Recent Advisories

Severity ID Title Vendor Product Date Type
HIGH 8.8 CVE-2026-56008

WordPress Fusion Builder plugin <= 3.15.4 - Privilege Escalation vulnerability_CVE-2026-56008

Contributor Privilege Escalation in Fusion Builder

ThemeFusion Fusion Builder n/a CVE
HIGH 7.5 CVE-2026-54847

WordPress Stylish Cost Calculator plugin <= 8.3.9 - Broken Access Control vulnerability_CVE-2026-54847

Unauthenticated Broken Access Control in Stylish Cost Calculator

Design Stylish Cost Calculator n/a CVE
HIGH 7.5 CVE-2026-54846

WordPress Syncee Premium Dropshipping & Wholesale plugin <= 1.0.27 - Broken Access Control vulnerability_CVE-2026-54846

Unauthenticated Broken Access Control in Syncee Premium Dropshipping & Wholesale

akosglys Syncee Premium Dropshipping & Wholesale n/a CVE
HIGH 7.3 CVE-2026-54840

WordPress Newsletters plugin <= 4.13 - Broken Access Control vulnerability_CVE-2026-54840

Unauthenticated Broken Access Control in Newsletters

Tribulant Software Newsletters n/a CVE
HIGH 7.5 CVE-2026-54839

WordPress Trinity Backup – Backup, Migrate, Restore, Clone & Schedule Backups plugin <= 2.0.9 - Sensitive Data Exposure vulnerability_CVE-2026-54839

Unauthenticated Sensitive Data Exposure in Trinity Backup – Backup, Migrate, Restore, Clone & Schedule Backups

kingaddons Trinity Backup – Backup, Migrate, Restore, Clone & Schedule Backups n/a CVE
HIGH 7.5 CVE-2026-54837

WordPress Intranet & Private Site – All-In-One Intranet plugin <= 1.8.1 - Broken Access Control vulnerability_CVE-2026-54837

Unauthenticated Broken Access Control in Intranet & Private Site – All-In-One Intranet

Syed Balkhi Intranet & Private Site – All-In-One Intranet n/a CVE
HIGH 7.5 CVE-2026-54835

WordPress Five Star Restaurant Menu plugin <= 2.5.2 - Broken Access Control vulnerability_CVE-2026-54835

Unauthenticated Broken Access Control in Five Star Restaurant Menu

Rustaurius Five Star Restaurant Menu n/a CVE
HIGH 7.5 CVE-2026-54834

WordPress Object Cache 4 everyone plugin <= 2.3.2 - Sensitive Data Exposure vulnerability_CVE-2026-54834

Unauthenticated Sensitive Data Exposure in Object Cache 4 everyone

fpuenteonline Object Cache 4 everyone n/a CVE
HIGH 7.4 CVE-2026-54833

WordPress Enable CORS plugin <= 2.0.3 - Backdoor vulnerability_CVE-2026-54833

Unauthenticated Backdoor in Enable CORS

Dev Kabir Enable CORS n/a CVE
HIGH 7.5 CVE-2026-54832

WordPress Gutenverse Companion plugin <= 2.5.0 - Broken Access Control vulnerability_CVE-2026-54832

Unauthenticated Broken Access Control in Gutenverse Companion

Jegstudio Gutenverse Companion n/a CVE