Recent Advisories

Severity ID Title Vendor Product Date Type
HIGH 8.5 CVE-2026-57653

WordPress WP Job Portal plugin <= 2.5.2 - SQL Injection vulnerability_CVE-2026-57653

Contributor SQL Injection in WP Job Portal

wpjobportal WP Job Portal n/a CVE
HIGH 7.5 CVE-2026-57647

WordPress Panorama Viewer – 360 Degree Image + Video Viewer plugin <= 1.6.1 - Local File Inclusion vulnerability_CVE-2026-57647

Contributor Local File Inclusion in Panorama Viewer – 360 Degree Image + Video Viewer

bPlugins Panorama Viewer – 360 Degree Image + Video Viewer n/a CVE
HIGH 8.1 CVE-2026-57645

WordPress Newsletters plugin <= 4.13 - Broken Access Control vulnerability_CVE-2026-57645

newsletters_subscribers Broken Access Control in Newsletters

Tribulant Software Newsletters n/a CVE
HIGH 8.5 CVE-2026-57644

WordPress Restaurant Menu by MotoPress plugin <= 2.4.10 - SQL Injection vulnerability_CVE-2026-57644

Contributor SQL Injection in Restaurant Menu by MotoPress

jetmonsters Restaurant Menu by MotoPress n/a CVE
HIGH 8.5 CVE-2026-57643

WordPress WP Post Author plugin <= 3.9.1 - SQL Injection vulnerability_CVE-2026-57643

Contributor SQL Injection in WP Post Author

AF themes WP Post Author n/a CVE
HIGH 8.5 CVE-2026-57642

WordPress Gallery plugin <= 4.7.8 - SQL Injection vulnerability_CVE-2026-57642

Contributor SQL Injection in Gallery

bestwebsoft Gallery n/a CVE
HIGH 8.5 CVE-2026-57636

WordPress wpForo Forum plugin <= 3.0.9 - SQL Injection vulnerability_CVE-2026-57636

Contributor SQL Injection in wpForo Forum

Tomdever wpForo Forum n/a CVE
HIGH 7.6 CVE-2026-57631

WordPress Popup box plugin <= 6.0.1 - SQL Injection vulnerability_CVE-2026-57631

Administrator SQL Injection in Popup box

Ays Pro Popup box n/a CVE
HIGH 7.6 CVE-2026-57628

WordPress WP All Import plugin <= 4.0.1 - SQL Injection vulnerability_CVE-2026-57628

Administrator SQL Injection in WP All Import

WP All Import WP All Import n/a CVE
HIGH 8.7 CVE-2026-57527

ZAP ViewState Add-on Insecure Deserialization via JSFViewState.decode()_CVE-2026-57527

Zed Attack Proxy (ZAP) ViewState add-on before version 4 contains an insecure deserialization vulnerability that allows attackers who control a pro...

zaproxy zap-extensions CVE