Recent Advisories

Severity ID Title Vendor Product Date Type
HIGH 7.5 CVE-2026-39490

WordPress JupiterX Core plugin <= 4.14.1 - Broken Access Control vulnerability_CVE-2026-39490

Unauthenticated Broken Access Control in JupiterX Core

artbees JupiterX Core n/a CVE
HIGH 7.1 CVE-2026-39437

WordPress Min Max Step Quantity Limits Manager for WooCommerce plugin <= 5.2.2 - Reflected Cross Site Scripting (XSS) vulnerability_CVE-2026-39437

Unauthenticated Cross Site Scripting (XSS) in Min Max Step Quantity Limits Manager for WooCommerce

WPFactory Min Max Step Quantity Limits Manager for WooCommerce n/a CVE
HIGH 7.1 CVE-2026-10825

Improper JSON Input Validation in WebSocket API Leads to Denial of Service_CVE-2026-10825

A denial-of-service vulnerability exists in the WebSocket API due to insufficient validation and handling of JSON-based requests. A low-privileged ...

Moxa NPort 6000-G2 Series 1.0 CVE
HIGH 7.5 CVE-2025-68045

WordPress WP Event SOlution plugin <= 4.1.12 - Broken Access Control vulnerability_CVE-2025-68045

Unauthenticated Broken Access Control in WP Event SOlution

Arraytics WP Event SOlution n/a CVE
HIGH 8.5 B1BB8CF9-0BFD-

Exploit for UNIX Symbolic Link Following in Litespeedtech Litespeed_Cpanel_Plugin_B1BB8CF9-0BFD-571E-8152-2D53A8245793

CVE-2026-54420 Mitigation Toolkit Defensive remediation, auditing, and verification toolkit for CVE-2026-54420 affecting LiteSpeed cPanel Plugin in...

N/A N/A GITHUBEXPLOIT
HIGH 8.8 CVE-2026-8444

WP Review Slider Pro <= 12.6.8 - Authenticated (Subscriber+) SQL Injection via 'curselrevs' Parameter_CVE-2026-8444

The WP Review Slider Pro plugin for WordPress is vulnerable to SQL Injection via the 'curselrevs[]' parameter of the wpfb_find_reviews AJAX action ...

https://wpreviewslider.com/ WP Review Slider Pro CVE
HIGH 8.7 30AECF2C-E55B-

Exploit for CVE-2026-20262_30AECF2C-E55B-530A-B3C5-DC776BD957D4

cve-id ⚡ Simple Usage Use this project only in safe and authorized environments such as: - Local virtual machines - Docker containers - Isolated l...

N/A N/A GITHUBEXPLOIT
HIGH 8.7 EB7819E4-5D08-

Exploit for UNIX Symbolic Link Following in Litespeedtech Litespeed_Cpanel_Plugin_EB7819E4-5D08-5B2B-B382-7EDE03F6667E

cve-id ⚡ Simple Usage Use this project only in safe and authorized environments such as: - Local virtual machines - Docker containers - Isolated l...

N/A N/A GITHUBEXPLOIT
HIGH 8.5 THN:5B94477ED5E...

CISA Flags LiteSpeed cPanel Plugin Flaw Exploited for Root Privilege Escalation_THN:5B94477ED5EC6723600F72BC204673F2

![](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhweJrEaMuAEZCtL6h2H2XMxWOMGzKSktYq9kDvwXAGvIAt39-gz3irXruUA0KVSSupFdIh13o2F5quHfout0...

N/A N/A THN
HIGH 8.8 CVE-2026-8443

WP Review Slider Pro <= 12.6.8 - Authenticated (Subscriber+) SQL Injection via 'stypes' Parameter_CVE-2026-8443

The WP Review Slider Pro plugin for WordPress is vulnerable to SQL Injection via the 'stypes' and 'slocations' parameters of the wppro_get_overall_...

https://wpreviewslider.com/ WP Review Slider Pro CVE