Recent Advisories

Severity ID Title Vendor Product Date Type
HIGH 7.5 CVE-2026-54835

WordPress Five Star Restaurant Menu plugin <= 2.5.2 - Broken Access Control vulnerability_CVE-2026-54835

Unauthenticated Broken Access Control in Five Star Restaurant Menu

Rustaurius Five Star Restaurant Menu n/a CVE
HIGH 7.5 CVE-2026-54834

WordPress Object Cache 4 everyone plugin <= 2.3.2 - Sensitive Data Exposure vulnerability_CVE-2026-54834

Unauthenticated Sensitive Data Exposure in Object Cache 4 everyone

fpuenteonline Object Cache 4 everyone n/a CVE
HIGH 7.4 CVE-2026-54833

WordPress Enable CORS plugin <= 2.0.3 - Backdoor vulnerability_CVE-2026-54833

Unauthenticated Backdoor in Enable CORS

Dev Kabir Enable CORS n/a CVE
HIGH 7.5 CVE-2026-54832

WordPress Gutenverse Companion plugin <= 2.5.0 - Broken Access Control vulnerability_CVE-2026-54832

Unauthenticated Broken Access Control in Gutenverse Companion

Jegstudio Gutenverse Companion n/a CVE
CRITICAL 9.3 CVE-2026-54831

WordPress GeoDirectory plugin <= 2.8.162 - SQL Injection vulnerability_CVE-2026-54831

Unauthenticated SQL Injection in GeoDirectory

Paolo GeoDirectory n/a CVE
CRITICAL 9.3 CVE-2026-54827

WordPress Real Estate 7 theme <= 3.5.9 - SQL Injection vulnerability_CVE-2026-54827

Unauthenticated SQL Injection in Real Estate 7

contempoinc Real Estate 7 3.5.9 CVE
HIGH 7.6 CVE-2026-54826

WordPress SupportCandy plugin <= 3.4.6 - Insecure Direct Object References (IDOR) vulnerability_CVE-2026-54826

Subscriber Insecure Direct Object References (IDOR) in SupportCandy

PSM Plugins SupportCandy n/a CVE
CRITICAL 9.3 CVE-2026-54825

WordPress wpDataTables plugin <= 7.4 - SQL Injection vulnerability_CVE-2026-54825

Unauthenticated SQL Injection in wpDataTables

wpDataTables wpDataTables n/a CVE
HIGH 7.5 CVE-2026-54824

WordPress Ads by WPQuads plugin <= 3.0.3 - Sensitive Data Exposure vulnerability_CVE-2026-54824

Unauthenticated Sensitive Data Exposure in Ads by WPQuads

Ads WPQuads Ads by WPQuads n/a CVE
CRITICAL 9.3 CVE-2026-54820

WordPress JetBooking plugin <= 4.0.4.1 - SQL Injection vulnerability_CVE-2026-54820

Unauthenticated SQL Injection in JetBooking

Crocoblock. Jetimpex Inc. JetBooking n/a CVE