Recent Advisories

Severity ID Title Vendor Product Date Type
HIGH 7.1 CVE-2026-23970

WordPress Redirection for Contact Form 7 plugin <= 3.2.8 - Cross Site Scripting (XSS) vulnerability_CVE-2026-23970

Unauthenticated Cross Site Scripting (XSS) in Redirection for Contact Form 7

Themeisle Redirection for Contact Form 7 n/a CVE
HIGH 7.1 CVE-2025-68872

WordPress Eli’s WordCents adSense Widget with Analytics plugin <= 1.3.03.27 - Reflected Cross Site Scripting (XSS) vulnerability_CVE-2025-68872

Unauthenticated Cross Site Scripting (XSS) in Eli's WordCents adSense Widget with Analytics

Eli Eli's WordCents adSense Widget with Analytics n/a CVE
HIGH 7.1 CVE-2025-68851

WordPress Okay Toolkit plugin <= 2.3 - Reflected Cross Site Scripting (XSS) vulnerability_CVE-2025-68851

Unauthenticated Cross Site Scripting (XSS) in Okay Toolkit

ArrayHQ Okay Toolkit n/a CVE
HIGH 7.1 CVE-2025-68840

WordPress iRobots.txt SEO plugin <= 1.1.2 - Reflected Cross Site Scripting (XSS) vulnerability_CVE-2025-68840

Unauthenticated Cross Site Scripting (XSS) in iRobots.txt SEO

markbeljaars iRobots.txt SEO n/a CVE
HIGH 7.5 CVE-2025-59133

WordPress Projectopia plugin <= 5.1.25.2 - Insecure Direct Object References (IDOR) vulnerability_CVE-2025-59133

Custom role Insecure Direct Object References (IDOR) in Projectopia

Projectopia Projectopia n/a CVE
HIGH 8.8 MS:CVE-2026-12007

Chromium: CVE-2026-12007 Use after free  Core_MS:CVE-2026-12007

This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see Google Chrome Rel...

N/A N/A MSCVE
HIGH 8.3 MS:CVE-2026-12008

Chromium: CVE-2026-12008 Use after free  DigitalCredentials_MS:CVE-2026-12008

This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see Google Chrome Rel...

N/A N/A MSCVE
HIGH 8.3 MS:CVE-2026-12009

Chromium: CVE-2026-12009 Insufficient validation of untrusted input  Accessibility_MS:CVE-2026-12009

This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see Google Chrome Rel...

N/A N/A MSCVE
HIGH 8.3 MS:CVE-2026-12010

Chromium: CVE-2026-12010 Heap buffer overflow  GPU_MS:CVE-2026-12010

This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see Google Chrome Rel...

N/A N/A MSCVE
HIGH 8.3 MS:CVE-2026-12011

Chromium: CVE-2026-12011 Use after free  WebMIDI_MS:CVE-2026-12011

This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see Google Chrome Rel...

N/A N/A MSCVE