Stored Cross-Site Scripting in Liaison Site Prober Plugin
Overview of CVE-2026-3569 A stored Cross-Site Scripting vulnerability affects Liaison Site Prober. This flaw has a CVSS score…
Category
CVE
Security vulnerability reports and CVE analysis for WordPress plugins, themes, and core.
HM Books Gallery Missing Authorization Vulnerability
Users can bypass access controls in HM Books Gallery. This missing authorization flaw affects book management features. It…
Critical Arbitrary File Upload in Breeze Cache Plugin
A critical vulnerability hits Breeze Cache, a WordPress caching plugin. CVE-2026-3844 carries a CVSS score of 9.8. This…
Cross-Site Request Forgery in Taqnix Plugin
Overview of CVE-2026-3565 A Cross-Site Request Forgery vulnerability affects the Taqnix plugin. This flaw has a CVSS score…
BetterDocs Missing Authorization Vulnerability
Users can access restricted documentation features in BetterDocs. This missing authorization flaw affects data privacy. It exposes sensitive…
ExactMetrics Missing Authorization Vulnerability
Authenticated users can access unauthorized features in ExactMetrics. This flaw exposes your analytics data. It may allow privilege…
Stored XSS in Gutentor WordPress Plugin
Security researchers found a stored cross-site scripting (XSS) flaw in Gutentor. This WordPress page builder plugin has over…
Missing Authorization in Booking Calendar Contact Form Plugin
Overview of CVE-2026-6810 A missing authorization vulnerability affects the Booking Calendar Contact Form plugin. This flaw has a…
MaxiBlocks Builder Arbitrary File Upload Vulnerability
Attackers can upload malicious files through MaxiBlocks Builder. This puts your WordPress site at risk. You need to…
Critical Arbitrary File Upload in Drag and Drop File Upload for Contact Form 7 Plugin
# CVE-2026-5364: Critical Arbitrary File Upload in Drag and Drop File Upload for Contact Form 7 Plugin (CVSS…