🟠 CVE-2026-101161 - High (7.5)

The WP Ultimate Review WordPress plugin before 2.4.4 does not prevent unauthenticated users from ...

https://www.thehackerwire.com/vulnerability/CVE-2026-101161/

#infosec #cybersecurity #CVE #vulnerability #security #patchstack

🟠 CVE-2026-101160 - High (7.5)

The WP Ultimate Review WordPress plugin before 2.4.4 does not validate that a submitted review ra...

https://www.thehackerwire.com/vulnerability/CVE-2026-101160/

#infosec #cybersecurity #CVE #vulnerability #security #patchstack

🟠 CVE-2026-101159 - High (7.5)

The WP Ultimate Review WordPress plugin before 2.4.4 does not properly sanitise and escape review...

https://www.thehackerwire.com/vulnerability/CVE-2026-101159/

#infosec #cybersecurity #CVE #vulnerability #security #patchstack

🟠 CVE-2026-103514 - High (7.5)

The WP 2FA WordPress plugin before 4.1.0 does not invalidate a time-based one-time passcode once...

https://www.thehackerwire.com/vulnerability/CVE-2026-103514/

#infosec #cybersecurity #CVE #vulnerability #security #patchstack

🟠 CVE-2026-91078 - High (8.2)

The TillKit WordPress plugin before 1.0.5 does not require the hard-coded, publicly known PIN of ...

https://www.thehackerwire.com/vulnerability/CVE-2026-91078/

#infosec #cybersecurity #CVE #vulnerability #security #patchstack

🟠 CVE-2026-89236 - High (8.6)

The SaveTo Wishlist Lite WordPress plugin before 1.1.5 does not sanitise and escape parameters b...

https://www.thehackerwire.com/vulnerability/CVE-2026-89236/

#infosec #cybersecurity #CVE #vulnerability #security #patchstack

🟠 CVE-2026-88783 - High (8.8)

The Kubio AI Page Builder WordPress plugin before 2.9.3 does not limit its widening of the allowe...

https://www.thehackerwire.com/vulnerability/CVE-2026-88783/

#infosec #cybersecurity #CVE #vulnerability #security #patchstack

🟠 CVE-2026-96451 - High (8.8)

Authorization Bypass Through User-Controlled Key vulnerability in Ultimate Member Ultimate Member...

https://www.thehackerwire.com/vulnerability/CVE-2026-96451/

#infosec #cybersecurity #CVE #vulnerability #security #patchstack

🟠 CVE-2026-101923 - High (8.1)

The Photo Reviews for WooCommerce plugin for WordPress is vulnerable to Arbitrary Content Deletio...

https://www.thehackerwire.com/vulnerability/CVE-2026-101923/

#infosec #cybersecurity #CVE #vulnerability #security #patchstack

🟠 CVE-2026-103913 - High (7.5)

The GeoDirectory plugin for WordPress is vulnerable to SQL Injection via the stored latitude/long...

https://www.thehackerwire.com/vulnerability/CVE-2026-103913/

#infosec #cybersecurity #CVE #vulnerability #security #patchstack

🟠 CVE-2026-97337 - High (7.5)

The Simple Membership plugin for WordPress is vulnerable to unauthorized modification of data and...

https://www.thehackerwire.com/vulnerability/CVE-2026-97337/

#infosec #cybersecurity #CVE #vulnerability #security #patchstack

🟠 CVE-2026-18443 - High (8.8)

The Smart Manager – Advanced WooCommerce Bulk Edit & Inventory Management plugin for WordPress ...

https://www.thehackerwire.com/vulnerability/CVE-2026-18443/

#infosec #cybersecurity #CVE #vulnerability #security #patchstack

🔴 CVE-2026-87115 - Critical (9.1)

The VikAppointments Services Booking Calendar plugin for WordPress is vulnerable to arbitrary fil...

https://www.thehackerwire.com/vulnerability/CVE-2026-87115/

#infosec #cybersecurity #CVE #vulnerability #security #patchstack

🟠 CVE-2026-75028 - High (7.5)

The WPCafe – Restaurant Menu, Online Food Ordering & Table Booking System plugin for WordPress ...

https://www.thehackerwire.com/vulnerability/CVE-2026-75028/

#infosec #cybersecurity #CVE #vulnerability #security #patchstack

🟠 CVE-2026-96267 - High (7.5)

The WP Visitor Statistics (Real Time Traffic) plugin for WordPress is vulnerable to generic SQL I...

https://www.thehackerwire.com/vulnerability/CVE-2026-96267/

#infosec #cybersecurity #CVE #vulnerability #security #patchstack

🟠 CVE-2026-94505 - High (8.1)

The Nelio Content – Editorial Calendar & Social Media Auto-Posting plugin for WordPress is vuln...

https://www.thehackerwire.com/vulnerability/CVE-2026-94505/

#infosec #cybersecurity #CVE #vulnerability #security #patchstack

🔴 CVE-2026-92084 - Critical (9.1)

The The Beaver Builder Page Builder – Drag and Drop Website Builder plugin for WordPress is vul...

https://www.thehackerwire.com/vulnerability/CVE-2026-92084/

#infosec #cybersecurity #CVE #vulnerability #security #patchstack

🔴 CVE-2026-105105 - Critical (9.8)

CWE-306: Missing Authentication for Critical Function in the ait.core.server telemetry and comman...

https://www.thehackerwire.com/vulnerability/CVE-2026-105105/

#infosec #cybersecurity #CVE #vulnerability #security #patchstack

🟠 CVE-2026-105115 - High (8.6)

OpenAM before 16.1.3 contains an unauthenticated arbitrary class instantiation vulnerability in t...

https://www.thehackerwire.com/vulnerability/CVE-2026-105115/

#infosec #cybersecurity #CVE #vulnerability #security #patchstack

🟠 CVE-2026-103065 - High (8.2)

Improper Validation of Specified Quantity in Input vulnerability in Themeum Kirki kirki allows Ac...

https://www.thehackerwire.com/vulnerability/CVE-2026-103065/

#infosec #cybersecurity #CVE #vulnerability #security #patchstack