Recent Advisories

Severity ID Title Vendor Product Date Type
HIGH 7.5 CVE-2026-52696

WordPress JetBlog plugin <= 2.4.8 - Sensitive Data Exposure vulnerability_CVE-2026-52696

Unauthenticated Sensitive Data Exposure in JetBlog

Jetimpex Inc. JetBlog n/a CVE
HIGH 7.1 CVE-2026-49778

WordPress WPFunnels Pro plugin <= 2.9.4 - Cross Site Scripting (XSS) vulnerability_CVE-2026-49778

Unauthenticated Cross Site Scripting (XSS) in WPFunnels Pro

WPFunnels WPFunnels Pro n/a CVE
CRITICAL 9.8 CVE-2026-49767

WordPress wpForo Forum plugin <= 3.1.0 - Broken Authentication vulnerability_CVE-2026-49767

Unauthenticated Broken Authentication in wpForo Forum

Tomdever wpForo Forum n/a CVE
CRITICAL 9.8 CVE-2026-49107

WordPress Thrive Apprentice plugin < 10.8.10.2 - PHP Object Injection vulnerability_CVE-2026-49107

Unauthenticated PHP Object Injection in Thrive Apprentice < 10.8.10.2 versions.

Thrive Themes Thrive Apprentice n/a CVE
CRITICAL 9.3 CVE-2026-49084

WordPress JetEngine plugin < 3.8.9.1 - SQL Injection vulnerability_CVE-2026-49084

Unauthenticated SQL Injection in JetEngine < 3.8.9.1 versions.

Jetimpex Inc. JetEngine n/a CVE
HIGH 8.2 CVE-2026-49081

WordPress User Registration Stripe plugin <= 1.3.12 - Broken Access Control vulnerability_CVE-2026-49081

Unauthenticated Broken Access Control in User Registration Stripe

ThemeGrill User Registration Stripe n/a CVE
CRITICAL 9.3 CVE-2026-49079

WordPress JetSearch plugin <= 3.5.17 - SQL Injection vulnerability_CVE-2026-49079

Unauthenticated SQL Injection in JetSearch

Jetimpex Inc. JetSearch n/a CVE
CRITICAL 9.3 CVE-2026-49076

WordPress JetEngine plugin <= 3.8.9.1 - SQL Injection vulnerability_CVE-2026-49076

Unauthenticated SQL Injection in JetEngine

Jetimpex Inc. JetEngine n/a CVE
CRITICAL 9.8 CVE-2026-49075

WordPress JetEngine plugin <= 3.8.9.1 - PHP Object Injection vulnerability_CVE-2026-49075

Contributor PHP Object Injection in JetEngine

Jetimpex Inc. JetEngine n/a CVE
HIGH 7.1 CVE-2026-49074

WordPress JetEngine plugin <= 3.8.9.1 - Cross Site Scripting (XSS) vulnerability_CVE-2026-49074

Unauthenticated Cross Site Scripting (XSS) in JetEngine

Jetimpex Inc. JetEngine n/a CVE