Recent Advisories

Severity ID Title Vendor Product Date Type
CRITICAL 9.8 CVE-2026-49058

WordPress LoginPress Pro plugin <= 6.2.2 - Privilege Escalation vulnerability_CVE-2026-49058

Unauthenticated Privilege Escalation in LoginPress Pro

LoginPress LoginPress Pro n/a CVE
CRITICAL 9.3 CVE-2026-48875

WordPress JetSmartFilters plugin <= 3.8.1 - SQL Injection vulnerability_CVE-2026-48875

Unauthenticated SQL Injection in JetSmartFilters

Jetimpex Inc. JetSmartFilters n/a CVE
CRITICAL 9.8 CVE-2026-42380

WordPress AI Lab theme < 5.4.2 - PHP Object Injection vulnerability_CVE-2026-42380

Unauthenticated PHP Object Injection in AI Lab < 5.4.2 versions.

jwsthemes AI Lab n/a CVE
CRITICAL 9.9 CVE-2026-40783

WordPress Blocksy Companion Pro plugin <= 2.1.37 - Remote Code Execution (RCE) vulnerability_CVE-2026-40783

Contributor Remote Code Execution (RCE) in Blocksy Companion Pro

Creative Themes Blocksy Companion Pro n/a CVE
CRITICAL 9.9 CVE-2026-40749

WordPress Charity Zone theme <= 1.1.1 - Arbitrary File Upload vulnerability_CVE-2026-40749

Subscriber Arbitrary File Upload in Charity Zone

themagnifico52 Charity Zone n/a CVE
CRITICAL 9.9 CVE-2026-40748

WordPress Kids Gift Shop theme <= 0.5.4 - Arbitrary File Upload vulnerability_CVE-2026-40748

Subscriber Arbitrary File Upload in Kids Gift Shop

themagnifico52 Kids Gift Shop n/a CVE
CRITICAL 9.9 CVE-2026-40747

WordPress Ecommerce Zone theme <= 0.9.7 - Arbitrary File Upload vulnerability_CVE-2026-40747

Subscriber Arbitrary File Upload in Ecommerce Zone

themagnifico52 Ecommerce Zone 0.9.7 CVE
CRITICAL 9.9 CVE-2026-40746

WordPress Restaurant Zone theme <= 0.7.8 - Arbitrary File Upload vulnerability_CVE-2026-40746

Subscriber Arbitrary File Upload in Restaurant Zone

themagnifico52 Restaurant Zone n/a CVE
CRITICAL 9.8 CVE-2026-40725

WordPress WooCommerce Product Filters plugin < 2.0.6 - PHP Object Injection vulnerability_CVE-2026-40725

Unauthenticated PHP Object Injection in WooCommerce Product Filters < 2.0.6 versions.

Barn2 Media Ltd WooCommerce Product Filters n/a CVE
CRITICAL 9.3 CVE-2026-39596

WordPress Blocksy Companion Pro plugin < 2.1.29 - SQL Injection vulnerability_CVE-2026-39596

Unauthenticated SQL Injection in Blocksy Companion Pro < 2.1.29 versions.

Creative Themes Blocksy Companion Pro n/a CVE