versions up to, a… cve.org/CVERecord?id=CVE-202…

CVE-2026-109513 The NotificationX – FOMO, Live Sales Notification, WooCommerce Sales Popup, GDPR, Social Proof, Announcement Banner & Floating Notification Bar plugin for WordPress… cve.org/CVERecord?id=CVE-202…

CVE-2026-104932 The Search Regex plugin for WordPress is vulnerable to PHP Object Injection in version 3.5 via deserialization of untrusted input in the replace_all function. This … cve.org/CVERecord?id=CVE-202…

CVE-2026-85659 The PilotPress plugin for WordPress is vulnerable to Privilege Escalation via Account Takeover in all versions up to, and including, 2.0.43. The vulnerability exists … cve.org/CVERecord?id=CVE-202…

CVE-2026-88963 The Tutor LMS – eLearning and online course solution plugin for WordPress is vulnerable to DOM-Based Cross-Site Scripting via the 'redirect_url' parameter in versions… cve.org/CVERecord?id=CVE-202…

CVE-2026-100186 The User Profile Builder – Beautiful User Registration Forms, User Profiles & User Role Editor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via… cve.org/CVERecord?id=CVE-202…

CVE-2026-91833 The WX Subscribe 微信支付付费订阅 WordPress plugin through 1.2.1 does not sanitise and escape a parameter before using it in a SQL statement, allowing unauthenticated attack… cve.org/CVERecord?id=CVE-202…

CVE-2026-91830 The Subscribe to Comments WordPress plugin before 2.3.3 does not sign or validate a cookie it trusts to identify a commenter, allowing unauthenticated attackers to di… cve.org/CVERecord?id=CVE-202…

CVE-2026-92427 The Coinsnap Bitcoin Crowdfunding WordPress plugin through 1.2.0 does not restrict access to the secret used to authenticate its payment gateway webhook, disclosing i… cve.org/CVERecord?id=CVE-202…

CVE-2026-74923 The Document Gallery WordPress plugin through 5.1.1 does not perform any capability or ownership check when generating a gallery on demand, allowing unauthenticated u… cve.org/CVERecord?id=CVE-202…

CVE-2026-103696 The Mobile builder WordPress plugin through 1.4.2 does not sanitise and escape a parameter before using it in a SQL statement, allowing unauthenticated users to per… cve.org/CVERecord?id=CVE-202…

CVE-2026-105973 The Visual Form Builder WordPress plugin through 3.1 does not perform authorization or nonce checks when reordering form fields, allowing any authenticated user (Su… cve.org/CVERecord?id=CVE-202…

CVE-2026-105974 The Visual Form Builder WordPress plugin through 3.1 does not perform an authorization check before displaying recent form submission data in a dashboard widget, al… cve.org/CVERecord?id=CVE-202…

CVE-2026-109982 The MB Custom Post Types & Custom Taxonomies WordPress plugin before 2.12.2 does not perform a capability check or validate a nonce on its migration actions, allowi… cve.org/CVERecord?id=CVE-202…

CVE-2026-110012 The Salon Booking System WordPress plugin before 10.31.3 does not restrict several of its booking REST API routes to users with the appropriate capability, allowin… cve.org/CVERecord?id=CVE-202…

CVE-2026-110013 The Salon Booking System WordPress plugin before 10.31.9 does not generate its booking-API access tokens from a secure random source, instead deriving them from a … cve.org/CVERecord?id=CVE-202…

CVE-2026-110014 The Salon Booking System WordPress plugin before 10.31.9 does not properly check authorization before creating a booking and trusts a caller-supplied user identifi… cve.org/CVERecord?id=CVE-202…