Recent Advisories

Severity ID Title Vendor Product Date Type
HIGH 7.5 CVE-2026-49110

WordPress Upsell Order Bump Offer for WooCommerce plugin <= 3.1.4 - Price Manipulation vulnerability_CVE-2026-49110

Unauthenticated Broken Authentication in Upsell Order Bump Offer for WooCommerce

WP Swings Upsell Order Bump Offer for WooCommerce n/a CVE
CRITICAL 9.8 CVE-2026-49109

WordPress Integration for Salesforce and Contact Form 7, WPForms, Elementor, Formidable, Ninja Forms plugin <= 1.4.3 - PHP Object Injection vulnerability_CVE-2026-49109

Unauthenticated PHP Object Injection in Integration for Salesforce and Contact Form 7, WPForms, Elementor, Formidable, Ninja Forms

crm perks Integration for Salesforce and Contact Form 7, WPForms, Elementor, Formidable, Ninja Forms n/a CVE
CRITICAL 9.8 CVE-2026-49106

WordPress Integration for Contact Form 7 and Constant Contact plugin <= 1.1.6 - PHP Object Injection vulnerability_CVE-2026-49106

Unauthenticated PHP Object Injection in Integration for Contact Form 7 and Constant Contact

CRM Perks Integration for Contact Form 7 and Constant Contact n/a CVE
CRITICAL 9.8 CVE-2026-49105

WordPress WP Zendesk for Contact Form 7, WPForms, Elementor, Formidable and Ninja Forms plugin <= 1.1.4 - PHP Object Injection vulnerability_CVE-2026-49105

Unauthenticated PHP Object Injection in WP Zendesk for Contact Form 7, WPForms, Elementor, Formidable and Ninja Forms

CRM Perks WP Zendesk for Contact Form 7, WPForms, Elementor, Formidable and Ninja Forms 1.1.4 CVE
CRITICAL 9.8 CVE-2026-49104

WordPress Integration for Keap/infusionsoft and Contact Form 7, WPForms, Elementor, Formidable, Ninja Forms plugin <= 1.2.1 - PHP Object Injection vulnerability_CVE-2026-49104

Unauthenticated PHP Object Injection in Integration for Keap/infusionsoft and Contact Form 7, WPForms, Elementor, Formidable, Ninja Forms

CRM Perks Integration for Keap/infusionsoft and Contact Form 7, WPForms, Elementor, Formidable, Ninja Forms 1.2.1 CVE
CRITICAL 9.8 CVE-2026-49085

WordPress WP Insightly for Contact Form 7, WPForms, Elementor, Formidable and Ninja Forms plugin <= 1.1.4 - PHP Object Injection vulnerability_CVE-2026-49085

Unauthenticated PHP Object Injection in WP Insightly for Contact Form 7, WPForms, Elementor, Formidable and Ninja Forms

CRM Perks WP Insightly for Contact Form 7, WPForms, Elementor, Formidable and Ninja Forms 1.1.4 CVE
HIGH 7.5 CVE-2026-49083

WordPress LatePoint plugin <= 5.5.1 - Privilege Escalation vulnerability_CVE-2026-49083

Contributor Privilege Escalation in LatePoint

LatePoint LatePoint n/a CVE
HIGH 7.4 CVE-2026-49082

WordPress Chatway Live Chat – AI Chatbot, Customer Support, FAQ & Helpdesk Customer Service & Chat Buttons plugin <= 1.4.8 - Sensitive Data Exposure vulnerability_CVE-2026-49082

Subscriber Sensitive Data Exposure in Chatway Live Chat – AI Chatbot, Customer Support, FAQ & Helpdesk Customer Service & Chat Buttons

Chatway Live Chat Chatway Live Chat – AI Chatbot, Customer Support, FAQ & Helpdesk Customer Service & Chat Buttons n/a CVE
HIGH 7.5 CVE-2026-49078

WordPress WP Travel Engine plugin <= 6.7.10 - Other Vulnerability Type vulnerability_CVE-2026-49078

Unauthenticated Other Vulnerability Type in WP Travel Engine

WP Travel Engine WP Travel Engine n/a CVE
HIGH 7.5 CVE-2026-49070

WordPress Knit Pay plugin <= 9.4.0.0 - Broken Access Control vulnerability_CVE-2026-49070

Unauthenticated Broken Access Control in Knit Pay

Knit Pay Knit Pay n/a CVE