Recent Advisories

Severity ID Title Vendor Product Date Type
HIGH 8.7 CVE-2026-56122

Winstone Servlet Engine 0.9.10 Path Traversal via HTTP Request Paths_CVE-2026-56122

Winstone Servlet Engine through 0.9.10 contains a path traversal vulnerability that allows unauthenticated attackers to read arbitrary files by sen...

rickknowles Winstone Servlet Container 0.9.10 CVE
HIGH 7.1 CVE-2026-56071

WordPress Forminator plugin <= 1.53.1 - Cross Site Scripting (XSS) vulnerability_CVE-2026-56071

Unauthenticated Cross Site Scripting (XSS) in Forminator

WPMU DEV Forminator n/a CVE
HIGH 7.7 CVE-2026-56054

WordPress JS Help Desk plugin <= 3.1.1 - Arbitrary File Deletion vulnerability_CVE-2026-56054

Subscriber Arbitrary File Deletion in JS Help Desk

Ahmad JS Help Desk n/a CVE
HIGH 8.8 CVE-2026-56053

WordPress EventPrime plugin <= 4.3.4.1 - PHP Object Injection vulnerability_CVE-2026-56053

Subscriber PHP Object Injection in EventPrime

EventPrime EventPrime n/a CVE
HIGH 7.1 CVE-2026-56051

WordPress TablePress plugin <= 3.3.1 - Reflected Cross Site Scripting (XSS) vulnerability_CVE-2026-56051

Unauthenticated Cross Site Scripting (XSS) in TablePress

TablePress TablePress n/a CVE
MEDIUM 6.5 CVE-2026-56050

WordPress PPOM for WooCommerce plugin <= 33.0.18 - Broken Access Control vulnerability_CVE-2026-56050

Improper Access Control vulnerability in Themeisle PPOM for WooCommerce allows Exploiting Incorrectly Configured Access Control Security Levels. T...

Themeisle PPOM for WooCommerce n/a CVE
HIGH 8.5 CVE-2026-56049

WordPress Post Snippets plugin <= 4.0.19 - Remote Code Execution (RCE) vulnerability_CVE-2026-56049

Contributor Remote Code Execution (RCE) in Post Snippets

Post Snippets Post Snippets n/a CVE
HIGH 7.1 CVE-2026-56042

WordPress Advanced Order Export For WooCommerce plugin <= 4.0.9 - Cross Site Scripting (XSS) vulnerability_CVE-2026-56042

Customer Cross Site Scripting (XSS) in Advanced Order Export For WooCommerce

Algolplus Advanced Order Export For WooCommerce n/a CVE
MEDIUM 5.4 CVE-2026-56023

WordPress UPI QR Code Payment Gateway for WooCommerce plugin <= 1.6.2 - Broken Access Control vulnerability_CVE-2026-56023

Customer Broken Access Control in UPI QR Code Payment Gateway for WooCommerce

Knit Pay UPI QR Code Payment Gateway for WooCommerce n/a CVE
HIGH 7.1 CVE-2026-56014

WordPress Master Slider plugin <= 3.11.2 - Cross Site Scripting (XSS) vulnerability_CVE-2026-56014

Unauthenticated Cross Site Scripting (XSS) in Master Slider

Averta Master Slider n/a CVE