Threat Entry Updated 2026-07-13

CVE-2026-61975 - JetReviews Plugin

Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in Crocoblock JetReviews jet-reviews allows Retrieve Embedded Sensitive Data.This issue affects JetReviews: from n/a through

PLUGIN JetReviews

CVE-2026-61975

MEDIUM CVSS 5.3 2026-07-13

Risk Score

Open Full Technical Breakdown

Threat Entry Updated 2026-07-13

CVE-2026-59523 - Simply Schedule Appointments Plugin

Missing Authorization vulnerability in NSquared Simply Schedule Appointments simply-schedule-appointments allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Simply Schedule Appointments: from n/a through

PLUGIN Simply Schedule Appointments

CVE-2026-59523

MEDIUM CVSS 6.5 2026-07-13

Risk Score

Open Full Technical Breakdown

Threat Entry Updated 2026-07-13

CVE-2026-61968 - myCred Plugin

Missing Authorization vulnerability in Saad Iqbal myCred mycred allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects myCred: from n/a through

PLUGIN myCred

CVE-2026-61968

MEDIUM CVSS 5.4 2026-07-13

Risk Score

Open Full Technical Breakdown

Threat Entry Updated 2026-07-13

CVE-2026-61958 - License Manager for WooCommerce Plugin

Missing Authorization vulnerability in Saad Iqbal License Manager for WooCommerce license-manager-for-woocommerce allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects License Manager for WooCommerce: from n/a through

PLUGIN License Manager for WooCommerce

CVE-2026-61958

MEDIUM CVSS 5.4 2026-07-13

Risk Score

Open Full Technical Breakdown

Threat Entry Updated 2026-07-13

CVE-2026-61970 - Auto Featured Image (Auto Post Thumbnail Plugin

Server-Side Request Forgery (SSRF) vulnerability in Themeisle Auto Featured Image (Auto Post Thumbnail) auto-post-thumbnail allows Server Side Request Forgery.This issue affects Auto Featured Image (Auto Post Thumbnail): from n/a through

PLUGIN Auto Featured Image (Auto Post Thumbnail

CVE-2026-61970

MEDIUM CVSS 4.9 2026-07-13

Risk Score

Open Full Technical Breakdown

Threat Entry Updated 2026-07-13

CVE-2026-61952 - WooCommerce Bulk Edit Products – WP Sheet Editor Plugin

Missing Authorization vulnerability in Jose Vega WooCommerce Bulk Edit Products – WP Sheet Editor woo-bulk-edit-products allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WooCommerce Bulk Edit Products – WP Sheet Editor: from n/a through

PLUGIN WooCommerce Bulk Edit Products – WP Sheet Editor

CVE-2026-61952

MEDIUM CVSS 4.9 2026-07-13

Risk Score

Open Full Technical Breakdown

Threat Entry Updated 2026-07-13

CVE-2026-57812 - Simply Schedule Appointments Plugin

Missing Authorization vulnerability in NSquared Simply Schedule Appointments simply-schedule-appointments allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Simply Schedule Appointments: from n/a through

PLUGIN Simply Schedule Appointments

CVE-2026-57812

MEDIUM CVSS 6.5 2026-07-13

Risk Score

Open Full Technical Breakdown

Threat Entry Updated 2026-07-13

CVE-2026-57797 - EduMall Plugin

Missing Authorization vulnerability in ThemeMove EduMall edumall allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects EduMall: from n/a through

PLUGIN EduMall

CVE-2026-57797

MEDIUM CVSS 4.3 2026-07-13

Risk Score

Open Full Technical Breakdown

Threat Entry Updated 2026-07-13

CVE-2026-57783 - Speaker Plugin

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in merkulove Speaker speaker allows Stored XSS.This issue affects Speaker: from n/a through

PLUGIN Speaker

CVE-2026-57783

MEDIUM CVSS 6.5 2026-07-13

Risk Score

Open Full Technical Breakdown

Threat Entry Updated 2026-07-13

CVE-2026-57780 - Envision Page Builder Plugin

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Plugin Envision Envision Page Builder envision-page-builder allows DOM-Based XSS.This issue affects Envision Page Builder: from n/a through

PLUGIN Envision Page Builder

CVE-2026-57780

MEDIUM CVSS 6.5 2026-07-13

Risk Score

Open Full Technical Breakdown

Threat Entry Updated 2026-07-13

CVE-2026-57782 - Universal Clocks Plugin

Missing Authorization vulnerability in PressTigers Universal Clocks universal-clocks allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Universal Clocks: from n/a through

PLUGIN Universal Clocks

CVE-2026-57782

MEDIUM CVSS 5.3 2026-07-13

Risk Score

Open Full Technical Breakdown

Threat Entry Updated 2026-07-13

CVE-2026-57781 - MeetingHub Plugin

Missing Authorization vulnerability in Sovlix MeetingHub meetinghub allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects MeetingHub: from n/a through

PLUGIN MeetingHub

CVE-2026-57781

MEDIUM CVSS 5.3 2026-07-13

Risk Score

Open Full Technical Breakdown

Threat Entry Updated 2026-07-13

CVE-2026-57779 - Fascinate Plugin

Missing Authorization vulnerability in themebeez Fascinate fascinate allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Fascinate: from n/a through

PLUGIN Fascinate

CVE-2026-57779

MEDIUM CVSS 5.3 2026-07-13

Risk Score

Open Full Technical Breakdown

Threat Entry Updated 2026-07-13

CVE-2026-57778 - Booking calendar, Appointment Booking System Plugin

Missing Authorization vulnerability in wpdevart Booking calendar, Appointment Booking System booking-calendar allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Booking calendar, Appointment Booking System: from n/a through

PLUGIN Booking calendar, Appointment Booking System

CVE-2026-57778

MEDIUM CVSS 5.3 2026-07-13

Risk Score

Open Full Technical Breakdown

Threat Entry Updated 2026-07-13

CVE-2026-57776 - VW Wedding Plugin

Missing Authorization vulnerability in vowelweb VW Wedding vw-wedding allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects VW Wedding: from n/a through

PLUGIN VW Wedding

CVE-2026-57776

MEDIUM CVSS 5.3 2026-07-13

Risk Score

Open Full Technical Breakdown

Threat Entry Updated 2026-07-13

CVE-2026-57774 - VW Food Corner Plugin

Missing Authorization vulnerability in vowelweb VW Food Corner vw-food-corner allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects VW Food Corner: from n/a through

PLUGIN VW Food Corner

CVE-2026-57774

MEDIUM CVSS 5.3 2026-07-13

Risk Score

Open Full Technical Breakdown

Threat Entry Updated 2026-07-13

CVE-2026-57711 - SupportCandy Plugin

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in PSM Plugins SupportCandy supportcandy allows Stored XSS.This issue affects SupportCandy: from n/a through

PLUGIN SupportCandy

CVE-2026-57711

MEDIUM CVSS 6.5 2026-07-13

Risk Score

Open Full Technical Breakdown

Threat Entry Updated 2026-07-13

CVE-2026-57698 - Abandoned Cart Recovery for WooCommerce Plugin

Authentication Bypass Using an Alternate Path or Channel vulnerability in VillaTheme Abandoned Cart Recovery for WooCommerce woo-abandoned-cart-recovery allows Authentication Abuse.This issue affects Abandoned Cart Recovery for WooCommerce: from n/a through

PLUGIN Abandoned Cart Recovery for WooCommerce

CVE-2026-57698

MEDIUM CVSS 6.5 2026-07-13

Risk Score

Open Full Technical Breakdown

Threat Entry Updated 2026-07-13

CVE-2026-57694 - Tutor LMS Plugin

Authorization Bypass Through User-Controlled Key vulnerability in Themeum Tutor LMS tutor allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Tutor LMS: from n/a through

PLUGIN Tutor LMS

CVE-2026-57694

MEDIUM CVSS 6.5 2026-07-13

Risk Score

Open Full Technical Breakdown

Threat Entry Updated 2026-07-13

CVE-2026-57693 - Ad Inserter Plugin

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Spacetime Ad Inserter ad-inserter allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Ad Inserter: from n/a through

PLUGIN Ad Inserter

CVE-2026-57693

MEDIUM CVSS 6.5 2026-07-13

Risk Score

Open Full Technical Breakdown