Recent Advisories

Severity ID Title Vendor Product Date Type
HIGH 7.6 CVE-2026-57631

WordPress Popup box plugin <= 6.0.1 - SQL Injection vulnerability_CVE-2026-57631

Administrator SQL Injection in Popup box

Ays Pro Popup box n/a CVE
HIGH 7.6 CVE-2026-57628

WordPress WP All Import plugin <= 4.0.1 - SQL Injection vulnerability_CVE-2026-57628

Administrator SQL Injection in WP All Import

WP All Import WP All Import n/a CVE
HIGH 8.7 CVE-2026-57527

ZAP ViewState Add-on Insecure Deserialization via JSFViewState.decode()_CVE-2026-57527

Zed Attack Proxy (ZAP) ViewState add-on before version 4 contains an insecure deserialization vulnerability that allows attackers who control a pro...

zaproxy zap-extensions CVE
HIGH 7.1 CVE-2026-57325

WordPress NanoMag theme <= 1.8 - Cross Site Scripting (XSS) vulnerability_CVE-2026-57325

Unauthenticated Cross Site Scripting (XSS) in NanoMag

Jellywp NanoMag n/a CVE
HIGH 7.1 CVE-2026-57322

WordPress weMail plugin <= 2.1.2 - Reflected Cross Site Scripting (XSS) vulnerability_CVE-2026-57322

Unauthenticated Cross Site Scripting (XSS) in weMail

weDevs weMail n/a CVE
HIGH 7.1 CVE-2026-57321

WordPress H5P plugin <= 1.17.7 - Arbitrary File Deletion vulnerability_CVE-2026-57321

Contributor Arbitrary File Deletion in H5P

icc0rz H5P n/a CVE
HIGH 7.1 CVE-2026-57319

WordPress FOX plugin <= 1.4.8 - Cross Site Scripting (XSS) vulnerability_CVE-2026-57319

Unauthenticated Cross Site Scripting (XSS) in FOX

RealMag777 FOX n/a CVE
HIGH 7.1 CVE-2026-57317

WordPress Simply Schedule Appointments plugin <= 1.6.12.2 - Cross Site Scripting (XSS) vulnerability_CVE-2026-57317

Unauthenticated Cross Site Scripting (XSS) in Simply Schedule Appointments

NSquared Simply Schedule Appointments n/a CVE
HIGH 8.5 CVE-2026-57315

WordPress Blocksy Companion Pro plugin <= 2.1.45 - Remote Code Execution (RCE) vulnerability_CVE-2026-57315

Contributor Remote Code Execution (RCE) in Blocksy Companion Pro

Creative Themes Blocksy Companion Pro n/a CVE
HIGH 7.1 CVE-2026-57314

WordPress SureCart plugin <= 4.3.2 - Reflected Cross Site Scripting (XSS) vulnerability_CVE-2026-57314

Unauthenticated Cross Site Scripting (XSS) in SureCart

SureCart SureCart n/a CVE