---METADATA---
VENDOR: WordPress
PRODUCT: Offload, AI & Optimize with Cloudflare Images
AFFECTED_VERSIONS: <= 1
---END_METADATA---

Description Summary:
The Offload, AI & Optimize with Cloudflare Images plugin for WordPress is susceptible to Remote Code Execution due to insufficient input validation.

Executive Summary:
A critical Remote Code Execution vulnerability in the Offload, AI & Optimize with Cloudflare Images plugin allows attackers to gain full control over the WordPress server.

Vulnerability Details

CVE-ID: CVE-2026-9860

Affected Software: WordPress Offload, AI & Optimize with Cloudflare Images Plugin

Affected Versions: <= 1

Vulnerability: The plugin fails to validate user input correctly, allowing for the execution of arbitrary code on the underlying server. This vulnerability effectively permits an attacker to bypass standard WordPress application controls and execute commands at the web server's privilege level.

Business Impact

With a CVSS score of 8.8, this represents a critical threat. Remote Code Execution (RCE) is one of the most severe vulnerability types, as it allows attackers to install persistent backdoors, deploy ransomware, or exfiltrate the entirety of the application's environment.

Remediation Plan

Immediate Action: Update the plugin to the latest version immediately or remove it from the environment if no patch is available.

Proactive Monitoring: Perform integrity checks on the web server files and monitor for unusual outbound network traffic indicating a reverse shell or command-and-control communication.

Compensating Controls: Implement strict file permission policies and disable the ability for the web server to execute commands in sensitive directories.

Exploitation Status

Public Exploit Available: false

Analyst Notes: As of June 18, 2026, there is no public information indicating active exploitation of this vulnerability. However, due to the nature of the flaw, the potential for exploitation is high.

Analyst Recommendation

The risk posed by RCE vulnerabilities is extreme. Organizations utilizing this plugin must take immediate action to patch or remove the affected software to prevent a full-scale compromise of their web infrastructure.

---METADATA---
VENDOR: WordPress
PRODUCT: Database for Contact Form 7, WPforms, Elementor forms plugin
AFFECTED_VERSIONS: See vendor advisory for specific affected versions
---END_METADATA---

Description Summary:
The Database for Contact Form 7, WPforms, Elementor forms plugin for WordPress is vulnerable to arbitrary file deletion due to insufficient path validation in the view_page function.

Executive Summary:
A critical arbitrary file deletion vulnerability exists in the Database for Contact Form 7, WPforms, Elementor forms plugin, posing a significant risk of service disruption or site compromise.

Vulnerability Details

CVE-ID: CVE-2026-9843

Affected Software: WordPress Database for Contact Form 7, WPforms, Elementor forms plugin

Affected Versions: See vendor advisory for specific affected versions

Vulnerability: The plugin fails to adequately sanitize file paths within the view_page function, allowing an authenticated attacker to delete arbitrary files on the server. The required authentication level implies that an attacker must possess valid credentials to trigger the vulnerable function.

Business Impact

Successful exploitation of this vulnerability can lead to the deletion of critical system or application files, resulting in severe service downtime and potential loss of data integrity. With a CVSS score of 8.1, this high-severity flaw represents a substantial risk to business continuity and operational security, particularly if the deleted files are essential for site functionality.

Remediation Plan

Immediate Action: Update the plugin to the latest version provided by the vendor to patch the path validation flaw.

Proactive Monitoring: Audit web server logs for suspicious requests directed at the view_page function or unusual file deletion patterns.

Compensating Controls: Deploy a Web Application Firewall (WAF) with rules configured to block directory traversal attempts and suspicious parameter inputs.

Exploitation Status

Public Exploit Available: false

Analyst Notes: As of June 21, 2026, there is no public information indicating active exploitation of this vulnerability. However, due to the nature of the flaw, the potential for exploitation is high.

Analyst Recommendation

Given the severity of the vulnerability, administrators must prioritize updating the affected plugin immediately. If an update is not currently available, consider disabling the plugin entirely to mitigate the risk of unauthorized file deletion until a vendor-supplied patch is implemented.

---METADATA---
VENDOR: Tag Groups
PRODUCT: Tag Groups is the Advanced Way to Display Your Taxonomy Terms
AFFECTED_VERSIONS: 0 up to (excluding) 2.2.0
CONFIDENCE: high
MISSING: none
---END_METADATA---

Description Summary:
The Tag Groups WordPress plugin before 2.2.0 is vulnerable to reflected Cross-Site Scripting (XSS) via improper escaping of an AJAX parameter.

Executive Summary:
An unauthenticated reflected Cross-Site Scripting vulnerability in the Tag Groups WordPress plugin allows remote attackers to execute arbitrary JavaScript in the browser of a logged-in user.

Vulnerability Details

CVE-ID: CVE-2026-9833

Affected Software: Tag Groups, Tag Groups is the Advanced Way to Display Your Taxonomy Terms

Affected Versions: 0 up to (excluding) 2.2.0

Vulnerability: This is a reflected Cross-Site Scripting (XSS) vulnerability caused by insufficient sanitization of AJAX parameters. The vulnerability is exploitable by unauthenticated attackers who trick a user with high-level privileges, such as an Editor, into interacting with a malicious link.

Business Impact

The vulnerability carries a CVSS score of 7.1, classifying it as High severity. Successful exploitation allows an attacker to hijack active user sessions, perform actions on behalf of the victim, or redirect users to malicious sites, which may lead to unauthorized data access or administrative configuration changes.

Remediation Plan

Immediate Action: Update the Tag Groups plugin to version 2.2.0 or later immediately.

Proactive Monitoring: Review web server access logs for suspicious URL patterns containing unexpected script tags or encoded characters directed at the plugin's AJAX endpoints.

Compensating Controls: Deploy a Web Application Firewall (WAF) with rules configured to block common XSS injection patterns and malicious script payloads.

Exploitation Status

Public Exploit Available: No (per available data).

Analyst Notes: As of July 20, 2026, there is no public information indicating active exploitation in the wild. While CISA's SSVC assessment indicates a proof-of-concept exists, it does not confirm the presence of a weaponized exploit. The vulnerability is inherently exploitable if a user is successfully lured into clicking a crafted URL.

Analyst Recommendation

Given the High severity of this flaw, administrators should prioritize updating the plugin. Failure to patch allows unauthenticated attackers to target administrative users, potentially compromising the integrity of the entire WordPress installation.

---METADATA---
VENDOR: BookingPress
PRODUCT: BookingPress Appointment Booking Pro
AFFECTED_VERSIONS: 0 up to (excluding) 5.7.3
CONFIDENCE: high
MISSING: none
---END_METADATA---

Description Summary:
The BookingPress Appointment Booking Pro WordPress plugin is vulnerable to improper authentication, allowing unauthenticated attackers to potentially bypass security controls.

Executive Summary:
An authentication bypass vulnerability in BookingPress Appointment Booking Pro exposes WordPress sites to unauthorized access and potential data manipulation.

Vulnerability Details

CVE-ID: CVE-2026-9830

Affected Software: BookingPress BookingPress Appointment Booking Pro

Affected Versions: 0 up to (excluding) 5.7.3

Vulnerability: This vulnerability involves improper authentication (CWE-287), which allows an unauthenticated attacker to interact with the plugin's functionality without valid credentials. The CVSS vector confirms that no user interaction or high privileges are required to exploit this flaw.

Business Impact

The ability for an unauthenticated attacker to bypass authentication mechanisms could lead to unauthorized access to booking data, sensitive customer information, and potential modification of appointment records. With a CVSS score of 8.2, this vulnerability represents a high risk to both system integrity and customer privacy.

Remediation Plan

Immediate Action: Update the BookingPress Appointment Booking Pro plugin to version 5.7.3 or later immediately.

Proactive Monitoring: Review audit logs for unexpected account access or unauthorized modifications to appointment data.

Compensating Controls: Implement strict access control lists at the network level and utilize a WAF to filter malicious traffic attempting to interact with plugin-specific endpoints.

Exploitation Status

Public Exploit Available: Yes, a proof-of-concept exists in a GitHub repository (ChPratik/CVE-2026-9830).

Analyst Notes: As of July 28, 2026, there is no confirmed active exploitation in the wild; however, per CISA's SSVC assessment a proof-of-concept exists, so exploitation risk should be treated as credible. The availability of a public proof-of-concept significantly lowers the barrier for potential attackers.

Analyst Recommendation

Due to the existence of a public proof-of-concept and the high severity of this authentication flaw, administrators must ensure the plugin is updated to version 5.7.3 or later without delay. Failure to patch may result in unauthorized access to sensitive appointment management systems.

---METADATA---
VENDOR: Unknown
PRODUCT: AI Copilot (WordPress Plugin)
AFFECTED_VERSIONS: 0 up to (excluding) 1.5.4
CONFIDENCE: high
MISSING: none
---END_METADATA---

Description Summary:
The AI Copilot WordPress plugin fails to bind OAuth tokens to specific users, allowing unauthenticated attackers to impersonate administrators and execute privileged tools.

Executive Summary:
An authentication and privilege management flaw in the AI Copilot WordPress plugin allows unauthenticated attackers to gain administrative access and execute arbitrary commands.

Vulnerability Details

CVE-ID: CVE-2026-9810

Affected Software: AI Copilot WordPress Plugin

Affected Versions: 0 up to 1.5.4

Vulnerability: This vulnerability involves improper privilege management (CWE-269) where the plugin accepts any valid OAuth token as an administrative session. An unauthenticated attacker can complete the public OAuth flow to escalate privileges to the administrator level.

Business Impact

Successful exploitation allows an attacker to create new administrative users, escalate privileges, and execute arbitrary MCP tools. This could result in complete site takeover, data theft, and the installation of malicious payloads, presenting an extreme risk to the WordPress environment.

Remediation Plan

Immediate Action: Update the AI Copilot plugin to version 1.5.4 or higher immediately.

Proactive Monitoring: Audit WordPress user accounts for unauthorized additions or changes to roles and review logs for suspicious administrative actions.

Compensating Controls: Disable the AI Copilot plugin entirely until the update can be applied to prevent potential exploitation.

Exploitation Status

Public Exploit Available: Unknown

Analyst Notes: As of July 17, 2026, there is no confirmed active exploitation in the wild; however, per CISA's SSVC assessment a proof-of-concept exists, so exploitation risk should be treated as credible. The flaw is highly accessible as it does not require prior authentication.

Analyst Recommendation

Plugin vulnerabilities of this nature are frequent targets for automated exploitation. Administrators must update the AI Copilot plugin to version 1.5.4 immediately to remediate the risk of account takeovers and privilege escalation.

---METADATA---
VENDOR: printcart
PRODUCT: Printcart Web to Print Product Designer for WooCommerce
AFFECTED_VERSIONS: Up to and including 2.5.2
---END_METADATA---

Description Summary:
The Printcart Web to Print Product Designer for WooCommerce plugin for WordPress is vulnerable to unauthenticated arbitrary file deletion via improper path validation and nonce exposure.

Executive Summary:
A critical arbitrary file deletion vulnerability in the Printcart WordPress plugin allows unauthenticated attackers to execute unauthorized file operations, potentially leading to remote code execution.

Vulnerability Details

CVE-ID: CVE-2026-9725

Affected Software: printcart Printcart Web to Print Product Designer for WooCommerce

Affected Versions: Up to and including 2.5.2

Vulnerability: The plugin fails to perform adequate path validation on the 'nbd_item_key' parameter and fails to properly secure the nonce required for the nbd_save_customer_design action, allowing unauthenticated attackers to delete arbitrary files.

Business Impact

This vulnerability is rated 9.1 (Critical) as it facilitates arbitrary file deletion, which can be chained to achieve Remote Code Execution (RCE). The impact includes complete site compromise, data loss, and potential total loss of control over the WordPress server environment, posing a severe threat to business continuity.

Remediation Plan

Immediate Action: Update the Printcart Web to Print Product Designer for WooCommerce plugin to the latest version immediately.

Proactive Monitoring: Monitor server filesystem integrity and review web server logs for suspicious POST requests targeting the plugin's AJAX endpoints.

Compensating Controls: Utilize a Web Application Firewall (WAF) to block requests containing directory traversal sequences or unauthorized attempts to access sensitive plugin functions.

Exploitation Status

Public Exploit Available: False

Analyst Notes: As of Jul 3, 2026, there is no public information indicating active exploitation of this vulnerability. However, due to the nature of the flaw, the potential for exploitation is high.

Analyst Recommendation

This vulnerability is highly dangerous because it allows unauthenticated attackers to perform destructive actions on the server. Site administrators must update the plugin immediately to the latest patched version to prevent potential RCE and complete site takeover.

---METADATA---
VENDOR: EventON
PRODUCT: EventON (Pro) - WordPress Virtual Event Calendar Plugin
AFFECTED_VERSIONS: Up to and including 5.0.11
---END_METADATA---

Description Summary:
The EventON WordPress plugin is vulnerable to unauthenticated SQL injection via the search parameter due to insufficient input escaping and lack of parameterized queries.

Executive Summary:
A critical SQL injection vulnerability in the EventON plugin allows unauthenticated attackers to extract sensitive database information, posing a severe risk to data confidentiality.

Vulnerability Details

CVE-ID: CVE-2026-9711

Affected Software: EventON EventON (Pro)

Affected Versions: Up to and including 5.0.11

Vulnerability: The vulnerability exists due to improper handling of the WordPress 'search' parameter. Unauthenticated attackers can inject malicious SQL commands into existing queries if the "Enable additional search queries" setting is active, allowing for unauthorized data extraction.

Business Impact

With a CVSS score of 9.8, this vulnerability represents an extreme risk of data breach. Successful exploitation allows unauthorized access to the underlying database, potentially exposing sensitive customer data, administrative credentials, or proprietary information, leading to severe regulatory and financial consequences.

Remediation Plan

Immediate Action: Update the EventON plugin to the latest version immediately to resolve the SQL injection flaw.

Proactive Monitoring: Monitor database query logs for anomalous patterns or injection-style characters (e.g., ', --, UNION) associated with the search function.

Compensating Controls: Utilize a Web Application Firewall (WAF) with SQL injection protection rules to inspect and filter malicious search queries before they reach the application.

Exploitation Status

Public Exploit Available: No

Analyst Notes: As of Jun 30, 2026, there is no public information indicating active exploitation of this vulnerability. However, due to the nature of the flaw, the potential for exploitation is high.

Analyst Recommendation

This vulnerability is highly critical and requires immediate attention to prevent unauthorized access to sensitive database contents. Organizations utilizing EventON must apply the latest vendor update as soon as possible to mitigate the risk of data exfiltration.

---METADATA---
VENDOR: joe007
PRODUCT: Eventer
AFFECTED_VERSIONS: 0 through 4.4.2
CONFIDENCE: high
MISSING: patch
---END_METADATA---

Description Summary:
The Eventer WordPress plugin stores password reset keys in plaintext, allowing unauthenticated attackers to hijack user accounts.

Executive Summary:
A critical authentication bypass vulnerability in the Eventer WordPress plugin allows unauthenticated attackers to hijack any user account, including administrators.

Vulnerability Details

CVE-ID: CVE-2026-9701

Affected Software: joe007 Eventer

Affected Versions: 0 through 4.4.2

Vulnerability: The plugin insecurely stores plaintext password reset keys in the eventer_verification_code meta field. Unauthenticated attackers can leverage this, potentially in conjunction with other vulnerabilities like SQL injection, to retrieve these keys and reset passwords for arbitrary accounts.

Business Impact

This vulnerability carries a CVSS score of 9.8, indicating maximum severity. Successful exploitation allows for complete account takeover, granting attackers administrative access to the WordPress instance. This leads to full site control, unauthorized data access, and the potential to inject malicious content into the site.

Remediation Plan

Immediate Action: Update the Eventer plugin to the latest version immediately to ensure secure handling of password reset keys.

Proactive Monitoring: Monitor user metadata tables for suspicious entries in the eventer_verification_code field and audit successful password reset events.

Compensating Controls: Ensure the site is protected by a WAF and disable the password reset functionality if the plugin cannot be updated immediately.

Exploitation Status

Public Exploit Available: False

Analyst Notes: As of Jul 8, 2026, there is no public information indicating active exploitation of this vulnerability. However, due to the nature of the flaw, the potential for exploitation is high.

Analyst Recommendation

Account takeover vulnerabilities are high-priority risks that must be addressed immediately. Administrators should update the Eventer plugin to the latest version, verify that no unauthorized accounts have been created or modified, and force a password reset for all administrative users.

---METADATA---
VENDOR: WordPress
PRODUCT: Recover Exit For WooCommerce Plugin
AFFECTED_VERSIONS: See vendor advisory for specific affected versions
---END_METADATA---

Description Summary:
The "Recover Exit For WooCommerce" WordPress plugin is vulnerable to Local File Inclusion (LFI), which could allow attackers to access sensitive server files.

Executive Summary:
A Local File Inclusion vulnerability in the Recover Exit For WooCommerce plugin for WordPress exposes the host server to potential information disclosure and unauthorized access.

Vulnerability Details

CVE-ID: CVE-2026-9662

Affected Software: WordPress Recover Exit For WooCommerce Plugin

Affected Versions: See vendor advisory for specific affected versions

Vulnerability: The plugin is susceptible to Local File Inclusion (LFI), allowing an attacker to include files on the server that should not be accessible. This vulnerability typically allows an unauthenticated attacker to read sensitive configuration files or perform path traversal.

Business Impact

An LFI vulnerability is critical as it can lead to the exposure of configuration files (e.g., wp-config.php), database credentials, or system information. Given the CVSS score of 8.1, the risk of total site compromise is high, necessitating immediate action to secure the WordPress installation.

Remediation Plan

Immediate Action: Update the "Recover Exit For WooCommerce" plugin to the latest available version or remove the plugin if it is not strictly required.

Proactive Monitoring: Review WordPress access logs for path traversal patterns (e.g., ../../) and unexpected file access attempts.

Compensating Controls: Utilize a security plugin or WAF with LFI protection rules to block malicious input patterns.

Exploitation Status

Public Exploit Available: false

Analyst Notes: As of June 9, 2026, there is no public information indicating active exploitation of this vulnerability. However, due to the nature of the flaw, the potential for exploitation is high.

Analyst Recommendation

Plugin-based vulnerabilities are a common attack vector for WordPress sites. Administrators must update the affected plugin immediately or disable it to prevent attackers from leveraging this LFI flaw to gain unauthorized access to the underlying server.

---METADATA---
VENDOR: BoldGrid
PRODUCT: W3 Total Cache
AFFECTED_VERSIONS: 0 through 2.9.4
CONFIDENCE: high
MISSING: none
---END_METADATA---

Description Summary:
The W3 Total Cache plugin for WordPress is vulnerable to path traversal, allowing unauthenticated attackers to read sensitive files via improper input validation in the Minify component.

Executive Summary:
A directory traversal vulnerability in the W3 Total Cache plugin for WordPress allows unauthenticated attackers to access sensitive system files, posing a high risk of information disclosure.

Vulnerability Details

CVE-ID: CVE-2026-9282

Affected Software: BoldGrid W3 Total Cache

Affected Versions: 0 through 2.9.4

Vulnerability: This is a path traversal vulnerability (CWE-22) residing in the plugin's Minify component. An unauthenticated attacker can exploit this flaw by sending specially crafted requests to read arbitrary files from the underlying server filesystem.

Business Impact

Successful exploitation allows an unauthorized party to read critical configuration files, potentially including database credentials or environmental variables. Given the CVSS score of 7.5, this high-severity flaw can facilitate further unauthorized access or complete system compromise. Organizations relying on this plugin for performance optimization are at immediate risk of sensitive data exposure.

Remediation Plan

Immediate Action: Update the W3 Total Cache plugin to a version beyond 2.9.4 immediately. If an update is not currently available from the vendor, disable the plugin until a secure version is confirmed.

Proactive Monitoring: Review server access logs for anomalous GET requests containing directory traversal sequences such as "../" directed at the Minify component endpoints.

Compensating Controls: Implement a Web Application Firewall (WAF) rule to block directory traversal patterns and restrict access to the plugin's directory paths.

Exploitation Status

Public Exploit Available: false

Analyst Notes: As of July 11, 2026, there is no public information indicating active exploitation of this vulnerability. However, due to the nature of the flaw, the potential for exploitation is high.

Analyst Recommendation

The severity of this vulnerability necessitates immediate attention. Administrators must prioritize updating the W3 Total Cache plugin across all WordPress instances to prevent unauthorized file access and potential system compromise.

---METADATA---
VENDOR: CSSIgniter
PRODUCT: GutenBee – Gutenberg Blocks
AFFECTED_VERSIONS: 0 through 2.20.1
CONFIDENCE: high
MISSING: none
---END_METADATA---

Description Summary:
The GutenBee – Gutenberg Blocks plugin for WordPress is susceptible to arbitrary file upload, allowing authenticated users with contributor-level access or higher to upload malicious files.

Executive Summary:
The GutenBee – Gutenberg Blocks plugin contains an arbitrary file upload vulnerability that could allow an authenticated attacker to achieve remote code execution.

Vulnerability Details

CVE-ID: CVE-2026-9227

Affected Software: CSSIgniter GutenBee – Gutenberg Blocks

Affected Versions: 0 through 2.20.1

Vulnerability: The plugin fails to adequately restrict the types of files uploaded by users. Because the CVSS vector includes PR:L (Privileges Required: Low), this vulnerability requires an authenticated attacker with at least contributor-level access to the WordPress dashboard to exploit.

Business Impact

Successful exploitation of this flaw can lead to a full site compromise, as an attacker can upload executable scripts to the web server. This poses a significant risk of data exfiltration, unauthorized administrative access, and potential lateral movement within the hosting environment. The CVSS score of 8.8 reflects the high impact on confidentiality, integrity, and availability.

Remediation Plan

Immediate Action: Update the GutenBee – Gutenberg Blocks plugin to version 2.20.2 or later immediately.

Proactive Monitoring: Monitor server file system logs for the presence of unexpected file extensions or scripts in the WordPress uploads directory.

Compensating Controls: Deploy a Web Application Firewall (WAF) with rules configured to block suspicious file upload attempts and restrict access to administrative interfaces.

Exploitation Status

Public Exploit Available: Unknown

Analyst Notes: As of May 28, 2026, there is no public information indicating active exploitation or a public proof-of-concept for this vulnerability. While the vulnerability is not currently being exploited, the ease of file upload makes it a high-priority target for automated scanning.

Analyst Recommendation

The vulnerability presents a critical risk to WordPress environments using the GutenBee plugin. Administrators should prioritize updating to version 2.20.2 as soon as possible to mitigate the risk of remote code execution and potential total system compromise.

---METADATA---
VENDOR: melograno
PRODUCT: Booking for Appointments and Events Calendar – Amelia
AFFECTED_VERSIONS: 8.0 through 9.6.2
CONFIDENCE: high
MISSING: none
PROFILE: daily@7c4e524780a4
MODEL: gemini-3.1-flash-lite
GENERATED: 2026-09-02T09:02:23.514Z
CREDITS: d.v4n_s3c (finder)
SOURCES_JSON: [{"url":"https://www.wordfence.com/threat-intel/vulnerabilities/id/0c2266b8-cc23-46de-bc80-09e3d6294854?source=cve","name":null,"tags":[]},{"url":"https://wpamelia.com/documentation/changelog/","name":null,"tags":[]}]
---END_METADATA---

Description Summary:
The Amelia WordPress plugin contains a critical privilege escalation vulnerability allowing unauthenticated attackers to gain administrative access via improper input validation.

Executive Summary:
The Booking for Appointments and Events Calendar – Amelia plugin is vulnerable to a critical privilege escalation flaw that allows unauthenticated attackers to gain full administrative control over the WordPress installation.

Vulnerability Details

CVE-ID: CVE-2026-9055

Affected Software: melograno Booking for Appointments and Events Calendar – Amelia

Affected Versions: 8.0 through 9.6.2

Vulnerability: The vulnerability exists due to insufficient validation of the type parameter in the customer update endpoint, which permits unauthenticated attackers to manipulate user roles and overwrite administrator credentials.

Business Impact

This vulnerability carries a CVSS score of 9.8, indicating a critical risk to the organization. Successful exploitation results in complete system compromise, allowing attackers to exfiltrate sensitive data, modify core configurations, or deploy malicious software, leading to severe reputational damage and potential loss of data integrity.

Remediation Plan

Immediate Action: Update the Amelia plugin to version 9.6.3 or later immediately to resolve the vulnerable code path.

Proactive Monitoring: Review WordPress user access logs for suspicious account creation events or unauthorized role changes, particularly involving the wpamelia-manager role.

Compensating Controls: Deploy a Web Application Firewall (WAF) rule to block unauthorized access to the affected customer update endpoint until the update can be applied.

Exploitation Status

Public Exploit Available: No (exploit_available: false)

Analyst Notes: As of Sep 2, 2026, there is no public information indicating active exploitation or a public proof-of-concept for this vulnerability. The flaw's mechanism is highly dangerous as it bypasses standard authentication controls entirely to reach administrative functions.

Analyst Recommendation

Given the critical nature of this privilege escalation and the ease of exploitation by unauthenticated actors, all administrators using the Amelia plugin must prioritize this update. Failure to patch allows for total site takeover, making immediate remediation the only effective way to secure the environment.

---METADATA---
VENDOR: ThemeWant
PRODUCT: Easy Elements for Elementor – Addons & Website Templates
AFFECTED_VERSIONS: 0 through 1.4.9
CONFIDENCE: high
MISSING: patch
---END_METADATA---

Description Summary:
The Easy Elements for Elementor plugin is vulnerable to privilege escalation due to improper privilege management, allowing authenticated users to elevate their access levels.

Executive Summary:
The Easy Elements for Elementor plugin for WordPress is vulnerable to a critical privilege escalation flaw, potentially allowing authenticated users to gain unauthorized administrative access.

Vulnerability Details

CVE-ID: CVE-2026-9018

Affected Software: ThemeWant Easy Elements for Elementor – Addons & Website Templates

Affected Versions: 0 through 1.4.9

Vulnerability: The plugin suffers from an improper privilege management vulnerability (CWE-269). The flaw allows an authenticated attacker with low privileges to escalate their permissions, potentially leading to a full site compromise.

Business Impact

A successful exploit of this vulnerability could grant an attacker administrative control over the WordPress environment. This level of access allows for total data compromise, the injection of malicious content, and potential site-wide disruption, carrying severe reputational and operational risks. The CVSS score of 8.8 reflects the high severity of this privilege escalation risk.

Remediation Plan

Immediate Action: As there is currently no patched version available, administrators should immediately deactivate and remove the plugin from the production environment until a fix is released.

Proactive Monitoring: Review WordPress user account logs for unauthorized privilege changes or the creation of new administrator accounts.

Compensating Controls: Implement a Web Application Firewall (WAF) with rules configured to block suspicious requests targeting plugin-specific functionality.

Exploitation Status

Public Exploit Available: Yes — a public proof-of-concept repository exists on GitHub.

Analyst Notes: As of May 22, 2026, there is no confirmed active exploitation in the wild; however, per CISA's SSVC assessment a proof-of-concept exists, so exploitation risk should be treated as credible. The vulnerability is highly exploitable given the availability of public PoC code.

Analyst Recommendation

Given the high severity of this privilege escalation flaw and the confirmed existence of public proof-of-concept code, this vulnerability poses an immediate threat. Organizations must prioritize the removal of the vulnerable plugin until a secure, patched version is provided by the vendor.

---METADATA---
VENDOR: PixelYourSite
PRODUCT: Boost
AFFECTED_VERSIONS: 0 through 2.0.3
CONFIDENCE: high
MISSING: none
---END_METADATA---

Description Summary:
The PixelYourSite Boost WordPress plugin is vulnerable to time-based SQL injection via the 'current_url' and 'user_name' parameters, allowing unauthenticated attackers to extract database information.

Executive Summary:
The PixelYourSite Boost plugin for WordPress is susceptible to an unauthenticated time-based SQL injection vulnerability that could lead to unauthorized database information disclosure.

Vulnerability Details

CVE-ID: CVE-2026-9010

Affected Software: PixelYourSite Boost

Affected Versions: 0 through 2.0.3

Vulnerability: This is a time-based SQL injection vulnerability (CWE-89) triggered by improper sanitization of the 'current_url' and 'user_name' parameters. The vulnerability is remotely exploitable by an unauthenticated attacker, as indicated by the CVSS vector AV:N/PR:N/UI:N.

Business Impact

Successful exploitation allows an attacker to perform blind SQL injection, potentially leading to the exfiltration of sensitive data from the WordPress database. While the CVSS score is 7.5 (High), the ability for unauthenticated actors to remotely query the database poses a significant risk to data confidentiality and regulatory compliance.

Remediation Plan

Immediate Action: Update the PixelYourSite Boost plugin to version 2.0.4 or later immediately.

Proactive Monitoring: Monitor database query logs for anomalous, high-latency queries or patterns indicative of SQL injection attempts, such as unexpected use of SLEEP() or BENCHMARK() functions.

Compensating Controls: Implement a Web Application Firewall (WAF) with rules configured to detect and block common SQL injection patterns targeting WordPress URL parameters.

Exploitation Status

Public Exploit Available: Unknown

Analyst Notes: As of May 20, 2026, there is no public information indicating active exploitation or a public proof-of-concept for this vulnerability. The flaw is inherently exploitable due to the lack of required authentication.

Analyst Recommendation

Given the ease of exploitation and the potential for unauthorized data access, administrators should prioritize updating the Boost plugin to version 2.0.4. If an immediate update is not feasible, consider deactivating the plugin until a patch can be applied to eliminate the risk of remote information disclosure.

---METADATA---
VENDOR: CodeRevolution
PRODUCT: Crawlomatic Multipage Scraper Post Generator
AFFECTED_VERSIONS: 0 through 2.7.2
CONFIDENCE: high
MISSING: none
---END_METADATA---

Description Summary:
The Crawlomatic Multipage Scraper Post Generator plugin for WordPress is vulnerable to unrestricted file uploads, which can be leveraged by an authenticated user to achieve remote code execution.

Executive Summary:
The Crawlomatic Multipage Scraper Post Generator plugin contains an unrestricted file upload vulnerability that may allow an authenticated attacker to execute arbitrary code.

Vulnerability Details

CVE-ID: CVE-2026-9009

Affected Software: CodeRevolution Crawlomatic Multipage Scraper Post Generator

Affected Versions: 0 through 2.7.2

Vulnerability: The plugin suffers from an unrestricted file upload vulnerability (CWE-434). Per the CVSS vector, the attacker must have low privileges (PR:L), meaning this is an authenticated exploit targeting the plugin's functionality.

Business Impact

By uploading malicious scripts, an attacker can gain remote code execution capabilities on the WordPress server. This leads to a total loss of site integrity and potential compromise of the underlying server environment, including the database and sensitive configuration files. With a CVSS score of 8.8, this vulnerability represents a high-severity threat to any organization relying on this plugin.

Remediation Plan

Immediate Action: Update the Crawlomatic Multipage Scraper Post Generator plugin to version 2.7.3 or later.

Proactive Monitoring: Audit the WordPress media and plugin directories for any unauthorized PHP files or scripts that deviate from the expected installation footprint.

Compensating Controls: Implement a WAF to inspect and block file upload requests that contain non-permitted file extensions or executable code patterns.

Exploitation Status

Public Exploit Available: Unknown

Analyst Notes: As of May 28, 2026, there is no public information indicating active exploitation or a public proof-of-concept for this vulnerability. Plugins that handle web scraping often require elevated permissions, making the security of their file handling routines critical.

Analyst Recommendation

The severity of this remote code execution vulnerability necessitates immediate action. Administrators must update the affected plugin to version 2.7.3 immediately and conduct a review of user permissions to ensure that only trusted users have the ability to interact with administrative or plugin-specific settings.

---METADATA---
VENDOR: WordPress
PRODUCT: WP MAPS PRO Plugin
AFFECTED_VERSIONS: Before 6.1.1
---END_METADATA---

Description Summary:
The WP MAPS PRO WordPress plugin allows unauthenticated attackers to create administrator accounts via an improperly secured AJAX action.

Executive Summary:
This critical vulnerability allows any unauthenticated attacker to create a new administrator account, leading to full site takeover.

Vulnerability Details

CVE-ID: CVE-2026-8935

Affected Software: WordPress Plugin: WP MAPS PRO

Affected Versions: Before 6.1.1

Vulnerability: The plugin registers an unauthenticated AJAX action that, when provided with a publicly accessible nonce, allows the creation of a new administrator account and provides a login URL for immediate access.

Business Impact

With a CVSS score of 9.8, this vulnerability grants an attacker full administrative control over the WordPress instance. This allows for total data exposure, site defacement, and the installation of malicious plugins or backdoors, causing significant reputational and operational damage.

Remediation Plan

Immediate Action: Update the WP MAPS PRO plugin to version 6.1.1 or later immediately.

Proactive Monitoring: Review the user list in the WordPress dashboard for any unauthorized administrator accounts created recently.

Compensating Controls: Restrict access to the WordPress admin panel via IP whitelisting or multi-factor authentication (MFA) to prevent unauthorized use of the created accounts.

Exploitation Status

Public Exploit Available: Unknown

Analyst Notes: As of June 15, 2026, there is no public information indicating active exploitation of this vulnerability. However, the ease of exploitation makes it a high-priority target.

Analyst Recommendation

The ability to create an administrative account without authentication is a critical security failure. Administrators must update the plugin immediately and audit existing user accounts for signs of compromise.

---METADATA---
VENDOR: WordPress
PRODUCT: Contest Gallery Plugin
AFFECTED_VERSIONS: 0 through 28.1.6
CONFIDENCE: high
MISSING: none
---END_METADATA---

Description Summary:
The Contest Gallery plugin for WordPress is vulnerable to SQL Injection via the 'form_input' parameter, allowing unauthenticated attackers to query the database.

Executive Summary:
An unauthenticated SQL injection vulnerability in the Contest Gallery WordPress plugin allows attackers to potentially access or manipulate sensitive database information.

Vulnerability Details

CVE-ID: CVE-2026-8912

Affected Software: Contest Gallery (WordPress Plugin)

Affected Versions: 0 through 28.1.6

Vulnerability: The plugin fails to properly sanitize the 'form_input' parameter, leading to a classic SQL injection vulnerability (CWE-89) accessible to unauthenticated remote attackers.

Business Impact

The CVSS score of 7.5 reflects the high risk of unauthorized data access. Successful exploitation could allow an attacker to extract sensitive data from the WordPress database, including user credentials or private gallery content, leading to severe reputational and privacy-related consequences.

Remediation Plan

Immediate Action: Update the Contest Gallery plugin to version 28.1.7 or later.

Proactive Monitoring: Monitor database query logs for unusual patterns or syntax errors that suggest attempted SQL injection attacks.

Compensating Controls: Deploy a Web Application Firewall (WAF) with updated rulesets configured to block common SQL injection payloads.

Exploitation Status

Public Exploit Available: unknown

Analyst Notes: As of May 20, 2026, there is no public information indicating active exploitation or a public proof-of-concept for this vulnerability. SQL injection remains a common and highly effective attack vector against WordPress plugins.

Analyst Recommendation

Given the ease with which SQL injection can be automated, immediate action is required. Administrators should update the Contest Gallery plugin to version 28.1.7 immediately; if an update is not feasible, the plugin should be deactivated until a secure version is deployed.

---METADATA---
VENDOR: WPCode
PRODUCT: Code Manager Plugin
AFFECTED_VERSIONS: See vendor advisory for specific affected versions
---END_METADATA---

Description Summary:
The WPCode - Insert Headers and Footers + Custom Code Snippets plugin for WordPress is vulnerable to Remote Code Execution.

Executive Summary:
A critical Remote Code Execution vulnerability in the WPCode WordPress plugin allows unauthenticated or low-privileged attackers to gain full control over the affected site.

Vulnerability Details

CVE-ID: CVE-2026-8832

Affected Software: WPCode Code Manager Plugin

Affected Versions: See vendor advisory for specific affected versions

Vulnerability: The plugin is susceptible to Remote Code Execution (RCE), which allows an attacker to execute arbitrary code on the underlying server. This vulnerability typically stems from improper input validation in code snippet management functions.

Business Impact

With a CVSS score of 8.8, this vulnerability represents an critical risk. Successful exploitation grants an attacker complete control over the WordPress site, enabling data theft, site defacement, and the deployment of malware to end-users.

Remediation Plan

Immediate Action: Update the WPCode plugin to the latest available version immediately.

Proactive Monitoring: Review server and WordPress activity logs for signs of unauthorized file modifications or suspicious code execution.

Compensating Controls: If an update is not immediately possible, disable the plugin and remove any unauthorized code snippets found in the administrative dashboard.

Exploitation Status

Public Exploit Available: false

Analyst Notes: As of May 27, 2026, there is no public information indicating active exploitation of this vulnerability. However, due to the nature of the flaw, the potential for exploitation is high.

Analyst Recommendation

The severity of an RCE vulnerability cannot be overstated. All administrators using the WPCode plugin must update to the latest version immediately to prevent total site compromise and potential lateral movement within the hosting environment.

---METADATA---
VENDOR: WordPress
PRODUCT: Advanced Custom Fields: Extended Plugin
AFFECTED_VERSIONS: all versions up to and including 0.9.2.5
---END_METADATA---

Description Summary:
The Advanced Custom Fields: Extended plugin for WordPress contains a validation bypass vulnerability that allows unauthenticated attackers to create new administrator accounts.

Executive Summary:
A critical privilege escalation vulnerability in the Advanced Custom Fields: Extended plugin allows unauthenticated attackers to create unauthorized administrator accounts on vulnerable WordPress sites.

Vulnerability Details

CVE-ID: CVE-2026-8809

Affected Software: WordPress Advanced Custom Fields: Extended Plugin

Affected Versions: all versions up to and including 0.9.2.5

Vulnerability: This is a privilege escalation vulnerability caused by a validation bypass in the after_validate_save_post() function. The plugin fails to verify the integrity of the _acf_post_id parameter, allowing an attacker to suppress validation errors and force the system to process a user registration with an arbitrary role, such as 'administrator'.

Business Impact

With a CVSS score of 9.8, this is a critical vulnerability. The ability for an unauthenticated user to create a new administrator account grants the attacker total control over the site. This could lead to massive data breaches, installation of backdoors, and complete compromise of the site's server environment.

Remediation Plan

Immediate Action: Update the "Advanced Custom Fields: Extended" plugin to the latest version immediately.

Proactive Monitoring: Audit the WordPress user database for newly created accounts or accounts with unexpected administrator privileges.

Compensating Controls: Use a Web Application Firewall (WAF) to block requests that contain suspicious _acf_post_id parameters or that target the specific form submission endpoints used by the plugin.

Exploitation Status

Public Exploit Available: false

Analyst Notes: As of May 28, 2026, there is no public information indicating active exploitation of this vulnerability. However, the high severity and relative ease of exploitation require immediate attention to prevent unauthorized administrative account creation.

Analyst Recommendation

This vulnerability poses an extreme risk due to the potential for unauthorized privilege escalation. Administrators must update the plugin immediately and audit current user lists to ensure no malicious accounts have been created during the period the plugin was vulnerable.

---METADATA---
VENDOR: WordPress
PRODUCT: Easy Appointments
AFFECTED_VERSIONS: 0 through 3.12.27
CONFIDENCE: high
MISSING: none
---END_METADATA---

Description Summary:
The Easy Appointments plugin for WordPress is vulnerable to unauthorized data modification via a missing capability check and nonce verification on the ea_delete_multiple_connections AJAX action.

Executive Summary:
An authorization bypass vulnerability in the Easy Appointments plugin for WordPress allows authenticated attackers with low privileges to modify or delete sensitive appointment data.

Vulnerability Details

CVE-ID: CVE-2026-8789

Affected Software: WordPress Easy Appointments

Affected Versions: 0 through 3.12.27

Vulnerability: This is an incorrect authorization vulnerability (CWE-863). The ea_delete_multiple_connections AJAX function fails to verify user capabilities or nonces, allowing any authenticated user to perform unauthorized deletion operations.

Business Impact

An attacker can manipulate scheduling data, leading to significant operational disruption and data integrity loss. While the attack requires authenticated access, the ability to modify or delete records without appropriate permissions undermines the application security model. With a CVSS score of 8.1, this vulnerability is classified as high risk, particularly for businesses relying on the plugin for appointment management.

Remediation Plan

Immediate Action: Update the Easy Appointments plugin to version 3.12.28 or later.

Proactive Monitoring: Review application logs for unusual spikes in AJAX requests or unauthorized attempts to delete appointment records.

Compensating Controls: Restrict access to administrative or sensitive functions to trusted users only and implement a WAF to monitor for unauthorized AJAX calls.

Exploitation Status

Public Exploit Available: No confirmed public exploit exists in our curated sources.

Analyst Notes: As of July 25, 2026, there is no public information indicating active exploitation or a public proof-of-concept for this vulnerability. The vulnerability is highly exploitable by any authenticated user due to the complete lack of server-side capability checks.

Analyst Recommendation

Organizations using the Easy Appointments plugin must update to the latest version promptly. Ensuring proper authorization checks are in place is critical to maintaining the integrity of appointment scheduling systems.

---METADATA---
VENDOR: Firebase
PRODUCT: Support & Chat Management Plugin
AFFECTED_VERSIONS: See vendor advisory for specific affected versions
---END_METADATA---

Description Summary:
The Firebase Support & Chat Management plugin for WordPress contains a privilege escalation vulnerability.

Executive Summary:
A critical privilege escalation vulnerability in the Firebase Support & Chat Management plugin allows unauthorized users to gain elevated administrative permissions.

Vulnerability Details

CVE-ID: CVE-2026-8787

Affected Software: Firebase Support & Chat Management Plugin

Affected Versions: See vendor advisory for specific affected versions

Vulnerability: The plugin is vulnerable to privilege escalation, which allows a lower-privileged user to gain administrative access to the WordPress site. This indicates a failure in the plugin's internal authorization logic.

Business Impact

With a CVSS score of 8.8, this vulnerability allows for complete site takeover. Once administrative privileges are obtained, an attacker can modify content, install malicious plugins, and access sensitive user information, leading to a total loss of site integrity.

Remediation Plan

Immediate Action: Immediately update the Firebase Support & Chat Management plugin to the patched version.

Proactive Monitoring: Audit existing user accounts for suspicious additions or unexpected changes in user roles.

Compensating Controls: Use a security plugin to monitor for unauthorized administrative access attempts and enforce strong password policies.

Exploitation Status

Public Exploit Available: false

Analyst Notes: As of May 27, 2026, there is no public information indicating active exploitation of this vulnerability. However, due to the nature of the flaw, the potential for exploitation is high.

Analyst Recommendation

Privilege escalation vulnerabilities are extremely dangerous. Administrators must prioritize updating this plugin to prevent attackers from gaining full control of the WordPress environment.

---METADATA---
VENDOR: Dokan
PRODUCT: AI Powered WooCommerce Multivendor Marketplace Solution
AFFECTED_VERSIONS: <=5.0.2
CONFIDENCE: high
MISSING: patch
---END_METADATA---

Description Summary:
The Dokan plugin for WordPress is susceptible to a privilege escalation vulnerability due to missing authorization checks in its REST API controllers.

Executive Summary:
A missing authorization flaw in the Dokan plugin for WordPress allows authenticated users with low privileges to escalate their access level.

Vulnerability Details

CVE-ID: CVE-2026-8761

Affected Software: Dokan, AI Powered WooCommerce Multivendor Marketplace Solution

Affected Versions: <=5.0.2

Vulnerability: The plugin fails to implement proper capability checks within its REST API controllers, allowing an authenticated user to perform unauthorized actions. This constitutes a missing authorization vulnerability (CWE-862).

Business Impact

With a CVSS score of 8.8, this vulnerability allows an attacker to gain elevated privileges within the WordPress environment. This could lead to unauthorized administrative control over the WooCommerce marketplace, resulting in data theft, modification of store settings, or full administrative takeover of the WordPress site.

Remediation Plan

Immediate Action: Monitor for updates to the Dokan plugin and apply the patch as soon as it is released by the vendor.

Proactive Monitoring: Monitor WordPress audit logs for unexpected privilege changes or administrative actions performed by low-privileged user accounts.

Compensating Controls: If a patch is unavailable, consider restricting access to the affected REST API endpoints via a WAF or disabling the plugin until a fix is deployed.

Exploitation Status

Public Exploit Available: false

Analyst Notes: As of August 5, 2026, there is no public information indicating active exploitation or a public proof-of-concept for this vulnerability. The vulnerability requires the attacker to have an existing low-privileged account on the target system.

Analyst Recommendation

Given the high impact of privilege escalation, security teams should actively monitor the plugin vendor for a patched version. Until a resolution is available, limit the creation of new user accounts and audit existing user roles for suspicious activity.

---METADATA---
VENDOR: WordPress
PRODUCT: Login with OTP
AFFECTED_VERSIONS: Up to and including 1.6
---END_METADATA---

Description Summary:
The WordPress "Login with OTP" plugin is vulnerable to authentication bypass via brute-forcing of the 6-digit OTP, which lacks expiration and rate-limiting on the validation branch.

Executive Summary:
An authentication bypass vulnerability in the WordPress Login with OTP plugin allows unauthenticated attackers to brute-force OTPs and hijack administrative accounts.

Vulnerability Details

CVE-ID: CVE-2026-8760

Affected Software: WordPress, Login with OTP plugin

Affected Versions: Up to and including 1.6

Vulnerability: The plugin fails to enforce rate-limiting or expiration on the OTP validation branch, despite an incomplete fix for a previous CVE. This design flaw allows an unauthenticated attacker to brute-force the 900,000-value OTP space and gain unauthorized access to any user account, including administrators.

Business Impact

The ability for an unauthenticated attacker to gain full administrative access to a WordPress site poses an existential risk. A CVSS score of 9.8 confirms the severity, as this flaw could lead to complete site takeover, malicious content injection, and total loss of site control.

Remediation Plan

Immediate Action: Update the "Login with OTP" plugin to the latest version or remove the plugin if a secure version is not available.

Proactive Monitoring: Review user login logs for multiple failed attempts followed by a successful login, which may indicate brute-force activity.

Compensating Controls: Implement an additional layer of authentication or disable the plugin until a permanent patch is confirmed and applied.

Exploitation Status

Public Exploit Available: false

Analyst Notes: As of May 27, 2026, there is no public information indicating active exploitation of this vulnerability. However, due to the nature of the flaw, the potential for exploitation is high.

Analyst Recommendation

This flaw effectively nullifies the purpose of the OTP plugin. Administrators should immediately update the plugin. If updates are not immediately available, the plugin should be disabled to prevent account takeovers, as the current implementation offers no protection against determined attackers.

---METADATA---
VENDOR: WordPress
PRODUCT: WP Maps Pro Plugin
AFFECTED_VERSIONS: Up to and including 6.1.0
CONFIDENCE: high
MISSING: none
---END_METADATA---

Description Summary:
The WP Maps Pro plugin for WordPress contains a privilege escalation vulnerability that allows unauthenticated attackers to create new administrator accounts and gain full site control.

Executive Summary:
An unauthenticated privilege escalation vulnerability in the WP Maps Pro plugin allows attackers to achieve full administrative site takeover.

Vulnerability Details

CVE-ID: CVE-2026-8732

Affected Software: WordPress WP Maps Pro Plugin

Affected Versions: Up to and including 6.1.0

Vulnerability: The plugin registers an AJAX action with insufficient access control, relying on a publicly accessible nonce to protect sensitive functions. Unauthenticated attackers can invoke this handler to create a new administrator account and authenticate as that user via a generated login URL.

Business Impact

This vulnerability carries a CVSS score of 9.8, indicating a critical severity level. Successful exploitation results in complete site takeover, granting the attacker full control over the WordPress environment, including access to sensitive customer data, the ability to modify site content, and the potential to distribute malware to visitors.

Remediation Plan

Immediate Action: Immediately update the WP Maps Pro plugin to the latest available version provided by the vendor. If an update is not immediately available, deactivate and remove the plugin until a patch is applied.

Proactive Monitoring: Review WordPress user account logs for the creation of unexpected administrator accounts. Monitor AJAX traffic for requests to the wpgmp_temp_access_ajax action.

Compensating Controls: Implement a Web Application Firewall (WAF) to block unauthorized requests to AJAX endpoints associated with the plugin.

Exploitation Status

Public Exploit Available: No

Analyst Notes: As of May 29, 2026, there is no public information indicating active exploitation of this vulnerability. However, due to the nature of the flaw—which provides an trivial path to administrative access—the potential for exploitation is high.

Analyst Recommendation

Given the critical nature of this privilege escalation flaw, immediate action is required to secure affected WordPress installations. Administrators should prioritize updating or removing the vulnerable plugin to prevent unauthorized administrative access and potential site compromise.

---METADATA---
VENDOR: Tigroumeow
PRODUCT: AI Engine – The Chatbot, AI Framework & MCP for WordPress
AFFECTED_VERSIONS: 3.4.9
CONFIDENCE: high
MISSING: none
---END_METADATA---

Description Summary:
The AI Engine plugin for WordPress contains a privilege escalation vulnerability in version 3.4.9, allowing authenticated users to elevate their privileges.

Executive Summary:
A privilege escalation vulnerability in the AI Engine plugin for WordPress allows authenticated attackers to gain elevated administrative access, posing a significant risk to site integrity.

Vulnerability Details

CVE-ID: CVE-2026-8719

Affected Software: Tigroumeow AI Engine – The Chatbot, AI Framework & MCP for WordPress

Affected Versions: 3.4.9

Vulnerability: This is an Improper Privilege Management vulnerability (CWE-269). The flaw allows an attacker who already possesses low-level authenticated access to escalate their permissions, potentially gaining full control over the WordPress instance.

Business Impact

Successful exploitation of this vulnerability could lead to a complete compromise of the WordPress site. An attacker with elevated privileges can install malicious plugins, modify site content, extract sensitive user data, or create backdoor accounts. Given the CVSS score of 8.8, this is classified as a high-severity issue that requires immediate attention to prevent unauthorized administrative access.

Remediation Plan

Immediate Action: Update the "AI Engine – The Chatbot, AI Framework & MCP for WordPress" plugin to version 3.5.0 or later immediately.

Proactive Monitoring: Audit user account changes and administrative activity logs for anomalous creations or modifications of high-privileged accounts.

Compensating Controls: Deploy a Web Application Firewall (WAF) to block suspicious requests targeting plugin-specific AJAX endpoints and privilege-related functions.

Exploitation Status

Public Exploit Available: Unknown

Analyst Notes: As of May 17, 2026, there is no public information indicating active exploitation or a public proof-of-concept for this vulnerability. While the risk of privilege escalation is high, there is currently no evidence of weaponized exploits in the wild.

Analyst Recommendation

The potential for privilege escalation makes this a critical security concern for any organization relying on this plugin. Administrators must prioritize updating to version 3.5.0 to eliminate the vulnerability. Failure to patch may result in total site takeover by authenticated malicious actors.

---METADATA---
VENDOR: Bricksforge
PRODUCT: Bricksforge
AFFECTED_VERSIONS: n/a through 3.1.8.8
CONFIDENCE: high
MISSING: none
PROFILE: daily@7c4e524780a4
MODEL: gemini-3.1-flash-lite
GENERATED: 2026-09-04T09:04:41.331Z
CREDITS: dutafi | Patchstack Bug Bounty Program (finder)
SOURCES_JSON: [{"url":"https://patchstack.com/database/wordpress/plugin/bricksforge/vulnerability/wordpress-bricksforge-plugin-3-1-8-8-privilege-escalation-vulnerability?_s_id=cve","name":null,"tags":["vdb-entry"]}]
---END_METADATA---

Description Summary:
The Bricksforge WordPress plugin contains a vulnerability that allows unauthenticated subscribers to escalate their privileges, potentially gaining administrative access to the site.

Executive Summary:
A critical privilege escalation vulnerability in the Bricksforge WordPress plugin allows unauthenticated attackers to gain unauthorized administrative control over affected installations.

Vulnerability Details

CVE-ID: CVE-2026-84814

Affected Software: Bricksforge Bricksforge

Affected Versions: n/a through 3.1.8.8

Vulnerability: The flaw is categorized as an Incorrect Privilege Assignment (CWE-266), which permits an unauthenticated attacker to manipulate user roles. This vulnerability exists because the plugin fails to properly validate user capabilities during the privilege assignment process.

Business Impact

The ability for an unauthenticated user to escalate privileges poses a catastrophic risk to organizational security, as it grants attackers full control over the WordPress environment. Given the CVSS score of 9.8, this vulnerability allows for complete compromise of confidentiality, integrity, and availability, potentially leading to total data exfiltration or site defacement.

Remediation Plan

Immediate Action: Update the Bricksforge WordPress plugin to version 3.1.8.9 or the latest available version immediately to resolve the privilege assignment flaw.

Proactive Monitoring: Review WordPress user account creation logs and audit administrative privilege changes for any unauthorized activity.

Compensating Controls: Implement a Web Application Firewall (WAF) with rules designed to block unauthorized requests to user management endpoints or privilege escalation attempts.

Exploitation Status

Public Exploit Available: Unknown

Analyst Notes: As of September 3, 2026, there is no public information indicating active exploitation or a public proof-of-concept for this vulnerability. While no exploit is currently confirmed, the nature of the flaw makes it highly automatable and dangerous.

Analyst Recommendation

This vulnerability represents a severe security risk that must be addressed immediately. Administrators should prioritize the update of the Bricksforge plugin to version 3.1.8.9 across all production environments to prevent unauthorized administrative access and potential system takeover.

---METADATA---
VENDOR: Sheikh Heera
PRODUCT: Agentimus – AI SEO, llms.txt & MCP for AI Agents
AFFECTED_VERSIONS: n/a through 1.51.0
CONFIDENCE: high
MISSING: none
PROFILE: daily@7c4e524780a4
MODEL: gemini-3.1-flash-lite
GENERATED: 2026-09-04T09:13:48.349Z
CREDITS: Ananda Dhakal (Patchstack) | Patchstack Bug Bounty Program (finder)
SOURCES_JSON: [{"url":"https://patchstack.com/database/wordpress/plugin/agentimus/vulnerability/wordpress-agentimus-ai-seo-llms-txt-mcp-for-ai-agents-plugin-1-51-0-broken-access-control-vulnerability?_s_id=cve","name":null,"tags":["vdb-entry"]}]
---END_METADATA---

Description Summary:
A broken access control vulnerability in the Agentimus plugin allows authenticated subscribers to perform unauthorized actions, potentially leading to unauthorized data modification or access.

Executive Summary:
A high-severity broken access control flaw in the Agentimus WordPress plugin allows authenticated subscribers to bypass authorization checks, creating significant risk for site integrity.

Vulnerability Details

CVE-ID: CVE-2026-84779

Affected Software: Sheikh Heera Agentimus – AI SEO, llms.txt & MCP for AI Agents

Affected Versions: n/a through 1.51.0

Vulnerability: This vulnerability involves a missing authorization check (CWE-862) that permits users with subscriber-level privileges to access restricted functions. The attack vector is network-based and requires a low-privileged authenticated user to trigger the flaw.

Business Impact

The ability for low-privileged subscribers to bypass access controls can result in unauthorized modification of site settings or data, potentially affecting SEO configurations or LLM integrations. Given the CVSS score of 8.1, this vulnerability poses a high risk to the confidentiality and integrity of the WordPress environment, necessitating immediate attention to prevent unauthorized administrative actions.

Remediation Plan

Immediate Action: Update the Agentimus – AI SEO, llms.txt & MCP for AI Agents plugin to version 1.51.1 or the latest available version provided by the vendor.

Proactive Monitoring: Review WordPress user activity logs for suspicious requests originating from subscriber accounts that involve administrative or configuration-related endpoints.

Compensating Controls: Implement a Web Application Firewall (WAF) rule to block unauthorized attempts to access plugin-specific administrative endpoints by non-administrative users.

Exploitation Status

Public Exploit Available: No

Analyst Notes: As of September 4, 2026, there is no public information indicating active exploitation or a public proof-of-concept for this vulnerability. The flaw is inherently exploitable because it relies on a missing capability check, which is a common but easily remediated coding oversight.

Analyst Recommendation

This vulnerability represents a significant security oversight that could lead to unauthorized administrative control within the WordPress application. Security teams should prioritize updating the affected plugin immediately to version 1.51.1, as this is the only definitive way to enforce proper authorization boundaries and mitigate the risk of unauthorized data or configuration changes.

---METADATA---
VENDOR: Kitae
PRODUCT: Mang Board WP
AFFECTED_VERSIONS: n/a through 2.3.8
CONFIDENCE: high
MISSING: none
PROFILE: daily@7c4e524780a4
MODEL: gemini-3.1-flash-lite
GENERATED: 2026-09-03T09:06:51.510Z
CREDITS: John Ryan Albon | Patchstack Bug Bounty Program (finder)
SOURCES_JSON: [{"url":"https://patchstack.com/database/wordpress/plugin/mangboard/vulnerability/wordpress-mang-board-wp-plugin-2-3-8-cross-site-request-forgery-csrf-vulnerability?_s_id=cve","name":null,"tags":["vdb-entry"]}]
---END_METADATA---

Description Summary:
An unauthenticated Cross-Site Request Forgery (CSRF) vulnerability exists in the Mang Board WP plugin for WordPress, versions 2.3.8 and earlier, allowing unauthorized actions.

Executive Summary:
A high-severity CSRF vulnerability in the Mang Board WP plugin for WordPress allows unauthenticated attackers to perform unauthorized actions on behalf of users, posing a significant risk to site integrity.

Vulnerability Details

CVE-ID: CVE-2026-84770

Affected Software: Kitae Mang Board WP

Affected Versions: n/a through 2.3.8

Vulnerability: The plugin contains a Cross-Site Request Forgery (CWE-352) flaw that does not properly validate requests, allowing an unauthenticated attacker to trick a user into executing unintended actions. This vulnerability impacts the core functionality of the plugin by failing to require specific security tokens for sensitive operations.

Business Impact

Successful exploitation of this CSRF vulnerability could lead to unauthorized administrative or user-level actions, potentially resulting in data modification, configuration changes, or the compromise of site functionality. Given the CVSS score of 8.8, this flaw represents a significant risk to the availability and integrity of the WordPress environment. Unauthorized state changes performed via this vector could lead to widespread disruption or administrative takeovers.

Remediation Plan

Immediate Action: Update the Mang Board WP plugin to the latest available version, ensuring it is at least 2.3.9 or higher.

Proactive Monitoring: Review web server access logs for anomalous POST requests originating from unexpected sources or unusual patterns directed at board management endpoints.

Compensating Controls: Deploy a Web Application Firewall (WAF) with rules configured to block suspicious cross-site requests to the plugin's endpoints until the patch can be applied.

Exploitation Status

Public Exploit Available: No

Analyst Notes: As of September 3, 2026, there is no public information indicating active exploitation or a public proof-of-concept for this vulnerability. The flaw is inherently dangerous due to the lack of CSRF protection, which simplifies the execution of unauthorized actions by an attacker.

Analyst Recommendation

This vulnerability presents a high risk to the security of the affected WordPress installation. Site administrators should prioritize updating the Mang Board WP plugin to version 2.3.9 or the latest available release immediately to remediate the flaw. Failure to patch may allow attackers to manipulate site content or settings without requiring authentication.

---METADATA---
VENDOR: NSquared
PRODUCT: Simply Schedule Appointments
AFFECTED_VERSIONS: n/a through 1.6.12.23
CONFIDENCE: high
MISSING: none
PROFILE: daily@7c4e524780a4
MODEL: gemini-3.1-flash-lite
GENERATED: 2026-09-03T09:06:43.803Z
CREDITS: Anthony Green of Greenhat Security | Patchstack Bug Bounty Program (finder)
---END_METADATA---

Description Summary:
A Cross Site Request Forgery (CSRF) vulnerability in the Simply Schedule Appointments plugin allows unauthenticated attackers to perform unauthorized actions on behalf of a user.

Executive Summary:
An unauthenticated Cross Site Request Forgery vulnerability in the NSquared Simply Schedule Appointments plugin poses a high risk of unauthorized state changes and potential data compromise.

Vulnerability Details

CVE-ID: CVE-2026-84764

Affected Software: NSquared Simply Schedule Appointments

Affected Versions: n/a through 1.6.12.23

Vulnerability: The software is susceptible to Cross Site Request Forgery (CWE-352), which allows an unauthenticated attacker to trick a user into executing unintended actions within the application. This vulnerability arises because the application fails to adequately verify the authenticity of requests.

Business Impact

Successful exploitation of this CSRF vulnerability could allow an attacker to perform administrative actions or modify scheduling data without the user's consent. Given the CVSS score of 8.8, this represents a significant security risk, as it could lead to unauthorized data manipulation, loss of appointment integrity, or administrative account compromise.

Remediation Plan

Immediate Action: Update the WordPress Simply Schedule Appointments plugin to version 1.6.12.24 or later immediately.

Proactive Monitoring: Review web server access logs for suspicious patterns, particularly unusual POST requests originating from unexpected sources or lacking valid CSRF tokens.

Compensating Controls: Implement a Web Application Firewall (WAF) with robust CSRF protection rules to block malicious requests before they reach the plugin.

Exploitation Status

Public Exploit Available: No

Analyst Notes: As of September 3, 2026, there is no public information indicating active exploitation or a public proof-of-concept for this vulnerability. While CSRF attacks require user interaction, the potential impact on scheduling integrity remains high.

Analyst Recommendation

This vulnerability presents a high risk due to the potential for unauthorized state changes. Administrators must prioritize updating the Simply Schedule Appointments plugin to the patched version, 1.6.12.24, to eliminate this exposure. Failure to apply this update leaves the application susceptible to unauthorized actions that could disrupt business operations or lead to unauthorized data modifications.

---METADATA---
VENDOR: AresIT
PRODUCT: WP Compress
AFFECTED_VERSIONS: n/a through 7.21.28
CONFIDENCE: high
MISSING: none
PROFILE: daily@7c4e524780a4
MODEL: gemini-3.1-flash-lite
GENERATED: 2026-09-04T09:13:32.892Z
CREDITS: Thaer.Assfour | Patchstack Bug Bounty Program (finder)
SOURCES_JSON: [{"url":"https://patchstack.com/database/wordpress/plugin/wp-compress-image-optimizer/vulnerability/wordpress-wp-compress-plugin-7-21-28-settings-change-vulnerability?_s_id=cve","name":null,"tags":["vdb-entry"]}]
---END_METADATA---

Description Summary:
A missing authorization vulnerability in the WP Compress plugin allows unauthenticated attackers to modify plugin settings.

Executive Summary:
The WP Compress plugin for WordPress is vulnerable to an unauthenticated settings change, which could allow an attacker to alter plugin configurations and disrupt service.

Vulnerability Details

CVE-ID: CVE-2026-84757

Affected Software: AresIT WP Compress

Affected Versions: n/a through 7.21.28

Vulnerability: This vulnerability is caused by a missing authorization check (CWE-862) within the plugin, which allows an unauthenticated attacker to change sensitive plugin settings via the web interface.

Business Impact

Successful exploitation of this flaw allows an unauthenticated attacker to modify plugin configuration without prior access, which may lead to service disruption or the unauthorized modification of image optimization behaviors. With a CVSS score of 8.2, this vulnerability represents a high risk that could be leveraged to impact site integrity and availability.

Remediation Plan

Immediate Action: Update the WP Compress plugin to version 7.22.0 or later to ensure the authorization check is properly enforced.

Proactive Monitoring: Review web access logs for unauthorized POST requests directed at plugin settings endpoints and monitor for unexpected changes in plugin configuration.

Compensating Controls: Deploy a Web Application Firewall (WAF) with rules configured to block suspicious requests to the plugin's administrative settings path until the update is applied.

Exploitation Status

Public Exploit Available: No.

Analyst Notes: As of September 4, 2026, there is no public information indicating active exploitation or a public proof-of-concept for this vulnerability. The flaw is inherently dangerous due to its lack of authentication requirements, making it trivial for remote attackers to execute if the target site is publicly accessible.

Analyst Recommendation

Given the high severity of this vulnerability and the lack of required authentication, it is imperative that administrators update the WP Compress plugin immediately. Failure to apply the provided patch leaves the application exposed to unauthorized configuration changes that could negatively impact the site's operational integrity.

---METADATA---
VENDOR: WordPress
PRODUCT: WP Review Slider Pro
AFFECTED_VERSIONS: up to, and including, 12.6.8
---END_METADATA---

Description Summary:
The WP Review Slider Pro plugin for WordPress is vulnerable to SQL Injection via the 'curselrevs[]' parameter of the wpfb_find_reviews AJAX action.

Executive Summary:
An authenticated SQL injection vulnerability in the WP Review Slider Pro plugin could allow attackers to extract sensitive data from the WordPress database.

Vulnerability Details

CVE-ID: CVE-2026-8444

Affected Software: WordPress WP Review Slider Pro

Affected Versions: up to, and including, 12.6.8

Vulnerability: This is an SQL injection vulnerability located within the 'curselrevs[]' parameter of the wpfb_find_reviews AJAX action. The flaw is exploitable by authenticated attackers with subscriber-level access or higher, who can append malicious SQL queries to the existing database operations.

Business Impact

Successful exploitation allows an attacker to bypass standard database queries to access or exfiltrate unauthorized information from the WordPress site's backend. With a CVSS score of 8.8, this high-severity vulnerability poses a significant risk to data confidentiality, potentially exposing user credentials, configurations, or personal identifiable information (PII) stored within the database.

Remediation Plan

Immediate Action: Review the vendor advisory and update the WP Review Slider Pro plugin to the latest available version immediately.

Proactive Monitoring: Monitor database query logs for unusual syntax or high volumes of queries originating from the wpfb_find_reviews action.

Compensating Controls: Implement a Web Application Firewall (WAF) rule to inspect and block malicious SQL injection patterns within incoming POST requests to AJAX endpoints.

Exploitation Status

Public Exploit Available: false

Analyst Notes: As of June 16, 2026, there is no public information indicating active exploitation of this vulnerability. However, due to the nature of the flaw—specifically the ease of constructing blind exploitation oracles via the plugin's response—the potential for exploitation is high.

Analyst Recommendation

Given the high CVSS score of 8.8 and the ease with which sensitive information can be extracted, administrators must prioritize patching this plugin. If an update is not immediately available or possible, consider disabling the plugin functionality until a secure version is deployed to mitigate the risk of data compromise.

---METADATA---
VENDOR: WordPress
PRODUCT: WP Review Slider Pro
AFFECTED_VERSIONS: WP Review Slider Pro plugin for WordPress versions up to, and including, 12.6.8
---END_METADATA---

Description Summary:
The WP Review Slider Pro plugin for WordPress is vulnerable to SQL Injection via the 'stypes' and 'slocations' parameters, allowing unauthorized data extraction.

Executive Summary:
A high-severity SQL injection vulnerability in the WP Review Slider Pro plugin allows authenticated attackers with subscriber-level access to extract sensitive information from the database.

Vulnerability Details

CVE-ID: CVE-2026-8443

Affected Software: WordPress / WP Review Slider Pro

Affected Versions: Versions up to, and including, 12.6.8

Vulnerability: The vulnerability exists in the wppro_get_overall_chart_data AJAX action, where user-supplied input is improperly processed using stripslashes() before being passed to a database query. This allows an authenticated attacker to manipulate SQL queries and exfiltrate database contents.

Business Impact

With a CVSS score of 8.8, this vulnerability poses a severe threat to data confidentiality. An attacker can bypass application logic to extract sensitive customer or system data, potentially leading to a complete breach of the WordPress database and significant regulatory/compliance implications.

Remediation Plan

Immediate Action: Update the WP Review Slider Pro plugin to a version greater than 12.6.8 immediately.

Proactive Monitoring: Review database query logs for suspicious patterns or unexpected syntax that may indicate SQL injection attempts.

Compensating Controls: Enable a WAF to inspect incoming AJAX requests for SQL injection signatures and restrict database permissions for the WordPress user to the minimum required level.

Exploitation Status

Public Exploit Available: true

Analyst Notes: As of June 16, 2026, a public exploit is available, increasing the risk of exploitation. Immediate remediation is required to prevent data theft.

Analyst Recommendation

Given the availability of a public exploit and the high severity of SQL injection, organizations using this plugin must update immediately. Failure to do so leaves the database exposed to trivial data exfiltration by any authenticated user.

---METADATA---
VENDOR: YITH
PRODUCT: Request a Quote for WooCommerce Premium
AFFECTED_VERSIONS: Up to (excluding) 4.46.0
CONFIDENCE: high
MISSING: none
PROFILE: daily@7c4e524780a4
MODEL: gemini-3.1-flash-lite
GENERATED: 2026-09-04T09:05:12.039Z
CREDITS: Jorgson | Patchstack Bug Bounty Program (finder)
---END_METADATA---

Description Summary:
YITH Request a Quote for WooCommerce Premium versions prior to 4.46.0 contain an unauthenticated broken access control vulnerability, allowing unauthorized access to restricted plugin functions.

Executive Summary:
This critical vulnerability allows unauthenticated attackers to bypass authorization controls in the YITH Request a Quote for WooCommerce Premium plugin, posing a severe risk of complete system compromise.

Vulnerability Details

CVE-ID: CVE-2026-84238

Affected Software: YITH Request a Quote for WooCommerce Premium

Affected Versions: Up to (excluding) 4.46.0

Vulnerability: The plugin suffers from a missing authorization flaw (CWE-862) that allows unauthenticated remote attackers to perform unauthorized actions. Because the vulnerability requires no interaction or credentials, it is highly accessible for exploitation.

Business Impact

The flaw carries a CVSS score of 9.8, indicating a critical severity level that could lead to unauthorized data access, modification of quote requests, or potential takeover of the WooCommerce store functionality. This exposure threatens the integrity of customer data and business operations, potentially leading to significant financial loss and reputational damage.

Remediation Plan

Immediate Action: Update the YITH Request a Quote for WooCommerce Premium plugin to version 4.46.0 or later immediately.

Proactive Monitoring: Review web server access logs for anomalous requests directed at plugin-specific endpoints, particularly those originating from unknown or suspicious IP addresses.

Compensating Controls: Deploy a Web Application Firewall (WAF) with rules configured to block unauthorized access attempts targeting WordPress plugin endpoints until the update is successfully applied.

Exploitation Status

Public Exploit Available: Unknown.

Analyst Notes: As of September 3, 2026, there is no public information indicating active exploitation or a published proof-of-concept for this vulnerability. The lack of authentication requirements makes this an attractive target for automated scanning and exploitation tools.

Analyst Recommendation

The critical nature of this vulnerability, combined with the lack of authentication requirements, necessitates immediate action. Administrators must prioritize updating the YITH Request a Quote for WooCommerce Premium plugin to version 4.46.0 or higher to eliminate this attack vector and secure the WooCommerce environment against unauthorized access.

---METADATA---
VENDOR: wpmudev
PRODUCT: Hummingbird Performance
AFFECTED_VERSIONS: 0 through 3.21.0
CONFIDENCE: high
MISSING: none
PROFILE: daily@7c4e524780a4
MODEL: gemini-3.1-flash-lite
GENERATED: 2026-09-05T09:01:53.352Z
CREDITS: Kuba (finder)
SOURCES_JSON: [{"url":"https://www.wordfence.com/threat-intel/vulnerabilities/id/65c3ca36-79e6-47f8-9524-27e7631f4caf?source=cve","name":null,"tags":[]},{"url":"https://plugins.trac.wordpress.org/browser/hummingbird-performance/trunk/core/modules/class-page-cache.php#L1982","name":null,"tags":[]},{"url":"https://plugins.trac.wordpress.org/browser/hummingbird-performance/trunk/core/modules/class-page-cache.php#L1973","name":null,"tags":[]},{"url":"https://plugins.trac.wordpress.org/browser/hummingbird-performance/trunk/core/modules/class-page-cache.php#L752","name":null,"tags":[]},{"url":"https://plugins.trac.wordpress.org/browser/hummingbird-performance/trunk/core/modules/class-page-cache.php#L749","name":null,"tags":[]},{"url":"https://plugins.trac.wordpress.org/changeset?reponame=&new=3675836%40hummingbird-performance%2Ftags%2F3.21.2&old=3614991%40hummingbird-performance%2Ftags%2F3.20.0","name":null,"tags":[]},{"url":"https://plugins.trac.wordpress.org/changeset/3675836/hummingbird-performance/trunk/core/modules/class-page-cache.php","name":null,"tags":[]},{"url":"https://plugins.trac.wordpress.org/changeset?old_path=%2Fhummingbird-performance/tags/3.20.0&new_path=%2Fhummingbird-performance/tags/3.21.2","name":null,"tags":[]}]
---END_METADATA---

Description Summary:
The Hummingbird WordPress plugin is vulnerable to unauthenticated remote code execution due to improper sanitization of cookie data written to a web-accessible log file.

Executive Summary:
An unauthenticated remote code execution vulnerability in the Hummingbird Performance plugin for WordPress allows attackers to gain full control over affected websites.

Vulnerability Details

CVE-ID: CVE-2026-83627

Affected Software: wpmudev Hummingbird Performance

Affected Versions: 0 through 3.21.0

Vulnerability: This is a code injection vulnerability (CWE-94) occurring within the log_msg function. An unauthenticated attacker can inject arbitrary PHP code into a web-accessible debug log file by crafting specific cookies, which the plugin then executes when the log file is requested.

Business Impact

Successful exploitation results in full remote code execution, granting the attacker the ability to execute arbitrary commands on the underlying web server. This leads to complete site compromise, potential data theft, and the ability to pivot to other internal systems. Given the CVSS score of 9.8, this represents a critical risk to business continuity and data integrity.

Remediation Plan

Immediate Action: Update the Hummingbird Performance plugin to version 3.21.2 or higher immediately to apply the security patch. If an update is not immediately feasible, disable the Page Caching Debug Log feature.

Proactive Monitoring: Review server access logs for requests targeting /wp-content/wphb-logs/page-caching-log.php, especially those containing suspicious cookie strings or PHP syntax.

Compensating Controls: Deploy a Web Application Firewall (WAF) with rules configured to block requests containing malicious payloads in cookie headers or direct access attempts to the wphb-logs directory.

Exploitation Status

Public Exploit Available: Unknown

Analyst Notes: As of Sep 5, 2026, there is no public information indicating active exploitation or a public proof-of-concept for this vulnerability. While the vulnerability requires the debug log feature to be enabled, its reachability via unauthenticated requests makes it a high-priority target for automated exploitation tools.

Analyst Recommendation

The severity of this vulnerability cannot be overstated, as it allows unauthenticated attackers to achieve full code execution. Administrators should prioritize updating the plugin to the latest version immediately. If the debug log feature was previously enabled, perform a forensic review of the log files to ensure no unauthorized code injection has already occurred.

---METADATA---
VENDOR: WP Legal Pages
PRODUCT: WP Cookie Notice for GDPR, CCPA & ePrivacy Consent
AFFECTED_VERSIONS: n/a through 4.4.1
CONFIDENCE: high
MISSING: none
PROFILE: daily@7c4e524780a4
MODEL: gemini-3.1-flash-lite
GENERATED: 2026-09-01T09:05:09.211Z
CREDITS: Jiemook | Patchstack Bug Bounty Program (finder)
SOURCES_JSON: [{"url":"https://patchstack.com/database/wordpress/plugin/gdpr-cookie-consent/vulnerability/wordpress-wp-cookie-notice-for-gdpr-ccpa-eprivacy-consent-plugin-4-4-1-arbitrary-file-upload-vulnerability?_s_id=cve","name":null,"tags":["vdb-entry"]}]
---END_METADATA---

Description Summary:
A critical unrestricted file upload vulnerability in the WP Cookie Notice plugin allows unauthenticated attackers to upload and execute arbitrary malicious files.

Executive Summary:
A critical, unauthenticated file upload vulnerability in the WP Cookie Notice for GDPR, CCPA & ePrivacy Consent plugin allows remote attackers to achieve full system compromise.

Vulnerability Details

CVE-ID: CVE-2026-82970

Affected Software: WP Legal Pages WP Cookie Notice for GDPR, CCPA & ePrivacy Consent

Affected Versions: n/a through 4.4.1

Vulnerability: This flaw is an unrestricted upload of a file with a dangerous type (CWE-434). It allows an unauthenticated remote attacker to bypass file validation and upload malicious content, which can lead to remote code execution.

Business Impact

The ability to upload arbitrary files without authentication poses a catastrophic risk to the integrity and confidentiality of the entire WordPress environment. Given the CVSS score of 10.0, this vulnerability provides attackers with total control over the web server, potentially facilitating data exfiltration, site defacement, or the deployment of persistent backdoors within the organization's infrastructure.

Remediation Plan

Immediate Action: Update the WP Cookie Notice for GDPR, CCPA & ePrivacy Consent plugin to version 4.4.2 or higher immediately.

Proactive Monitoring: Monitor web server access logs for suspicious POST requests targeting plugin directories or unusual file extensions being uploaded to the server.

Compensating Controls: Deploy a Web Application Firewall (WAF) with strict rulesets to block unauthorized file uploads and filter malicious payloads targeting known vulnerable parameters.

Exploitation Status

Public Exploit Available: Unknown

Analyst Notes: As of Aug 31, 2026, there is no public information indicating active exploitation or a public proof-of-concept for this vulnerability. The flaw is inherently dangerous because it lacks any authentication requirement, making it highly susceptible to automated mass exploitation attempts.

Analyst Recommendation

Due to the critical severity of this vulnerability and the potential for complete system compromise, administrators must prioritize patching this plugin immediately. Organizations unable to update at this time should consider deactivating the plugin until a secure version is successfully deployed to prevent unauthorized access.

---METADATA---
VENDOR: Unknown
PRODUCT: AI Website Builder (WordPress plugin)
AFFECTED_VERSIONS: 1.0.0
CONFIDENCE: high
MISSING: patch
PROFILE: daily@7c4e524780a4
MODEL: gemini-3.1-flash-lite
GENERATED: 2026-09-05T09:01:16.117Z
CREDITS: Erwan LR (WPScan) (finder); WPScan (coordinator)
SOURCES_JSON: [{"url":"https://wpscan.com/vulnerability/663e7004-1cca-4c0f-8d54-7298d40fe179/","name":null,"tags":["exploit","vdb-entry","technical-description"]}]
---END_METADATA---

Description Summary:
The AI Website Builder WordPress plugin lacks authorization checks on REST API routes, enabling unauthenticated attackers to execute arbitrary code, modify site content, and install malicious plugins.

Executive Summary:
A critical authorization vulnerability in the AI Website Builder plugin allows unauthenticated attackers to achieve remote code execution and full site compromise.

Vulnerability Details

CVE-ID: CVE-2026-82923

Affected Software: Unknown AI Website Builder (WordPress plugin)

Affected Versions: 1.0.0

Vulnerability: This vulnerability is caused by missing authorization and nonce checks on REST API endpoints (CWE-862). It allows an unauthenticated attacker to manipulate plugin configurations, upload arbitrary files, and execute code if the server environment permits PHP execution within the uploads directory.

Business Impact

The potential impact of this vulnerability is total system compromise. Successful exploitation grants an attacker full control over the WordPress site, including the ability to delete media, inject malicious content, or execute remote code to pivot into the underlying server infrastructure. Given the CVSS score of 9.8, this flaw represents an extreme risk to confidentiality, integrity, and availability.

Remediation Plan

Immediate Action: Since no specific patch version is currently available, immediately deactivate and remove the AI Website Builder plugin from all WordPress installations.

Proactive Monitoring: Review web server and WordPress access logs for unauthorized POST requests directed at REST API endpoints or unusual file creation events within the wp-content/uploads directory.

Compensating Controls: Deploy a Web Application Firewall (WAF) with rules configured to block unauthorized access to the plugin's REST API routes and restrict file execution capabilities within the uploads directory.

Exploitation Status

Public Exploit Available: Unknown.

Analyst Notes: As of September 4, 2026, there is no confirmed active exploitation in the wild; however, per CISA's SSVC assessment a proof-of-concept exists, so exploitation risk should be treated as credible. The lack of authorization checks makes this vulnerability highly susceptible to automated exploitation attempts.

Analyst Recommendation

The criticality of this vulnerability cannot be overstated, as it provides an unauthenticated path to remote code execution. Administrators must prioritize the immediate removal of the affected plugin to prevent unauthorized access and potential data exfiltration. Until a vendor-supplied update is verified and installed, the software should remain disabled to maintain the security posture of the environment.

---METADATA---
VENDOR: SiteGround
PRODUCT: SiteGround Security
AFFECTED_VERSIONS: n/a through 1.6.6
CONFIDENCE: high
MISSING: none
PROFILE: daily@7c4e524780a4
MODEL: gemini-3.1-flash-lite
GENERATED: 2026-09-01T09:11:40.346Z
CREDITS: Ananda Dhakal (Patchstack) | Patchstack Bug Bounty Program (finder)
SOURCES_JSON: [{"url":"https://patchstack.com/database/wordpress/plugin/sg-security/vulnerability/wordpress-siteground-security-plugin-1-6-6-2fa-bypass-vulnerability?_s_id=cve","name":null,"tags":["vdb-entry"]}]
---END_METADATA---

Description Summary:
A critical authentication bypass vulnerability in the SiteGround Security WordPress plugin allows unauthenticated attackers to circumvent security controls.

Executive Summary:
The SiteGround Security plugin for WordPress contains an unauthenticated authentication bypass vulnerability that poses a significant risk to site integrity and administrative control.

Vulnerability Details

CVE-ID: CVE-2026-82228

Affected Software: SiteGround SiteGround Security

Affected Versions: n/a through 1.6.6

Vulnerability: This vulnerability, classified as CWE-290, allows an unauthenticated attacker to bypass authentication mechanisms within the plugin. The flaw specifically impacts the security validation logic, potentially granting unauthorized access to the application.

Business Impact

Successful exploitation of this vulnerability could lead to a total compromise of the affected WordPress site. Given the CVSS score of 8.1, the risk of unauthorized administrative access is high, which may result in data breaches, installation of malicious code, or complete system takeover.

Remediation Plan

Immediate Action: Update the SiteGround Security plugin to version 1.6.7 or the latest available version immediately.

Proactive Monitoring: Review web access logs for unusual traffic patterns or unauthorized requests directed at administrative endpoints.

Compensating Controls: Implement a Web Application Firewall (WAF) to detect and block suspicious requests targeting known plugin vulnerabilities while the update is being deployed.

Exploitation Status

Public Exploit Available: No.

Analyst Notes: As of September 1, 2026, there is no public information indicating active exploitation or a public proof-of-concept for this vulnerability. While the vulnerability is technically complex to exploit, the lack of authentication requirements makes it a high priority for remediation.

Analyst Recommendation

The severity of this authentication bypass necessitates prompt action to secure the WordPress environment. Administrators must verify their plugin version and apply the 1.6.7 patch immediately to mitigate the risk of unauthorized access. Failure to update leaves the platform exposed to potential takeover by unauthenticated threat actors.

---METADATA---
VENDOR: Metagauss
PRODUCT: RegistrationMagic
AFFECTED_VERSIONS: n/a through 6.0.9.8
CONFIDENCE: high
MISSING: none
PROFILE: daily@7c4e524780a4
MODEL: gemini-3.1-flash-lite
GENERATED: 2026-09-01T09:12:46.378Z
CREDITS: Emiliano Carrizo | Patchstack Bug Bounty Program (finder)
---END_METADATA---

Description Summary:
RegistrationMagic contains an unauthenticated broken authentication vulnerability that allows attackers to bypass security controls via an alternate path or channel.

Executive Summary:
The RegistrationMagic WordPress plugin contains a critical authentication bypass vulnerability that allows unauthenticated attackers to compromise user accounts.

Vulnerability Details

CVE-ID: CVE-2026-82225

Affected Software: Metagauss RegistrationMagic

Affected Versions: n/a through 6.0.9.8

Vulnerability: This vulnerability is an authentication bypass flaw categorized under CWE-288. It occurs because the software fails to properly validate credentials through an alternate path, allowing unauthenticated remote attackers to potentially gain unauthorized access to the system.

Business Impact

This flaw carries a CVSS score of 7.4, which classifies it as a high severity risk. Successful exploitation could lead to full unauthorized access to user accounts, resulting in the compromise of sensitive personal information, potential data theft, and loss of administrative control over the plugin settings.

Remediation Plan

Immediate Action: Update the RegistrationMagic plugin to version 6.0.9.9 or later immediately to resolve the authentication flaw.

Proactive Monitoring: Review web server access logs for unusual patterns or repeated failed login attempts that deviate from standard user behavior.

Compensating Controls: Deploy a Web Application Firewall (WAF) with rules configured to block suspicious requests targeting the RegistrationMagic endpoint until the patch can be applied.

Exploitation Status

Public Exploit Available: exploit_available (false)

Analyst Notes: As of September 1, 2026, there is no public information indicating active exploitation or a public proof-of-concept for this vulnerability. The flaw's requirement for specific conditions to trigger the alternate authentication path may limit initial exploitability, but the unauthenticated nature of the attack makes it a high priority for remediation.

Analyst Recommendation

Given the high CVSS score and the potential for complete authentication bypass, this vulnerability represents a significant security risk to any site utilizing the RegistrationMagic plugin. Administrators should prioritize updating to the latest version to eliminate this exposure and prevent potential account hijacking.

---METADATA---
VENDOR: Liquid Web / StellarWP
PRODUCT: GiveWP
AFFECTED_VERSIONS: n/a through 4.16.7.1
CONFIDENCE: high
MISSING: none
CREDITS: Udin Chan | Patchstack Bug Bounty Program (finder)
SOURCES_JSON: [{"url":"https://patchstack.com/database/wordpress/plugin/give/vulnerability/wordpress-givewp-plugin-4-16-7-1-remote-code-execution-rce-vulnerability?_s_id=cve","name":null,"tags":["vdb-entry"]},{"url":"https://patchstack.com/articles/unauthenticated-php-object-injection-to-remote-code-execution-on-givewp?_s_id=cve","name":null,"tags":["third-party-advisory"]}]
---END_METADATA---

Description Summary:
A deserialization of untrusted data vulnerability in the GiveWP WordPress plugin allows unauthenticated attackers to perform remote code execution via object injection.

Executive Summary:
A critical remote code execution vulnerability in the GiveWP plugin allows unauthenticated attackers to gain full control over affected WordPress installations.

Vulnerability Details

CVE-ID: CVE-2026-82222

Affected Software: Liquid Web / StellarWP GiveWP

Affected Versions: n/a through 4.16.7.1

Vulnerability: This is a deserialization of untrusted data flaw (CWE-502) that permits unauthenticated attackers to inject malicious PHP objects into the application. By leveraging this vulnerability, an attacker can achieve remote code execution on the underlying server.

Business Impact

The potential impact of this vulnerability is total system compromise, as it allows for unauthorized remote code execution without requiring any user credentials. Given the CVSS score of 10.0, this flaw poses a critical risk to data confidentiality, integrity, and availability, potentially leading to complete site takeover, data exfiltration, or the deployment of persistent backdoors.

Remediation Plan

Immediate Action: Update the GiveWP plugin to version 4.16.7.2 or higher immediately to apply the vendor-supplied security patch.

Proactive Monitoring: Review web server access logs for suspicious POST requests or unusual PHP object strings that may indicate attempts to exploit deserialization functions.

Compensating Controls: Deploy a Web Application Firewall (WAF) with updated rules to inspect incoming traffic for malicious serialized PHP payloads and block requests targeting the vulnerable plugin endpoints.

Exploitation Status

Public Exploit Available: Yes, a published PoC exists, as documented in the technical write-up by Patchstack.

Analyst Notes: As of Aug 28, 2026, there is no public information indicating active exploitation in the wild. However, because the vulnerability allows for unauthenticated remote code execution and a functional proof-of-concept has been published by the research team at Patchstack, the risk of exploitation is extremely high and should be addressed as an emergency.

Analyst Recommendation

This vulnerability represents the highest level of security risk due to its unauthenticated nature and the severity of impact. Organizations utilizing the GiveWP plugin must prioritize patching to version 4.16.7.2 or later immediately. If an update cannot be performed instantly, the plugin should be deactivated until remediation is complete to prevent potential compromise.

---METADATA---
VENDOR: WordPress
PRODUCT: OAuth Single Sign On
AFFECTED_VERSIONS: 6.25.0 up to (excluding) 7.0.1
CONFIDENCE: high
MISSING: none
PROFILE: daily@7c4e524780a4
MODEL: gemini-3.1-flash-lite
GENERATED: 2026-09-03T14:02:44.274Z
CREDITS: Pedro Pinho (finder); WPScan (coordinator)
SOURCES_JSON: [{"url":"https://wpscan.com/vulnerability/bc7c18f2-4e8c-47a3-a972-6162fd27aaca/","name":null,"tags":["exploit","vdb-entry","technical-description"]}]
---END_METADATA---

Description Summary:
The OAuth Single Sign On WordPress plugin fails to verify Steam identity assertions, allowing unauthenticated attackers to impersonate users and create unauthorized accounts.

Executive Summary:
A critical authentication vulnerability in the OAuth Single Sign On WordPress plugin allows unauthenticated attackers to hijack user sessions and create unauthorized accounts.

Vulnerability Details

CVE-ID: CVE-2026-82183

Affected Software: WordPress OAuth Single Sign On

Affected Versions: 6.25.0 up to (excluding) 7.0.1

Vulnerability: The vulnerability is an improper authentication flaw (CWE-287) residing in the Steam single sign-on integration, which fails to validate identity assertions, thereby permitting unauthenticated access.

Business Impact

Successful exploitation of this flaw poses a severe risk to organizational security, as it allows unauthorized actors to gain access to the platform without valid credentials. Given the CVSS score of 8.1, this vulnerability could lead to widespread account compromise, unauthorized data access, and potential escalation of privileges if attackers create accounts with elevated roles or leverage hijacked sessions to manipulate sensitive information.

Remediation Plan

Immediate Action: Update the OAuth Single Sign On WordPress plugin to version 7.0.1 or later to implement proper identity assertion verification.

Proactive Monitoring: Review application logs for anomalous sign-in activity or unexpected account creation events that correlate with the Steam authentication flow.

Compensating Controls: If immediate patching is not feasible, disable the Steam single sign-on feature to prevent exploitation of the insecure assertion process.

Exploitation Status

Public Exploit Available: No — there is no confirmed public exploit in the available data.

Analyst Notes: As of Sep 2, 2026, there is no public information indicating active exploitation or a public proof-of-concept for this vulnerability. While the vulnerability requires specific conditions to trigger, the ability for an unauthenticated user to bypass standard login procedures makes this a high-priority item for remediation.

Analyst Recommendation

This vulnerability represents a significant security oversight in the authentication logic of the affected plugin. Administrators should prioritize updating the plugin to version 7.0.1 immediately to close the authentication gap and prevent unauthorized access. Failure to address this flaw could lead to systematic account takeover and compromise of the WordPress environment.

---METADATA---
VENDOR: WordPress
PRODUCT: Kirki Plugin
AFFECTED_VERSIONS: 6.0.0 to 6.0.6
---END_METADATA---

Description Summary:
The Kirki plugin for WordPress is vulnerable to unauthenticated privilege escalation via an account takeover flaw in the password reset process.

Executive Summary:
An unauthenticated account takeover vulnerability in the Kirki WordPress plugin allows attackers to compromise user accounts and escalate privileges.

Vulnerability Details

CVE-ID: CVE-2026-8206

Affected Software: WordPress Kirki Plugin

Affected Versions: 6.0.0 through 6.0.6

Vulnerability: The vulnerability exists because the plugin fails to properly validate the username-to-email mapping during password reset requests, allowing an unauthenticated attacker to trigger a password reset for any registered user to an attacker-controlled email address.

Business Impact

This flaw facilitates full account takeover, which can lead to unauthorized access to sensitive site data, administrative panel control, and the potential for malicious code injection into the website. With a CVSS score of 9.8, this represents a critical risk to site integrity and user trust.

Remediation Plan

Immediate Action: Update the Kirki plugin to the latest version immediately to resolve the password reset logic error.

Proactive Monitoring: Audit user account changes and recent password reset requests for suspicious activity or unauthorized account modifications.

Compensating Controls: Disable the password reset functionality if possible, or implement a rate-limiting mechanism on the reset endpoint via a security plugin or WAF.

Exploitation Status

Public Exploit Available: Unknown

Analyst Notes: As of Jun 2, 2026, there is no public information indicating active exploitation of this vulnerability. However, due to the nature of the flaw, the potential for exploitation is high.

Analyst Recommendation

Account takeover vulnerabilities are frequently targeted by automated scanners. Site administrators should prioritize updating the Kirki plugin immediately to prevent unauthorized access and potential site-wide compromise.

---METADATA---
VENDOR: WordPress
PRODUCT: Simple Ajax Chat
AFFECTED_VERSIONS: 0 up to (excluding) 20260827
CONFIDENCE: high
MISSING: none
PROFILE: daily@7c4e524780a4
MODEL: gemini-3.1-flash-lite
GENERATED: 2026-09-03T09:05:51.512Z
CREDITS: Erwan LR (WPScan) (finder); WPScan (coordinator)
SOURCES_JSON: [{"url":"https://wpscan.com/vulnerability/7aceefd5-aa09-4828-b375-6a62997fa0c2/","name":null,"tags":["exploit","vdb-entry","technical-description"]}]
---END_METADATA---

Description Summary:
The Simple Ajax Chat WordPress plugin fails to sanitize chat messages, allowing unauthenticated attackers to execute stored Cross-Site Scripting (XSS) attacks against site administrators and users.

Executive Summary:
A high-severity stored Cross-Site Scripting vulnerability in the Simple Ajax Chat WordPress plugin allows unauthenticated attackers to execute malicious scripts in the browsers of site visitors and administrators.

Vulnerability Details

CVE-ID: CVE-2026-81807

Affected Software: WordPress Simple Ajax Chat

Affected Versions: 0 up to (excluding) 20260827

Vulnerability: This vulnerability is a Cross-Site Scripting (CWE-79) flaw caused by the failure to escape chat message content before rendering. Unauthenticated attackers can inject arbitrary HTML and JavaScript, which executes when a victim views the chat interface.

Business Impact

Successful exploitation allows an attacker to hijack user sessions, perform unauthorized administrative actions, or redirect site traffic to malicious domains. Given the CVSS score of 8.8, this vulnerability represents a significant risk to the integrity and confidentiality of the WordPress environment, potentially leading to a full site compromise if administrative sessions are targeted.

Remediation Plan

Immediate Action: Update the Simple Ajax Chat plugin to version 20260827 or later immediately to apply the necessary input sanitization fixes.

Proactive Monitoring: Monitor site access logs for suspicious POST requests directed at the chat functionality and implement Content Security Policy (CSP) headers to restrict unauthorized script execution.

Compensating Controls: Deploy a Web Application Firewall (WAF) with configured rules to detect and block common XSS patterns within incoming chat submissions.

Exploitation Status

Public Exploit Available: No

Analyst Notes: As of September 3, 2026, there is no public information indicating active exploitation or a public proof-of-concept for this vulnerability. The flaw's requirement for user interaction (viewing the chat) is the primary constraint on its exploitability.

Analyst Recommendation

The vulnerability poses a severe risk to WordPress installations due to the ease of exploitation by unauthenticated users. It is imperative that administrators verify their plugin versions and apply the update without delay to prevent potential account takeovers or malicious script injection within their web application.

---METADATA---
VENDOR: HashThemes
PRODUCT: Hash Form
AFFECTED_VERSIONS: n/a through 1.4.2
CONFIDENCE: high
MISSING: none
PROFILE: daily@7c4e524780a4
MODEL: gemini-3.1-flash-lite
GENERATED: 2026-09-01T09:04:55.018Z
CREDITS: CoryRoo | Patchstack Bug Bounty Program (finder)
SOURCES_JSON: [{"url":"https://patchstack.com/database/wordpress/plugin/hash-form/vulnerability/wordpress-hash-form-plugin-1-4-2-arbitrary-file-upload-vulnerability?_s_id=cve","name":null,"tags":["vdb-entry"]}]
---END_METADATA---

Description Summary:
A critical vulnerability in the Hash Form WordPress plugin allows unauthenticated attackers to perform arbitrary file uploads, potentially leading to full system compromise.

Executive Summary:
The Hash Form plugin for WordPress contains an unauthenticated arbitrary file upload vulnerability that poses a critical risk of full remote code execution.

Vulnerability Details

CVE-ID: CVE-2026-81780

Affected Software: HashThemes Hash Form

Affected Versions: n/a through 1.4.2

Vulnerability: This vulnerability is classified as an unrestricted upload of a file with a dangerous type (CWE-434). It allows an unauthenticated attacker to upload arbitrary files to the server, which can be executed to achieve complete system control.

Business Impact

The ability for an unauthenticated attacker to upload files to a web server is a critical security failure, as it typically leads to the execution of malicious scripts or shells. This vulnerability allows for full remote code execution, which can result in complete data exfiltration, unauthorized administrative access to the WordPress environment, and potential lateral movement within the hosting infrastructure, justifying the 10.0 CVSS score.

Remediation Plan

Immediate Action: Update the Hash Form plugin to version 1.4.3 or the latest available version immediately to close the file upload vector.

Proactive Monitoring: Review web server access logs for requests to unusual file extensions or unexpected uploads to the plugin's directory structure.

Compensating Controls: Deploy a Web Application Firewall (WAF) with rules configured to block file uploads from unauthorized sources or to inspect file types for malicious headers.

Exploitation Status

Public Exploit Available: Unknown.

Analyst Notes: As of Aug 31, 2026, there is no public information indicating active exploitation or a public proof-of-concept for this vulnerability. While no exploit is currently confirmed in public repositories, the nature of the flaw makes it highly susceptible to automated scanning and exploitation.

Analyst Recommendation

Given the critical severity and the potential for total system compromise, administrators must prioritize patching this plugin immediately. If an update cannot be applied instantly, the plugin should be disabled or removed to prevent unauthenticated access to the underlying server file system.

---METADATA---
VENDOR: Silk Themes
PRODUCT: Newspapers X
AFFECTED_VERSIONS: 1.0.46 through 1.0.48
CONFIDENCE: high
MISSING: none
PROFILE: daily@7c4e524780a4
MODEL: gemini-3.1-flash-lite
GENERATED: 2026-09-01T09:04:47.803Z
CREDITS: ashv4ni | Patchstack Bug Bounty Program (finder)
SOURCES_JSON: [{"url":"https://patchstack.com/database/wordpress/theme/newspapers-x/vulnerability/wordpress-newspapers-x-theme-1-0-46-1-0-48-backdoor-vulnerability?_s_id=cve","name":null,"tags":["vdb-entry"]}]
---END_METADATA---

Description Summary:
A critical input validation vulnerability in the Silk Themes Newspapers X WordPress theme allows for the installation of malicious software.

Executive Summary:
The Newspapers X theme for WordPress contains a critical input validation vulnerability that enables unauthenticated attackers to implant malicious software.

Vulnerability Details

CVE-ID: CVE-2026-81779

Affected Software: Silk Themes Newspapers X

Affected Versions: 1.0.46 through 1.0.48

Vulnerability: This vulnerability (CWE-1284) involves the improper validation of input quantity, which can be leveraged by an unauthenticated remote attacker to achieve remote code execution through the installation of a malicious payload.

Business Impact

The exploit allows full system compromise, granting an attacker the ability to execute arbitrary commands, manipulate data, or maintain persistence within the WordPress environment. Given the CVSS score of 10.0, this flaw poses an extreme risk to business operations, potentially leading to total loss of site integrity, data exfiltration, and significant reputational damage.

Remediation Plan

Immediate Action: Update the Newspapers X theme to version 1.0.49 or the latest available release immediately to patch the validation flaw.

Proactive Monitoring: Review web server and WordPress application logs for unusual POST requests or unauthorized file creation attempts occurring in the theme directory.

Compensating Controls: Deploy a Web Application Firewall (WAF) with rules configured to block suspicious input patterns or unauthorized file upload attempts targeting theme directories.

Exploitation Status

Public Exploit Available: Unknown

Analyst Notes: As of Aug 31, 2026, there is no public information indicating active exploitation or a public proof-of-concept for this vulnerability. The flaw is considered highly dangerous due to the lack of required authentication and the potential for remote code execution.

Analyst Recommendation

Due to the critical severity of this vulnerability and the potential for complete system compromise, administrators must prioritize updating the affected theme immediately. Failure to apply the vendor-provided patch leaves the WordPress installation exposed to unauthenticated remote attackers who may attempt to deploy persistent backdoors.

---METADATA---
VENDOR: LiquidThemes
PRODUCT: Booking Hub
AFFECTED_VERSIONS: n/a through 1.3.1
CONFIDENCE: high
MISSING: patch
PROFILE: daily@7c4e524780a4
MODEL: gemini-3.1-flash-lite
GENERATED: 2026-09-03T09:07:29.712Z
CREDITS: Denver Jackson | Patchstack Bug Bounty Program (finder)
SOURCES_JSON: [{"url":"https://patchstack.com/database/wordpress/plugin/booking-hub/vulnerability/wordpress-booking-hub-plugin-1-3-1-privilege-escalation-vulnerability?_s_id=cve","name":null,"tags":["vdb-entry"]}]
---END_METADATA---

Description Summary:
LiquidThemes Booking Hub is vulnerable to an incorrect privilege assignment flaw, allowing authenticated users to escalate their privileges within the application.

Executive Summary:
An incorrect privilege assignment vulnerability in the LiquidThemes Booking Hub plugin allows authenticated users to perform unauthorized privilege escalation, posing a significant risk to system security.

Vulnerability Details

CVE-ID: CVE-2026-81769

Affected Software: LiquidThemes Booking Hub

Affected Versions: n/a through 1.3.1

Vulnerability: The plugin contains an incorrect privilege assignment vulnerability (CWE-266) that permits an authenticated user to manipulate access controls. By exploiting this flaw, a low-privileged user can elevate their account permissions to administrative levels.

Business Impact

Successful exploitation of this vulnerability allows an attacker to gain unauthorized administrative control over the Booking Hub plugin. With elevated privileges, an attacker could potentially modify booking data, access sensitive user information, or conduct further malicious activities within the WordPress environment, resulting in a full compromise of the plugin's data integrity and confidentiality. The CVSS score of 8.8 reflects the high severity of this potential unauthorized access.

Remediation Plan

Immediate Action: Since a specific patch version is not currently listed, administrators should monitor the official Patchstack security database or the WordPress plugin repository for the release of version 1.3.2 or higher.

Proactive Monitoring: Review WordPress user account logs for suspicious activity or unexpected changes to user roles and capabilities.

Compensating Controls: Implement a Web Application Firewall (WAF) to detect and block suspicious requests targeting plugin-specific endpoints. If the plugin is not mission-critical, consider deactivating it until a vendor-supplied patch is verified and applied.

Exploitation Status

Public Exploit Available: Unknown.

Analyst Notes: As of September 3, 2026, there is no public information indicating active exploitation or a public proof-of-concept for this vulnerability. This flaw is inherently dangerous because it allows a standard user to bypass security boundaries by abusing the plugin's internal privilege management logic.

Analyst Recommendation

Given the high CVSS score of 8.8, this vulnerability presents a severe risk to organizational security. Administrators are urged to prioritize the tracking of vendor updates and apply the necessary security patch immediately upon release to prevent potential unauthorized privilege escalation.

---METADATA---
VENDOR: Yalla
PRODUCT: Simple Payment
AFFECTED_VERSIONS: n/a through 2.5.2
CONFIDENCE: high
MISSING: none
PROFILE: daily@7c4e524780a4
MODEL: gemini-3.1-flash-lite
GENERATED: 2026-08-30T09:09:00.906Z
CREDITS: JunHee CHO | Patchstack Bug Bounty Program (finder)
SOURCES_JSON: [{"url":"https://patchstack.com/database/wordpress/plugin/simple-payment/vulnerability/wordpress-simple-payment-plugin-2-5-2-broken-access-control-vulnerability?_s_id=cve","name":null,"tags":["vdb-entry"]}]
---END_METADATA---

Description Summary:
A broken access control vulnerability in the Simple Payment plugin allows unauthenticated attackers to perform unauthorized actions due to missing authorization checks.

Executive Summary:
The Simple Payment plugin for WordPress is vulnerable to an unauthenticated broken access control flaw, posing a significant risk of unauthorized system manipulation.

Vulnerability Details

CVE-ID: CVE-2026-81767

Affected Software: Yalla Simple Payment

Affected Versions: n/a through 2.5.2

Vulnerability: This is a missing authorization vulnerability (CWE-862) occurring within the Simple Payment plugin. The flaw allows an unauthenticated attacker to bypass security controls and perform unauthorized operations on the target system.

Business Impact

Successful exploitation of this vulnerability allows unauthorized users to manipulate payment processes or data without requiring valid credentials. Given the CVSS score of 7.5, this high-severity flaw could lead to financial discrepancies, service disruption, or data integrity issues, directly impacting the business operation's reliability and customer trust.

Remediation Plan

Immediate Action: Update the WordPress Simple Payment plugin to version 2.5.3 or later immediately to resolve the missing authorization check.

Proactive Monitoring: Review web server and WordPress access logs for unusual requests directed at plugin endpoints that deviate from standard user traffic patterns.

Compensating Controls: Deploy a Web Application Firewall (WAF) with rules configured to block suspicious or unauthorized requests targeting the plugin's administration or payment processing endpoints.

Exploitation Status

Public Exploit Available: No (exploit_available: false)

Analyst Notes: As of August 30, 2026, there is no public information indicating active exploitation or a public proof-of-concept for this vulnerability. The flaw is inherently dangerous because it is remotely exploitable without authentication, making it an attractive target for automated scanning tools.

Analyst Recommendation

This vulnerability represents a significant security risk due to the lack of required authentication for sensitive operations. Administrators must prioritize updating the Simple Payment plugin to the patched version as soon as possible to prevent potential unauthorized access and maintain the integrity of payment workflows.

---METADATA---
VENDOR: ウェブ屋のさとーさん
PRODUCT: Throws SPAM Away
AFFECTED_VERSIONS: n/a through 3.8.2
CONFIDENCE: high
MISSING: none
PROFILE: daily@7c4e524780a4
MODEL: gemini-3.1-flash-lite
GENERATED: 2026-09-01T09:04:40.831Z
CREDITS: Jiemook | Patchstack Bug Bounty Program (finder)
SOURCES_JSON: [{"url":"https://patchstack.com/database/wordpress/plugin/throws-spam-away/vulnerability/wordpress-throws-spam-away-plugin-3-8-2-sql-injection-vulnerability?_s_id=cve","name":null,"tags":["vdb-entry"]}]
---END_METADATA---

Description Summary:
The Throws SPAM Away WordPress plugin contains an unauthenticated SQL injection vulnerability in versions 3.8.2 and earlier, allowing remote attackers to extract sensitive database information.

Executive Summary:
An unauthenticated SQL injection vulnerability in the Throws SPAM Away plugin poses a critical risk of unauthorized database data exfiltration.

Vulnerability Details

CVE-ID: CVE-2026-81763

Affected Software: ウェブ屋のさとーさん Throws SPAM Away

Affected Versions: n/a through 3.8.2

Vulnerability: The plugin fails to properly sanitize user-supplied input before using it in SQL commands, which allows an unauthenticated attacker to inject malicious SQL queries. This flaw exists due to improper neutralization of special elements within SQL commands, as defined by CWE-89.

Business Impact

The ability for an unauthenticated attacker to perform SQL injection poses a severe threat to data confidentiality. A successful exploit could lead to the unauthorized disclosure of sensitive information stored in the WordPress database, potentially including user credentials, configuration data, or private site content. Given the high CVSS score of 9.3, this vulnerability represents a critical risk that warrants immediate attention to prevent significant data loss and potential regulatory non-compliance.

Remediation Plan

Immediate Action: Update the Throws SPAM Away plugin to version 3.9 or the latest available version released by the vendor to remediate the vulnerability.

Proactive Monitoring: Review web server and database access logs for suspicious patterns, such as unexpected SQL syntax characters or unusual query structures originating from external IP addresses.

Compensating Controls: Implement a Web Application Firewall (WAF) with rules configured to block common SQL injection payloads to provide a temporary layer of protection while the update is being staged.

Exploitation Status

Public Exploit Available: No

Analyst Notes: As of Aug 31, 2026, there is no public information indicating active exploitation or a published proof-of-concept for this vulnerability. While currently unexploited in the wild, the lack of authentication requirements makes this flaw highly attractive for automated scanning and mass exploitation campaigns.

Analyst Recommendation

This vulnerability is critical due to the lack of required authentication, which lowers the barrier to entry for potential attackers. Organizations utilizing the Throws SPAM Away plugin must prioritize updating to version 3.9 immediately. Failure to patch this flaw leaves the underlying database exposed to direct manipulation and unauthorized data access.

---METADATA---
VENDOR: Autorius E-goi
PRODUCT: Smart Marketing SMS and Newsletters Forms
AFFECTED_VERSIONS: <= 5.1.24
CONFIDENCE: high
MISSING: none
PROFILE: daily@7c4e524780a4
MODEL: gemini-3.1-flash-lite
GENERATED: 2026-09-01T09:04:33.292Z
CREDITS: Supakiad S. (m3ez) | Patchstack Bug Bounty Program (finder)
SOURCES_JSON: [{"url":"https://patchstack.com/database/wordpress/plugin/smart-marketing-for-wp/vulnerability/wordpress-smart-marketing-sms-and-newsletters-forms-plugin-5-1-24-sql-injection-vulnerability?_s_id=cve","name":null,"tags":["vdb-entry"]}]
---END_METADATA---

Description Summary:
A critical SQL injection vulnerability in the Smart Marketing SMS and Newsletters Forms plugin allows unauthenticated attackers to query the database.

Executive Summary:
An unauthenticated SQL injection vulnerability in the Autorius E-goi Smart Marketing SMS and Newsletters Forms plugin poses a critical risk of unauthorized database access.

Vulnerability Details

CVE-ID: CVE-2026-81756

Affected Software: Autorius E-goi Smart Marketing SMS and Newsletters Forms

Affected Versions: <= 5.1.24

Vulnerability: The plugin suffers from an unauthenticated SQL injection flaw (CWE-89) that allows remote, unauthenticated attackers to execute arbitrary SQL commands against the underlying database.

Business Impact

Successful exploitation of this vulnerability can lead to the unauthorized extraction of sensitive data from the WordPress database, including user information and plugin configuration details. Given the CVSS score of 9.3, this flaw presents a severe risk to data confidentiality and could lead to significant regulatory and reputational consequences for organizations relying on this software.

Remediation Plan

Immediate Action: Update the Smart Marketing SMS and Newsletters Forms plugin to version 5.1.25 or the latest available version immediately.

Proactive Monitoring: Review web server and database access logs for anomalous query patterns, such as unexpected SQL syntax or high volumes of requests to plugin endpoints.

Compensating Controls: Deploy a Web Application Firewall (WAF) with rules configured to detect and block common SQL injection payloads targeting WordPress plugin parameters.

Exploitation Status

Public Exploit Available: No

Analyst Notes: As of Aug 31, 2026, there is no public information indicating active exploitation or a public proof-of-concept for this vulnerability. The flaw's inherent exploitability is high due to the lack of required authentication, making it a prime candidate for automated scanning and exploitation.

Analyst Recommendation

The severity of this vulnerability, combined with the lack of required authentication for exploitation, necessitates immediate action. Administrators must prioritize updating the plugin to version 5.1.25 to neutralize the risk of database compromise. Until the update is applied, ensure that perimeter security controls are actively monitoring for suspicious traffic directed at the affected plugin endpoints.

---METADATA---
VENDOR: AYS Pro
PRODUCT: FAQ Builder AYS
AFFECTED_VERSIONS: 1.6.3 up to 1.8.5
CONFIDENCE: high
MISSING: none
PROFILE: daily@7c4e524780a4
MODEL: gemini-3.1-flash-lite
GENERATED: 2026-09-03T09:05:44.048Z
CREDITS: Pablo González Pérez (finder); Francisco José Ramírez Vicente and Iñigo Sánchez Enciso (finder); WPScan (coordinator)
SOURCES_JSON: [{"url":"https://wpscan.com/vulnerability/b8a97781-5c3b-4a89-845e-ee4eb60ea29c/","name":null,"tags":["exploit","vdb-entry","technical-description"]}]
---END_METADATA---

Description Summary:
A stored cross-site scripting (XSS) vulnerability in the FAQ Builder AYS WordPress plugin allows unauthenticated attackers to execute malicious scripts in the context of an administrator.

Executive Summary:
A high-severity stored cross-site scripting vulnerability in the FAQ Builder AYS WordPress plugin enables unauthenticated attackers to execute arbitrary code within an administrator's browser session.

Vulnerability Details

CVE-ID: CVE-2026-81737

Affected Software: AYS Pro FAQ Builder AYS

Affected Versions: 1.6.3 up to 1.8.5

Vulnerability: The plugin fails to properly sanitize or escape input submitted by unauthenticated visitors, and a flawed decoding process undermines existing security controls, resulting in stored cross-site scripting (XSS) that triggers when an administrator views the affected content.

Business Impact

This vulnerability carries a CVSS score of 8.8, reflecting its potential for severe impact on organizational integrity. Successful exploitation allows an attacker to perform unauthorized actions on behalf of a site administrator, potentially leading to full site compromise, the theft of sensitive administrative sessions, or the redirection of site traffic to malicious domains.

Remediation Plan

Immediate Action: Update the FAQ Builder AYS plugin to version 1.8.5 or later immediately to resolve the identified sanitation flaws.

Proactive Monitoring: Audit administrative logs for unusual activity or unauthorized configuration changes that may indicate a successful XSS-based account takeover.

Compensating Controls: Deploy a Web Application Firewall (WAF) with rules configured to detect and block common cross-site scripting payloads directed at WordPress endpoints.

Exploitation Status

Public Exploit Available: No — there is no confirmed public exploit available in the provided data.

Analyst Notes: As of September 3, 2026, there is no public information indicating active exploitation or a published proof-of-concept for this vulnerability. While the lack of a public exploit reduces immediate opportunistic risk, the nature of the flaw makes it highly attractive for targeted attacks against administrative users.

Analyst Recommendation

Given the High severity of this vulnerability, administrators should prioritize the application of the vendor-provided patch. Failure to update the plugin leaves the administrative interface exposed to unauthorized script execution, which could result in a complete loss of site control.

---METADATA---
VENDOR: Groundhogg
PRODUCT: CRM, Newsletters, and Marketing Automation
AFFECTED_VERSIONS: 0 up to (excluding) 4.5.13
CONFIDENCE: high
MISSING: none
PROFILE: daily@7c4e524780a4
MODEL: gemini-3.1-flash-lite
GENERATED: 2026-09-01T14:00:13.650Z
CREDITS: Artus KG (finder); WPScan (coordinator)
SOURCES_JSON: [{"url":"https://wpscan.com/vulnerability/cfdb4107-6010-4c29-baf3-3111765f48c2/","name":null,"tags":["exploit","vdb-entry","technical-description"]}]
---END_METADATA---

Description Summary:
The Groundhogg WordPress plugin is vulnerable to stored Cross-Site Scripting (XSS) due to insufficient input sanitization, allowing unauthenticated attackers to target administrative users.

Executive Summary:
An unauthenticated stored Cross-Site Scripting vulnerability in the Groundhogg WordPress plugin allows remote attackers to execute arbitrary scripts in the context of an administrator session.

Vulnerability Details

CVE-ID: CVE-2026-81660

Affected Software: Groundhogg CRM, Newsletters, and Marketing Automation

Affected Versions: 0 up to (excluding) 4.5.13

Vulnerability: This vulnerability is a stored Cross-Site Scripting (XSS) flaw (CWE-79) resulting from a failure to validate or escape user-submitted data in web form fields, which is subsequently rendered in an administrative dashboard. The vulnerability is exploitable by unauthenticated users.

Business Impact

The ability for an unauthenticated attacker to execute arbitrary scripts within the administrative interface poses a severe risk to the integrity and confidentiality of the WordPress installation. Successful exploitation could lead to unauthorized administrative actions, session hijacking, or the modification of site content. Given the high CVSS score of 8.8, this vulnerability represents a significant threat to the security posture of the affected web application.

Remediation Plan

Immediate Action: Update the Groundhogg plugin to version 4.5.13 or later to apply the necessary input validation and output escaping patches.

Proactive Monitoring: Review administrative access logs for unusual activity or suspicious script execution patterns that may indicate an attempt to leverage an injected payload.

Compensating Controls: Deploy a Web Application Firewall (WAF) with rules configured to detect and block common XSS attack patterns, specifically targeting requests containing script tags or event handlers within form inputs.

Exploitation Status

Public Exploit Available: No

Analyst Notes: As of Aug 30, 2026, there is no public information indicating active exploitation or a public proof-of-concept for this vulnerability. While the flaw is accessible to unauthenticated attackers, the requirement for a high privilege user to view the malicious input acts as a secondary constraint on the attack chain.

Analyst Recommendation

The vulnerability presents a high risk due to the potential for administrative account compromise. Administrators must prioritize updating the Groundhogg plugin immediately. If an immediate update is not feasible, consider disabling the affected form features until the patch can be deployed to prevent potential exploitation.

---METADATA---
VENDOR: WordPress
PRODUCT: Infility Global Plugin
AFFECTED_VERSIONS: See vendor advisory for specific affected versions
---END_METADATA---

Description Summary:
A vulnerability in the Infility Global WordPress plugin may allow for unauthorized actions due to insufficient input validation.

Executive Summary:
The Infility Global WordPress plugin contains a high-severity vulnerability that could allow unauthorized actors to compromise site integrity.

Vulnerability Details

CVE-ID: CVE-2026-8163

Affected Software: WordPress Infility Global Plugin

Affected Versions: See vendor advisory for specific affected versions

Vulnerability: The plugin fails to properly validate inputs or enforce capability checks, potentially allowing an attacker to execute unauthorized functions. Given the nature of WordPress plugins, this vulnerability likely requires an authenticated user with low-level privileges or could be exploited if the plugin exposes unauthenticated AJAX endpoints.

Business Impact

Successful exploitation of this vulnerability could lead to unauthorized administrative actions, data exfiltration, or complete site takeover. With a CVSS score of 8.8, this flaw poses a significant risk to organizational data integrity and service availability, potentially resulting in severe reputational damage.

Remediation Plan

Immediate Action: Update the Infility Global plugin to the latest available version provided by the vendor. If an update is unavailable, disable or remove the plugin until a secure version is released.

Proactive Monitoring: Audit WordPress user logs for suspicious activity or unauthorized plugin settings changes. Monitor web server logs for requests directed at plugin-specific API endpoints.

Compensating Controls: Deploy a Web Application Firewall (WAF) with rules configured to block common exploit patterns against WordPress plugins.

Exploitation Status

Public Exploit Available: false

Analyst Notes: As of June 24, 2026, there is no public information indicating active exploitation of this vulnerability. However, due to the nature of the flaw, the potential for exploitation is high.

Analyst Recommendation

Administrators should prioritize the immediate update of the Infility Global plugin. If the vendor has not released a patch, assess the business necessity of the plugin and consider removal as the most effective mitigation strategy to prevent unauthorized access.

---METADATA---
VENDOR: WordPress
PRODUCT: Vitepos
AFFECTED_VERSIONS: See vendor advisory for specific affected versions
---END_METADATA---

Description Summary:
The Vitepos plugin for WordPress contains a security vulnerability that may allow unauthorized access or impact the integrity of the point-of-sale system.

Executive Summary:
A critical security flaw in the Vitepos WordPress plugin requires immediate attention to prevent potential unauthorized access and data compromise.

Vulnerability Details

CVE-ID: CVE-2026-8157

Affected Software: WordPress Vitepos

Affected Versions: See vendor advisory for specific affected versions

Vulnerability: The Vitepos plugin for WordPress contains an unspecified vulnerability that may permit unauthorized access to system functions. Given the high CVSS score, this flaw likely involves an authentication bypass or insufficient authorization check within the plugin’s core operational code.

Business Impact

A CVSS score of 8.8 marks this as a high-risk vulnerability that could facilitate unauthorized access to sensitive point-of-sale data. The potential for exploitation could lead to significant business disruption, loss of transaction integrity, and the unauthorized exposure of customer information, necessitating immediate remediation to maintain compliance and security posture.

Remediation Plan

Immediate Action: Update the Vitepos plugin to the latest version immediately to ensure all security patches are applied.

Proactive Monitoring: Review application logs for anomalous requests or unauthorized attempts to access plugin-specific endpoints.

Compensating Controls: Utilize a Web Application Firewall (WAF) to filter malicious traffic and restrict access to plugin-related administrative interfaces from untrusted networks.

Exploitation Status

Public Exploit Available: false

Analyst Notes: As of June 23, 2026, there is no public information indicating active exploitation of this vulnerability. However, due to the nature of the flaw, the potential for exploitation is high.

Analyst Recommendation

Given the high severity of this vulnerability, administrators should treat this update with the highest urgency. Ensure all WordPress environments running the Vitepos plugin are patched immediately and verify that no unauthorized administrative accounts have been created as a result of this flaw.

---METADATA---
VENDOR: Tyche Softwares
PRODUCT: Abandoned Cart Pro for WooCommerce
AFFECTED_VERSIONS: 0 through 10.7.1
CONFIDENCE: high
MISSING: patch
PROFILE: daily@7c4e524780a4
MODEL: gemini-3.1-flash-lite
GENERATED: 2026-09-05T09:04:34.949Z
CREDITS: d.v4n_s3c (finder)
SOURCES_JSON: [{"url":"https://www.wordfence.com/threat-intel/vulnerabilities/id/b8d8aa73-2e68-4353-a603-6fb61ab3406b?source=cve","name":null,"tags":[]},{"url":"https://woocommerce.com/products/abandoned-cart-pro/","name":null,"tags":[]}]
---END_METADATA---

Description Summary:
A privilege escalation vulnerability in the Abandoned Cart Pro for WooCommerce plugin allows authenticated subscribers to manipulate SMTP settings and intercept administrative access tokens.

Executive Summary:
A critical privilege escalation vulnerability in the Abandoned Cart Pro for WooCommerce plugin allows authenticated users to hijack administrative accounts, posing a severe risk of full site compromise.

Vulnerability Details

CVE-ID: CVE-2026-81543

Affected Software: Tyche Softwares Abandoned Cart Pro for WooCommerce

Affected Versions: 0 through 10.7.1

Vulnerability: The plugin suffers from improper privilege management due to missing capability checks and nonce verification on multiple AJAX actions, allowing authenticated attackers with subscriber-level access to manipulate critical plugin settings. By rerouting SMTP traffic and intercepting auto-login links, an attacker can gain full administrative access to the WordPress environment.

Business Impact

Successful exploitation of this vulnerability results in full administrative control over the affected WordPress installation. Given the high CVSS score of 8.8, this represents a significant threat to data integrity, confidentiality, and system availability. Unauthorized access by an attacker could lead to the theft of customer data, the distribution of malicious content, and complete loss of site control, resulting in substantial reputational and financial damage.

Remediation Plan

Immediate Action: Identify if the Abandoned Cart Pro for WooCommerce plugin is installed and verify if the auto-login feature is enabled. Monitor official vendor channels for the release of a patched version and apply the update immediately upon availability.

Proactive Monitoring: Review WordPress audit logs for suspicious activity involving AJAX requests or unexpected modifications to SMTP and email settings. Monitor for any unauthorized administrative account creation or changes to user permissions.

Compensating Controls: Disable the plugin's auto-login feature if it is currently enabled to neutralize the primary attack vector. Implement a Web Application Firewall (WAF) rule to block unauthorized access to the specified AJAX endpoints (wcap_save_connector_settings, wcap_send_manual_email, etc.) for non-administrative users.

Exploitation Status

Public Exploit Available: No

Analyst Notes: As of September 5, 2026, there is no public information indicating active exploitation or a public proof-of-concept for this vulnerability. The flaw is inherently dangerous due to the combination of easily accessible AJAX endpoints and the ability to intercept sensitive administrative credentials.

Analyst Recommendation

The high severity of this vulnerability necessitates an immediate and prioritized response. Organizations utilizing this plugin should treat this as a high-priority security issue, verify their current plugin version, and take the recommended steps to disable vulnerable features while awaiting a formal patch from the vendor. Failure to address this flaw leaves the administrative layer of the website exposed to low-privileged attackers.

---METADATA---
VENDOR: Manage Ninja
PRODUCT: Fluent Forms Pro Add On Pack
AFFECTED_VERSIONS: <= 6.2.12
CONFIDENCE: high
MISSING: none
PROFILE: daily@7c4e524780a4
MODEL: gemini-3.1-flash-lite
GENERATED: 2026-09-01T09:10:19.195Z
CREDITS: Ananda Dhakal (Patchstack) | Patchstack Bug Bounty Program (finder)
SOURCES_JSON: [{"url":"https://patchstack.com/database/wordpress/plugin/fluentformpro/vulnerability/wordpress-fluent-forms-pro-add-on-pack-plugin-6-2-12-privilege-escalation-vulnerability?_s_id=cve","name":null,"tags":["vdb-entry"]}]
---END_METADATA---

Description Summary:
A privilege escalation vulnerability in the Fluent Forms Pro Add On Pack plugin for WordPress allows authenticated subscribers to gain unauthorized administrative privileges.

Executive Summary:
A critical privilege escalation vulnerability in the Fluent Forms Pro Add On Pack plugin allows authenticated subscribers to achieve elevated access, posing a severe risk to site integrity.

Vulnerability Details

CVE-ID: CVE-2026-81297

Affected Software: Manage Ninja Fluent Forms Pro Add On Pack

Affected Versions: <= 6.2.12

Vulnerability: This vulnerability, categorized as CWE-266, involves incorrect privilege assignment within the plugin. An authenticated user with subscriber-level access can manipulate the system to escalate their permissions to an administrative level.

Business Impact

Successful exploitation of this flaw allows a low-privileged subscriber to gain full administrative control over the WordPress environment. This could lead to complete system compromise, unauthorized data exfiltration, or the deployment of malicious code, severely impacting business operations and data security. With a CVSS score of 7.5, this high-severity flaw requires immediate attention to prevent unauthorized administrative actions.

Remediation Plan

Immediate Action: Update the Fluent Forms Pro Add On Pack plugin to version 6.2.13 or later immediately to resolve the privilege assignment issue.

Proactive Monitoring: Review WordPress user account logs and audit trails for unexpected administrative role changes or suspicious actions performed by accounts that were previously assigned subscriber roles.

Compensating Controls: If immediate patching is not possible, temporarily deactivate the plugin or restrict access to the site to prevent low-privileged users from interacting with the vulnerable functionality.

Exploitation Status

Public Exploit Available: No.

Analyst Notes: As of September 1, 2026, there is no public information indicating active exploitation or a public proof-of-concept for this vulnerability. The flaw is inherently exploitable because it relies on a logic error in privilege verification that can be triggered through standard user interaction.

Analyst Recommendation

The risk posed by this privilege escalation vulnerability is significant due to the potential for full administrative takeover of the affected WordPress instance. Administrators must prioritize updating the Fluent Forms Pro Add On Pack to version 6.2.13 or higher to close the security gap. Failure to apply this update leaves the platform vulnerable to unauthorized access and potential compromise.

---METADATA---
VENDOR: Manage Ninja
PRODUCT: Fluent Forms Pro Add On Pack
AFFECTED_VERSIONS: <= 6.2.12
CONFIDENCE: high
MISSING: none
PROFILE: daily@7c4e524780a4
MODEL: gemini-3.1-flash-lite
GENERATED: 2026-09-01T09:12:24.500Z
CREDITS: Ananda Dhakal (Patchstack) | Patchstack Bug Bounty Program (finder)
SOURCES_JSON: [{"url":"https://patchstack.com/database/wordpress/plugin/fluentformpro/vulnerability/wordpress-fluent-forms-pro-add-on-pack-plugin-6-2-12-broken-access-control-vulnerability?_s_id=cve","name":null,"tags":["vdb-entry"]}]
---END_METADATA---

Description Summary:
The Fluent Forms Pro Add On Pack plugin for WordPress is vulnerable to an unauthenticated broken access control flaw, allowing unauthorized integrity impacts.

Executive Summary:
A critical broken access control vulnerability in the Fluent Forms Pro Add On Pack plugin allows unauthenticated attackers to perform unauthorized actions, potentially compromising data integrity.

Vulnerability Details

CVE-ID: CVE-2026-81296

Affected Software: Manage Ninja Fluent Forms Pro Add On Pack

Affected Versions: <= 6.2.12

Vulnerability: This vulnerability is classified as CWE-862, Missing Authorization, occurring because the plugin fails to perform adequate capability checks on sensitive functions. The flaw allows unauthenticated remote attackers to bypass access controls and modify data within the plugin environment.

Business Impact

The exploitation of this vulnerability poses a significant risk to the integrity of business operations and data stored within the WordPress environment. Given the CVSS score of 7.5, which indicates high severity, unauthorized actors could manipulate form configurations or submission data, potentially leading to business process disruption or loss of sensitive customer information.

Remediation Plan

Immediate Action: Update the Fluent Forms Pro Add On Pack plugin to version 6.2.13 or later immediately to resolve the missing authorization check.

Proactive Monitoring: Review WordPress access logs for unusual requests directed at plugin-specific endpoints, particularly those originating from unknown or unauthorized IP addresses.

Compensating Controls: Deploy a Web Application Firewall (WAF) with rules configured to block suspicious traffic patterns targeting WordPress plugin endpoints until the update is applied.

Exploitation Status

Public Exploit Available: No (exploit_available: false).

Analyst Notes: As of September 1, 2026, there is no public information indicating active exploitation or a public proof-of-concept for this vulnerability. While currently unexploited, the lack of authentication requirements makes this flaw highly accessible to remote attackers, necessitating prompt remediation.

Analyst Recommendation

The high severity of this vulnerability, combined with the lack of required authentication for exploitation, necessitates immediate attention. Administrators must prioritize updating the Fluent Forms Pro Add On Pack to version 6.2.13 or higher to close this security gap and ensure the ongoing integrity of the application.

---METADATA---
VENDOR: Paul Ryan
PRODUCT: Authorizer
AFFECTED_VERSIONS: <= 3.15.1
CONFIDENCE: high
MISSING: none
PROFILE: daily@7c4e524780a4
MODEL: gemini-3.1-flash-lite
GENERATED: 2026-09-03T09:02:26.218Z
CREDITS: Steve | Patchstack Bug Bounty Program (finder)
SOURCES_JSON: [{"url":"https://patchstack.com/database/wordpress/plugin/authorizer/vulnerability/wordpress-authorizer-plugin-3-15-1-privilege-escalation-vulnerability?_s_id=cve","name":null,"tags":["vdb-entry"]}]
---END_METADATA---

Description Summary:
The Authorizer plugin for WordPress contains an unauthenticated privilege escalation vulnerability due to incorrect privilege assignment, allowing unauthorized users to gain elevated access.

Executive Summary:
An unauthenticated privilege escalation vulnerability in the Paul Ryan Authorizer plugin for WordPress poses a critical risk of full system compromise.

Vulnerability Details

CVE-ID: CVE-2026-81294

Affected Software: Paul Ryan Authorizer

Affected Versions: <= 3.15.1

Vulnerability: This flaw, categorized as CWE-266, involves an incorrect privilege assignment that allows unauthenticated attackers to escalate their permissions. The vulnerability resides within the plugin logic, permitting unauthorized actors to bypass standard authentication and authorization checks.

Business Impact

The ability for an unauthenticated user to escalate privileges creates a severe threat to data integrity, confidentiality, and availability. With a CVSS score of 9.8, this vulnerability is critical, as it allows attackers to gain administrative control over the affected WordPress instance. Such access could lead to full site takeover, data exfiltration, or the deployment of malicious software, resulting in significant reputational and operational damage.

Remediation Plan

Immediate Action: Update the WordPress Authorizer plugin to version 3.15.2 or the latest available version immediately to resolve the flawed privilege assignment.

Proactive Monitoring: Review web server and WordPress access logs for unusual administrative login patterns or unauthorized account creation attempts.

Compensating Controls: Implement a Web Application Firewall (WAF) with updated rules to detect and block malicious request patterns targeting the Authorizer plugin endpoints.

Exploitation Status

Public Exploit Available: No (exploit_available: false)

Analyst Notes: As of Sep 2, 2026, there is no public information indicating active exploitation or a public proof-of-concept for this vulnerability. While currently unexploited, the lack of authentication requirements makes this an highly attractive target for automated scanning and exploitation.

Analyst Recommendation

Given the critical CVSS severity and the potential for full administrative takeover, organizations utilizing the Authorizer plugin must prioritize this update. Ensure that the plugin is patched to at least version 3.15.2 across all production environments immediately to mitigate the risk of unauthorized access and privilege escalation.

---METADATA---
VENDOR: Passionate Programmer Peter
PRODUCT: WP Data Access
AFFECTED_VERSIONS: <= 5.5.81
CONFIDENCE: high
MISSING: none
PROFILE: daily@7c4e524780a4
MODEL: gemini-3.1-flash-lite
GENERATED: 2026-09-01T09:04:26.090Z
CREDITS: sequence_X0 | Patchstack Bug Bounty Program (finder)
SOURCES_JSON: [{"url":"https://patchstack.com/database/wordpress/plugin/wp-data-access/vulnerability/wordpress-wp-data-access-plugin-5-5-81-sql-injection-vulnerability?_s_id=cve","name":null,"tags":["vdb-entry"]}]
---END_METADATA---

Description Summary:
An unauthenticated SQL injection vulnerability in the WP Data Access plugin allows remote attackers to execute arbitrary SQL commands.

Executive Summary:
A critical SQL injection vulnerability in the WP Data Access plugin for WordPress allows unauthenticated attackers to potentially extract sensitive database information.

Vulnerability Details

CVE-ID: CVE-2026-81293

Affected Software: Passionate Programmer Peter WP Data Access

Affected Versions: <= 5.5.81

Vulnerability: This vulnerability is a classic SQL injection (CWE-89) arising from the improper neutralization of special elements in SQL commands. It allows an unauthenticated remote attacker to interact directly with the underlying database.

Business Impact

The ability to perform unauthenticated SQL injection poses a severe risk to data confidentiality and integrity. With a CVSS score of 9.3, this flaw enables unauthorized access to potentially sensitive application data, which could lead to a full compromise of the WordPress site database, regulatory non-compliance, and significant reputational damage.

Remediation Plan

Immediate Action: Update the WP Data Access plugin to version 5.5.82 or the latest available version immediately.

Proactive Monitoring: Review web server and database logs for anomalous query patterns, such as unexpected syntax characters or large data extraction attempts, originating from unknown IP addresses.

Compensating Controls: Deploy a Web Application Firewall (WAF) with updated rulesets designed to detect and block common SQL injection patterns to provide temporary protection while the update is being staged.

Exploitation Status

Public Exploit Available: Unknown

Analyst Notes: As of Aug 31, 2026, there is no public information indicating active exploitation or a public proof-of-concept for this vulnerability. While exploitation is not currently confirmed, the nature of the flaw makes it highly susceptible to automated scanning and exploitation tools.

Analyst Recommendation

Given the critical CVSS severity score of 9.3 and the lack of required authentication for exploitation, this vulnerability represents an immediate and high-priority threat. Administrators must prioritize the application of the vendor-supplied patch to version 5.5.82. Failure to update allows for trivial remote exploitation and must be addressed to maintain the security posture of the WordPress environment.

---METADATA---
VENDOR: Syed Balkhi
PRODUCT: Charitable
AFFECTED_VERSIONS: n/a through 1.8.12.1
CONFIDENCE: high
MISSING: none
PROFILE: daily@7c4e524780a4
MODEL: gemini-3.1-flash-lite
GENERATED: 2026-09-01T09:09:27.726Z
CREDITS: Noman Riffat | Patchstack Bug Bounty Program (finder)
SOURCES_JSON: [{"url":"https://patchstack.com/database/wordpress/plugin/charitable/vulnerability/wordpress-charitable-plugin-1-8-12-1-sql-injection-vulnerability?_s_id=cve","name":null,"tags":["vdb-entry"]}]
---END_METADATA---

Description Summary:
The Charitable WordPress plugin contains an SQL injection vulnerability allowing authenticated subscribers to execute unauthorized database queries.

Executive Summary:
A high-severity SQL injection vulnerability in the Charitable plugin allows authenticated subscribers to potentially extract sensitive database information.

Vulnerability Details

CVE-ID: CVE-2026-81287

Affected Software: Syed Balkhi Charitable

Affected Versions: n/a through 1.8.12.1

Vulnerability: This vulnerability is a SQL injection flaw (CWE-89) triggered via improper neutralization of special elements in database commands. It requires a user with subscriber-level privileges to interact with the vulnerable component.

Business Impact

Successful exploitation of this vulnerability can lead to the unauthorized disclosure of sensitive data stored within the WordPress database. Given the CVSS score of 8.5, this high-severity flaw poses a significant risk to data confidentiality, potentially exposing donor information or internal application data, and may lead to broader site compromise.

Remediation Plan

Immediate Action: Update the WordPress Charitable plugin to version 1.8.12.2 or higher to remediate the underlying SQL injection vulnerability.

Proactive Monitoring: Monitor database query logs for unusual syntax or high volumes of requests originating from subscriber-level user accounts.

Compensating Controls: Deploy a Web Application Firewall (WAF) with updated rulesets designed to detect and block common SQL injection patterns targeting WordPress plugins.

Exploitation Status

Public Exploit Available: Unknown

Analyst Notes: As of September 1, 2026, there is no public information indicating active exploitation or a public proof-of-concept for this vulnerability. The flaw's exploitability is limited by the requirement for authenticated subscriber access, but it remains a significant risk for platforms that allow public user registration.

Analyst Recommendation

This vulnerability presents a clear risk to the integrity and confidentiality of the WordPress database. Administrators should prioritize updating the Charitable plugin to the patched version immediately. If an immediate update is not feasible, restrict subscriber access or implement strict WAF filtering to prevent malicious SQL injection attempts.

---METADATA---
VENDOR: WC Lovers
PRODUCT: WCFM Marketplace
AFFECTED_VERSIONS: n/a through 3.8.1
CONFIDENCE: high
MISSING: none
PROFILE: daily@7c4e524780a4
MODEL: gemini-3.1-flash-lite
GENERATED: 2026-09-03T09:02:33.570Z
CREDITS: Ivaylo Atanassov | Patchstack Bug Bounty Program (finder)
SOURCES_JSON: [{"url":"https://patchstack.com/database/wordpress/plugin/wc-multivendor-marketplace/vulnerability/wordpress-wcfm-marketplace-plugin-3-8-1-sql-injection-vulnerability?_s_id=cve","name":null,"tags":["vdb-entry"]}]
---END_METADATA---

Description Summary:
WCFM Marketplace for WordPress contains an unauthenticated SQL injection vulnerability in versions 3.8.1 and earlier, allowing attackers to extract sensitive database information.

Executive Summary:
A critical unauthenticated SQL injection vulnerability in the WCFM Marketplace plugin poses a high risk of database compromise to affected WordPress sites.

Vulnerability Details

CVE-ID: CVE-2026-81286

Affected Software: WC Lovers WCFM Marketplace

Affected Versions: n/a through 3.8.1

Vulnerability: This is an improper neutralization of special elements used in an SQL command (CWE-89), which allows an unauthenticated remote attacker to execute arbitrary SQL queries against the underlying database.

Business Impact

The ability for an unauthenticated attacker to perform SQL injection poses a severe threat to data confidentiality. Successful exploitation could lead to the unauthorized exposure of sensitive site data, including user credentials, order information, or administrative metadata, potentially resulting in full site compromise and significant reputational damage. The CVSS score of 9.3 reflects the critical nature of this flaw, as it requires no authentication and allows for remote data extraction.

Remediation Plan

Immediate Action: Update the WCFM Marketplace plugin to version 3.8.2 or the latest available version immediately.

Proactive Monitoring: Review web server and database logs for suspicious query patterns, such as unexpected SQL syntax or high volumes of requests to marketplace endpoints.

Compensating Controls: Deploy a Web Application Firewall (WAF) with updated rulesets designed to detect and block SQL injection payloads targeting WordPress plugins.

Exploitation Status

Public Exploit Available: No (exploit_available: false)

Analyst Notes: As of Sep 2, 2026, there is no public information indicating active exploitation or a public proof-of-concept for this vulnerability. SQL injection flaws in WordPress plugins are frequently targeted by automated scanners, so the lack of a current public exploit does not preclude the risk of future automated attacks.

Analyst Recommendation

Given the critical CVSS severity of 9.3 and the unauthenticated nature of the attack vector, this vulnerability must be treated as a high-priority remediation task. Administrators should verify their plugin version and apply the patch to 3.8.2 or higher as soon as possible to prevent potential data breaches.

---METADATA---
VENDOR: WPMU DEV
PRODUCT: Smush Image Compression and Optimization
AFFECTED_VERSIONS: n/a through 4.2.0
CONFIDENCE: high
MISSING: none
PROFILE: daily@7c4e524780a4
MODEL: gemini-3.1-flash-lite
GENERATED: 2026-08-30T09:08:53.208Z
CREDITS: Asim Alshaya | Patchstack Bug Bounty Program (finder)
SOURCES_JSON: [{"url":"https://patchstack.com/database/wordpress/plugin/wp-smushit/vulnerability/wordpress-smush-image-compression-and-optimization-plugin-4-2-0-denial-of-service-attack-vulnerability?_s_id=cve","name":null,"tags":["vdb-entry"]}]
---END_METADATA---

Description Summary:
The Smush Image Compression and Optimization plugin for WordPress is vulnerable to an unauthenticated denial of service attack due to improper resource allocation limits.

Executive Summary:
An unauthenticated denial of service vulnerability in the Smush Image Compression and Optimization plugin permits remote attackers to exhaust system resources and degrade service availability.

Vulnerability Details

CVE-ID: CVE-2026-81285

Affected Software: WPMU DEV Smush Image Compression and Optimization

Affected Versions: n/a through 4.2.0

Vulnerability: The plugin fails to implement proper limits on resource allocation, allowing an unauthenticated remote attacker to trigger a denial of service condition by sending specifically crafted requests. This flaw originates from a failure to throttle or limit resource consumption during image processing tasks (CWE-770).

Business Impact

Successful exploitation of this vulnerability can result in significant service disruption, rendering the affected WordPress site unavailable to legitimate users. With a CVSS score of 7.5, this high-severity flaw poses a direct risk to business continuity and operational uptime, as the attack requires no authentication and can be automated by remote actors.

Remediation Plan

Immediate Action: Update the Smush Image Compression and Optimization plugin to version 4.3.0 or the latest available release immediately to apply the necessary resource handling constraints.

Proactive Monitoring: Review server access logs for repeated, suspicious requests directed at the plugin endpoints and monitor system resource usage metrics for sudden spikes in CPU or memory consumption.

Compensating Controls: Implement rate limiting at the Web Application Firewall (WAF) level to block anomalous traffic patterns and excessive requests originating from single IP addresses.

Exploitation Status

Public Exploit Available: Unknown

Analyst Notes: As of August 30, 2026, there is no public information indicating active exploitation or a public proof-of-concept for this vulnerability. While exploitation is technically straightforward due to the lack of required authentication, no documented weaponized exploit currently exists in the public domain.

Analyst Recommendation

Given the high CVSS score and the ease with which unauthenticated attackers can disrupt site operations, organizations should prioritize patching this plugin immediately. Administrators should verify that their instances are updated to version 4.3.0 or later to ensure the resource allocation flaw is effectively mitigated.

---METADATA---
VENDOR: VillaTheme
PRODUCT: Suggestion Engine for WooCommerce
AFFECTED_VERSIONS: n/a through 2.0.11
CONFIDENCE: high
MISSING: none
CREDITS: JunHee CHO | Patchstack Bug Bounty Program (finder)
SOURCES_JSON: [{"url":"https://patchstack.com/database/wordpress/plugin/woo-suggestion-engine/vulnerability/wordpress-suggestion-engine-for-woocommerce-plugin-2-0-11-sql-injection-vulnerability?_s_id=cve","name":null,"tags":["vdb-entry"]}]
---END_METADATA---

Description Summary:
A SQL injection vulnerability in the VillaTheme Suggestion Engine for WooCommerce plugin allows authenticated contributors to execute arbitrary SQL commands.

Executive Summary:
The Suggestion Engine for WooCommerce plugin is vulnerable to SQL injection, which could allow an authenticated contributor to extract sensitive database information.

Vulnerability Details

CVE-ID: CVE-2026-81277

Affected Software: VillaTheme Suggestion Engine for WooCommerce

Affected Versions: n/a through 2.0.11

Vulnerability: This vulnerability is a SQL injection (CWE-89) flaw that allows an authenticated user with contributor-level privileges to manipulate database queries. The issue exists due to improper neutralization of special elements used in SQL commands within the plugin.

Business Impact

Successful exploitation of this vulnerability can lead to the unauthorized disclosure of sensitive data stored within the WordPress database. Given the high CVSS score of 8.5, this flaw poses a significant risk to data confidentiality and could lead to a compromise of customer or administrative information.

Remediation Plan

Immediate Action: Update the Suggestion Engine for WooCommerce plugin to version 2.0.12 or the latest available version provided by VillaTheme.

Proactive Monitoring: Review database query logs for anomalous or unauthorized SQL patterns that originate from accounts with contributor-level permissions.

Compensating Controls: Deploy a Web Application Firewall with rules configured to detect and block common SQL injection payloads.

Exploitation Status

Public Exploit Available: No (exploit_available: false)

Analyst Notes: As of August 28, 2026, there is no public information indicating active exploitation or a public proof-of-concept for this vulnerability. While the vulnerability requires contributor-level authentication, the impact on database confidentiality remains high.

Analyst Recommendation

Organizations utilizing the Suggestion Engine for WooCommerce plugin should prioritize updating to version 2.0.12 immediately to eliminate this injection vector. Failure to patch may allow attackers to bypass intended access controls and compromise the integrity of the underlying database.

---METADATA---
VENDOR: Manage Ninja
PRODUCT: FluentBooking Pro
AFFECTED_VERSIONS: n/a through 2.2.4
CONFIDENCE: high
MISSING: none
CREDITS: Ananda Dhakal (Patchstack) | Patchstack Bug Bounty Program (finder)
SOURCES_JSON: [{"url":"https://patchstack.com/database/wordpress/plugin/fluent-booking-pro/vulnerability/wordpress-fluentbooking-pro-plugin-2-2-4-cross-site-request-forgery-csrf-vulnerability?_s_id=cve","name":null,"tags":["vdb-entry"]}]
---END_METADATA---

Description Summary:
FluentBooking Pro is vulnerable to unauthenticated Cross Site Request Forgery (CSRF), allowing an attacker to perform unauthorized actions on behalf of a user.

Executive Summary:
An unauthenticated Cross Site Request Forgery vulnerability in the FluentBooking Pro plugin for WordPress poses a high risk of unauthorized administrative actions.

Vulnerability Details

CVE-ID: CVE-2026-81273

Affected Software: Manage Ninja FluentBooking Pro

Affected Versions: n/a through 2.2.4

Vulnerability: The plugin fails to implement sufficient protection against CSRF attacks, allowing unauthenticated attackers to trick authenticated users into executing unintended actions via the application. This vulnerability arises from missing anti-CSRF tokens on sensitive endpoints.

Business Impact

Successful exploitation of this vulnerability can allow an attacker to modify plugin settings or perform unauthorized bookings, leading to potential data integrity loss or service disruption. With a CVSS score of 8.1, the risk is classified as High because it facilitates unauthorized state-changing operations within the WordPress environment.

Remediation Plan

Immediate Action: Update the FluentBooking Pro plugin to version 2.2.5 or later to resolve the missing token validation.

Proactive Monitoring: Review web server access logs for anomalous POST requests directed at plugin-specific endpoints, particularly those originating from external, unauthenticated sources.

Compensating Controls: Deploy a Web Application Firewall with rules configured to detect and block common CSRF patterns and unauthorized requests to the FluentBooking Pro plugin path.

Exploitation Status

Public Exploit Available: No (exploit_available unknown).

Analyst Notes: As of August 28, 2026, there is no public information indicating active exploitation or a published proof-of-concept for this vulnerability. The lack of CSRF protection makes the plugin inherently susceptible to social engineering attacks that leverage an active administrative session.

Analyst Recommendation

Given the high CVSS severity and the potential for unauthorized administrative actions, organizations utilizing FluentBooking Pro must prioritize updating to version 2.2.5 immediately. Failure to patch leaves the platform open to forced state changes that could compromise the integrity of the booking system.

---METADATA---
VENDOR: Paolo
PRODUCT: GeoDirectory
AFFECTED_VERSIONS: n/a through 2.8.176
CONFIDENCE: high
MISSING: none
CREDITS: Brian Willows | Patchstack Bug Bounty Program (finder)
SOURCES_JSON: [{"url":"https://patchstack.com/database/wordpress/plugin/geodirectory/vulnerability/wordpress-geodirectory-plugin-2-8-176-cross-site-request-forgery-csrf-vulnerability?_s_id=cve","name":null,"tags":["vdb-entry"]}]
---END_METADATA---

Description Summary:
An unauthenticated Cross-Site Request Forgery (CSRF) vulnerability exists in the GeoDirectory WordPress plugin, allowing attackers to perform unauthorized actions on behalf of users.

Executive Summary:
The GeoDirectory plugin for WordPress contains an unauthenticated CSRF vulnerability that poses a high risk to site integrity and administrative control.

Vulnerability Details

CVE-ID: CVE-2026-81271

Affected Software: Paolo GeoDirectory

Affected Versions: n/a through 2.8.176

Vulnerability: This is a Cross-Site Request Forgery (CWE-352) vulnerability that allows an unauthenticated attacker to trick an authenticated user into executing unwanted actions within the application via a crafted request.

Business Impact

The vulnerability carries a CVSS score of 8.8, reflecting its potential for significant impact on system integrity and availability. A successful exploit could allow an attacker to perform administrative actions, potentially leading to unauthorized configuration changes, data manipulation, or site compromise, which could result in severe reputational damage and operational disruption.

Remediation Plan

Immediate Action: Update the WordPress GeoDirectory plugin to version 2.8.177 or the latest available version provided by the vendor.

Proactive Monitoring: Monitor server access logs for suspicious POST or GET requests originating from external sources that appear to be performing administrative or sensitive functions.

Compensating Controls: Implement a Web Application Firewall (WAF) with robust CSRF protection rules to block malicious requests before they reach the application.

Exploitation Status

Public Exploit Available: Unknown

Analyst Notes: As of August 28, 2026, there is no public information indicating active exploitation or a public proof-of-concept for this vulnerability. The lack of proper anti-CSRF tokens in the vulnerable endpoints makes this plugin susceptible to unauthorized state-changing operations if an attacker can lure an administrator to a malicious webpage.

Analyst Recommendation

Given the high CVSS score and the nature of CSRF attacks, this vulnerability presents a serious risk to any WordPress environment utilizing the GeoDirectory plugin. Administrators are strongly urged to prioritize the update to version 2.8.177 immediately to neutralize the threat and prevent potential unauthorized administrative actions.

---METADATA---
VENDOR: WordPress
PRODUCT: Frontend File Manager Plugin
AFFECTED_VERSIONS: See vendor advisory for affected versions
---END_METADATA---

Description Summary:
The WordPress Frontend File Manager Plugin is susceptible to an authenticated arbitrary file deletion vulnerability in versions up to and including 23.

Executive Summary:
An authenticated arbitrary file deletion vulnerability in the WordPress Frontend File Manager Plugin could allow an attacker to disrupt service or cause data loss by removing critical files.

Vulnerability Details

CVE-ID: CVE-2026-8095

Affected Software: WordPress Frontend File Manager Plugin

Affected Versions: See vendor advisory for affected versions

Vulnerability: This is an authenticated vulnerability, meaning the attacker must first possess a valid user account on the WordPress instance. Once authenticated, the attacker can leverage the plugin's file management functions to delete arbitrary files from the server's filesystem.

Business Impact

This vulnerability allows for the deletion of critical system or application files, which could lead to site instability, denial of service, or the removal of security-sensitive configuration files. With a CVSS score of 8.1, the high severity reflects the potential for significant operational disruption and the ease with which an attacker can cause permanent damage to the web environment.

Remediation Plan

Immediate Action: Update the Frontend File Manager Plugin to the latest patched version immediately.

Proactive Monitoring: Review WordPress user account activities and audit file modification logs for unauthorized deletion events.

Compensating Controls: If a patch is unavailable, disable the plugin entirely and implement a Web Application Firewall (WAF) to block suspicious requests targeting file management endpoints.

Exploitation Status

Public Exploit Available: false

Analyst Notes: As of June 28, 2026, there is no public information indicating active exploitation of this vulnerability. However, due to the nature of the flaw, the potential for exploitation is high.

Analyst Recommendation

Administrators should treat this vulnerability with urgency, especially if the site allows user registration. Removing the plugin if it is not strictly required is the safest course of action until a verified update is applied.

---METADATA---
VENDOR: WordPress
PRODUCT: bpost-shipping-platform
AFFECTED_VERSIONS: before 3.2.3
CONFIDENCE: high
MISSING: none
---END_METADATA---

Description Summary:
A time-based blind SQL injection vulnerability in the bpost-shipping-platform plugin allows unauthenticated attackers to extract sensitive database information during WooCommerce order submission.

Executive Summary:
An unauthenticated SQL injection vulnerability in the bpost-shipping-platform plugin exposes sensitive database information to remote attackers.

Vulnerability Details

CVE-ID: CVE-2026-8082

Affected Software: WordPress bpost-shipping-platform

Affected Versions: before 3.2.3

Vulnerability: The plugin fails to sanitize input parameters used in SQL queries during the order submission process. This allows an unauthenticated attacker to inject malicious SQL commands and perform time-based blind queries to exfiltrate data.

Business Impact

This vulnerability carries a CVSS score of 7.5, reflecting a high risk of data breach. An attacker could potentially gain access to customer information, order details, or payment metadata, leading to significant reputational damage and regulatory non-compliance.

Remediation Plan

Immediate Action: Update the bpost-shipping-platform plugin to version 3.2.3 or later immediately.

Proactive Monitoring: Monitor database query performance and logs for anomalous patterns indicative of blind SQL injection attempts, such as unusually long response times.

Compensating Controls: Utilize a Web Application Firewall (WAF) to filter malicious input strings and block suspicious SQL injection patterns targeting the checkout process.

Exploitation Status

Public Exploit Available: Yes (a public proof-of-concept exists).

Analyst Notes: As of July 21, 2026, there is no confirmed active exploitation in the wild; however, per CISA's SSVC assessment a proof-of-concept exists, so exploitation risk should be treated as credible. The nature of blind SQL injection makes this vulnerability highly desirable for automated data scraping.

Analyst Recommendation

The presence of a public proof-of-concept elevates the risk of exploitation. Organizations using this plugin must apply the 3.2.3 update without delay to prevent unauthorized database access.

---METADATA---
VENDOR: Themeum
PRODUCT: Kirki – Freeform Page Builder, Website Builder & Customizer
AFFECTED_VERSIONS: 0 through 6.0.6
CONFIDENCE: high
MISSING: none
---END_METADATA---

Description Summary:
The Kirki WordPress plugin contains a path traversal vulnerability in the 'downloadZIP' function, allowing unauthenticated attackers to delete arbitrary files on the server.

Executive Summary:
An unauthenticated arbitrary file deletion vulnerability in the Kirki WordPress plugin (up to v6.0.6) allows attackers to disrupt services or compromise site integrity.

Vulnerability Details

CVE-ID: CVE-2026-8073

Affected Software: Themeum Kirki – Freeform Page Builder, Website Builder & Customizer

Affected Versions: 0 through 6.0.6

Vulnerability: This is a relative path traversal vulnerability (CWE-23) resulting from insufficient file path validation and a missing capability check in the 'downloadZIP' function. It allows unauthenticated users to trigger file deletion operations on the host server.

Business Impact

The ability for an unauthenticated attacker to delete arbitrary files on a web server represents a critical threat to business continuity and data integrity. With a CVSS score of 7.5, this vulnerability could be leveraged to delete configuration files, site content, or security-critical files, leading to complete site downtime or unauthorized system modification.

Remediation Plan

Immediate Action: Update the Kirki – Freeform Page Builder, Website Builder & Customizer plugin to version 6.0.7 or later immediately.

Proactive Monitoring: Review web server access logs for requests targeting the 'downloadZIP' function or suspicious path traversal patterns (e.g., ../ strings) in URI parameters.

Compensating Controls: Deploy a Web Application Firewall (WAF) with rules configured to block path traversal attempts and restrict access to plugin-specific API endpoints.

Exploitation Status

Public Exploit Available: Unknown

Analyst Notes: As of May 20, 2026, there is no public information indicating active exploitation or a public proof-of-concept for this vulnerability. The flaw is inherently dangerous due to the lack of authentication requirements and the destructive nature of the vulnerability.

Analyst Recommendation

This vulnerability should be addressed immediately, as it provides a trivial path for attackers to cause significant service disruption. Ensure the Kirki plugin is updated to the patched version (6.0.7) and perform a security audit of the WordPress installation to ensure no unauthorized files have been modified or deleted.

---METADATA---
VENDOR: CleanTalk
PRODUCT: Anti-Spam by CleanTalk plugin
AFFECTED_VERSIONS: See vendor advisory for affected versions
---END_METADATA---

Description Summary:
The Anti-Spam by CleanTalk plugin for WordPress contains an undisclosed vulnerability with a CVSS score of 8.8.

Executive Summary:
A high-severity vulnerability in the Anti-Spam by CleanTalk plugin poses a risk of unauthorized access or system impact.

Vulnerability Details

CVE-ID: CVE-2026-8071

Affected Software: CleanTalk Anti-Spam by CleanTalk

Affected Versions: See vendor advisory for affected versions

Vulnerability: The plugin is subject to a high-severity security flaw; while specific technical mechanics are pending further disclosure, vulnerabilities of this nature in security plugins often involve authentication bypass or improper access control.

Business Impact

The CVSS score of 8.8 indicates a high risk of system compromise. If exploited, an attacker could potentially bypass security controls, leading to unauthorized access to the WordPress environment, potentially compromising site integrity or sensitive visitor data.

Remediation Plan

Immediate Action: Update the Anti-Spam by CleanTalk plugin to the latest available version provided by the vendor.

Proactive Monitoring: Monitor for unusual administrative activity or changes in plugin configuration files that might indicate unauthorized tampering.

Compensating Controls: Utilize a Web Application Firewall to block suspicious traffic patterns directed at common plugin file paths.

Exploitation Status

Public Exploit Available: false

Analyst Notes: As of June 11, 2026, there is no public information indicating active exploitation of this vulnerability. However, the high CVSS score necessitates prompt attention to minimize the window of exposure.

Analyst Recommendation

Security plugins are high-value targets; therefore, this update should be treated with urgency. Please check the vendor's official release notes and apply the latest patch to ensure the continued security of your WordPress installation.

---METADATA---
VENDOR: ACF Extended
PRODUCT: Advanced Custom Fields: Extended
AFFECTED_VERSIONS: 0.9.2.2 up to (excluding) 0.9.2.7
CONFIDENCE: high
MISSING: none
PROFILE: daily@7c4e524780a4
MODEL: gemini-3.1-flash-lite
GENERATED: 2026-09-03T14:02:36.629Z
CREDITS: Jakub Herman (finder); WPScan (coordinator)
SOURCES_JSON: [{"url":"https://wpscan.com/vulnerability/929f243b-2f1c-4eca-88bc-03b1a86270ed/","name":null,"tags":["exploit","vdb-entry","technical-description"]}]
---END_METADATA---

Description Summary:
The Advanced Custom Fields: Extended WordPress plugin fails to validate user roles during registration, allowing unauthenticated attackers to register with elevated privileges and escalate to administrator.

Executive Summary:
A critical privilege escalation vulnerability in the Advanced Custom Fields: Extended plugin allows unauthenticated attackers to gain administrative control over the WordPress site.

Vulnerability Details

CVE-ID: CVE-2026-80467

Affected Software: ACF Extended Advanced Custom Fields: Extended

Affected Versions: 0.9.2.2 up to (excluding) 0.9.2.7

Vulnerability: This flaw stems from improper privilege management (CWE-269) within the plugin front-end user forms, where incomplete role validation permits unauthenticated visitors to register accounts with elevated capabilities, subsequently leading to full administrative access.

Business Impact

Successful exploitation of this vulnerability results in a total compromise of the affected WordPress instance. An attacker gaining administrative access can exfiltrate sensitive data, modify site content, install malicious backdoors, or perform further attacks against the underlying hosting infrastructure. With a CVSS score of 8.1, the high severity reflects the extreme risk posed to the confidentiality, integrity, and availability of the web application.

Remediation Plan

Immediate Action: Update the Advanced Custom Fields: Extended plugin to version 0.9.2.7 or later immediately to resolve the flawed registration logic.

Proactive Monitoring: Review WordPress user registration logs for suspicious account creations, particularly those occurring outside of standard business hours or from unexpected IP addresses.

Compensating Controls: If an immediate update is not feasible, disable public registration on the WordPress site and implement a Web Application Firewall (WAF) rule to block unauthorized traffic targeting registration endpoints.

Exploitation Status

Public Exploit Available: Unknown

Analyst Notes: As of September 2, 2026, there is no public information indicating active exploitation or a public proof-of-concept for this vulnerability. While the lack of a known exploit provides a temporary buffer, the ease of exploitation for unauthenticated users makes this a high priority for remediation.

Analyst Recommendation

The risk of unauthorized administrative access necessitates immediate attention. Administrators must verify their plugin version and apply the update to 0.9.2.7 without delay. Failure to patch this flaw leaves the entire site architecture vulnerable to total takeover, emphasizing the urgency of this maintenance task.

---METADATA---
VENDOR: bdthemes
PRODUCT: SigmaForms Pro – AI Generated Forms
AFFECTED_VERSIONS: 0 through 1.4.11
CONFIDENCE: high
MISSING: none
PROFILE: daily@7c4e524780a4
MODEL: gemini-3.1-flash-lite
GENERATED: 2026-09-02T09:01:24.774Z
CREDITS: Doan Dinh Van (finder); Hieus (finder)
SOURCES_JSON: [{"url":"https://www.wordfence.com/threat-intel/vulnerabilities/id/c714e2b3-8a96-4078-99a4-4ce620939828?source=cve","name":null,"tags":[]},{"url":"https://feedback.bdthemes.com/announcements","name":null,"tags":[]}]
---END_METADATA---

Description Summary:
The SigmaForms Pro WordPress plugin is vulnerable to unauthenticated arbitrary file deletion via path traversal, which can lead to remote code execution.

Executive Summary:
A critical vulnerability in the SigmaForms Pro plugin allows unauthenticated attackers to delete arbitrary files on the server, potentially leading to full remote code execution.

Vulnerability Details

CVE-ID: CVE-2026-78657

Affected Software: bdthemes SigmaForms Pro – AI Generated Forms

Affected Versions: 0 through 1.4.11

Vulnerability: The plugin contains a path traversal vulnerability in the delete_submission_files function that allows an unauthenticated attacker to supply a malicious file path via a form upload. This path is stored in the database and processed when an administrator deletes a submission, resulting in the unauthorized deletion of arbitrary server files.

Business Impact

The ability for an unauthenticated attacker to delete critical system files, such as wp-config.php, poses an extreme risk to business continuity and data integrity. Given the CVSS score of 9.8, this flaw is categorized as critical because it provides a direct pathway for attackers to compromise the entire web application and achieve remote code execution.

Remediation Plan

Immediate Action: Update the SigmaForms Pro – AI Generated Forms plugin to version 1.4.12 or higher immediately to resolve the path validation flaw.

Proactive Monitoring: Review server logs for suspicious form submission activity and monitor for unexpected file deletion events within the web directory.

Compensating Controls: Deploy a Web Application Firewall (WAF) with rules configured to block path traversal sequences, such as directory dots and slashes, to provide temporary protection until the update is applied.

Exploitation Status

Public Exploit Available: Unknown

Analyst Notes: As of Sep 2, 2026, there is no public information indicating active exploitation or a public proof-of-concept for this vulnerability. While exploitation requires an administrative action to trigger the deletion, the vulnerability is highly dangerous due to the lack of required authentication for the initial submission.

Analyst Recommendation

This vulnerability is highly critical and requires immediate attention to prevent potential full-system compromise. Administrators must prioritize updating the SigmaForms Pro plugin to version 1.4.12, as the risk of remote code execution through file deletion is significant and directly impacts the security posture of the WordPress environment.

---METADATA---
VENDOR: Eupago
PRODUCT: Eupago Gateway For Woocommerce
AFFECTED_VERSIONS: 0 up to (excluding) 4.7.2
CONFIDENCE: high
MISSING: none
---END_METADATA---

Description Summary:
An improper access control vulnerability (CWE-284) in the Eupago Gateway For Woocommerce WordPress plugin allows unauthenticated attackers to perform unauthorized actions.

Executive Summary:
An improper access control flaw in the Eupago Gateway For Woocommerce plugin allows unauthenticated attackers to potentially perform sensitive operations on the WordPress site.

Vulnerability Details

CVE-ID: CVE-2026-7862

Affected Software: Eupago Gateway For Woocommerce (WordPress Plugin)

Affected Versions: 0 up to (excluding) 4.7.2

Vulnerability: The plugin contains a vulnerability related to improper access control, allowing unauthenticated users to trigger functions that should be restricted. This bypasses security checks necessary for plugin operation.

Business Impact

Successful exploitation could allow an attacker to disrupt payment processing, manipulate gateway configurations, or potentially access sensitive transaction data. This poses a direct threat to the financial integrity and reputation of the e-commerce store. The CVSS score of 8.6 underscores the urgency of addressing this flaw.

Remediation Plan

Immediate Action: Update the Eupago Gateway For Woocommerce plugin to version 4.7.2 or higher immediately.

Proactive Monitoring: Review WooCommerce transaction logs and plugin configuration settings for any unauthorized changes or anomalous activity since the exposure began.

Compensating Controls: If an immediate update is not possible, disable the plugin temporarily to prevent exploitation.

Exploitation Status

Public Exploit Available: Unknown

Analyst Notes: As of May 29, 2026, there is no confirmed active exploitation in the wild; however, per CISA's SSVC assessment a proof-of-concept exists, so exploitation risk should be treated as credible. The flaw is highly accessible as it does not require authentication.

Analyst Recommendation

Given the ease of exploitability and the potential impact on payment systems, administrators must update the plugin to the latest version immediately. Failure to patch may result in the compromise of financial data and site functionality.

---METADATA---
VENDOR: KlbTheme
PRODUCT: Total Donations
AFFECTED_VERSIONS: 0 through 2.0.5
CONFIDENCE: high
MISSING: patch
---END_METADATA---

Description Summary:
The Total Donations plugin for WordPress is vulnerable to unauthenticated privilege escalation, allowing remote attackers to gain administrative access.

Executive Summary:
The Total Donations plugin for WordPress contains a critical privilege escalation vulnerability that allows unauthenticated attackers to gain administrative control over the affected site.

Vulnerability Details

CVE-ID: CVE-2026-78570

Affected Software: KlbTheme Total Donations

Affected Versions: 0 through 2.0.5

Vulnerability: The plugin suffers from improper privilege management, which allows unauthenticated attackers to manipulate user roles. This vulnerability can be leveraged to escalate an attacker's privileges to that of an administrator.

Business Impact

This vulnerability carries a CVSS score of 9.8, reflecting its high impact and ease of exploitability. An attacker obtaining administrative access can compromise sensitive data, modify site content, or inject malicious scripts, potentially leading to total site compromise and significant reputational damage.

Remediation Plan

Immediate Action: As no patched version is currently available, administrators should immediately deactivate and remove the Total Donations plugin until a secure update is released by KlbTheme.

Proactive Monitoring: Audit user accounts for unauthorized administrative accounts created or modified recently and review security logs for suspicious login activity.

Compensating Controls: Use a Web Application Firewall (WAF) to block suspicious requests targeting plugin-specific AJAX actions or administrative endpoints.

Exploitation Status

Public Exploit Available: Unknown

Analyst Notes: As of Aug 25, 2026, there is no public information indicating active exploitation or a public proof-of-concept for this vulnerability. The flaw is inherently dangerous due to the lack of required authentication for privilege escalation.

Analyst Recommendation

Given the lack of a vendor-provided patch, the most effective mitigation is the immediate removal of the affected plugin. Administrators must ensure that no unauthorized administrative accounts exist and maintain a heightened state of vigilance for any attempts to manipulate user permissions.

---METADATA---
VENDOR: KlbTheme
PRODUCT: Total Donations
AFFECTED_VERSIONS: 0 through 2.0.5
CONFIDENCE: high
MISSING: none
---END_METADATA---

Description Summary:
The Total Donations plugin for WordPress contains an SQL injection vulnerability that allows unauthenticated attackers to extract sensitive database information.

Executive Summary:
A critical SQL injection vulnerability in the KlbTheme Total Donations WordPress plugin allows unauthenticated attackers to compromise sensitive database contents.

Vulnerability Details

CVE-ID: CVE-2026-78568

Affected Software: KlbTheme Total Donations

Affected Versions: 0 through 2.0.5

Vulnerability: The plugin fails to properly sanitize user supplied parameters before incorporating them into SQL queries. This allows unauthenticated attackers to execute arbitrary SQL commands against the backend database.

Business Impact

Successful exploitation of this vulnerability permits unauthorized access to sensitive information stored within the WordPress database. Given the CVSS score of 9.8, this flaw presents a critical risk that could lead to full database compromise, including administrative credentials and customer data, resulting in significant reputational and operational damage.

Remediation Plan

Immediate Action: Update the KlbTheme Total Donations plugin to the latest version immediately to ensure all SQL queries are properly parameterized.

Proactive Monitoring: Monitor database query logs for unusual patterns or syntax, such as unexpected UNION or SELECT statements, that may indicate exploitation attempts.

Compensating Controls: Deploy a Web Application Firewall (WAF) with updated rulesets to detect and block common SQL injection payloads targeting WordPress plugins.

Exploitation Status

Public Exploit Available: Unknown.

Analyst Notes: As of Aug 25, 2026, there is no public information indicating active exploitation or a public proof-of-concept for this vulnerability. The flaw is inherently dangerous due to its unauthenticated nature and the ability to manipulate core database operations.

Analyst Recommendation

This vulnerability represents a severe threat to data integrity and confidentiality. Administrators must prioritize updating the plugin to the latest available version to mitigate the risk of unauthorized data extraction, as this entry point provides a direct path for attackers to bypass application security.

---METADATA---
VENDOR: Edge-Themes
PRODUCT: Shuffle
AFFECTED_VERSIONS: 0 through 1.8
CONFIDENCE: high
MISSING: none
---END_METADATA---

Description Summary:
The Edge-Themes Shuffle WordPress theme is vulnerable to Local File Inclusion, allowing unauthenticated attackers to potentially access or execute arbitrary files on the server.

Executive Summary:
A critical Local File Inclusion vulnerability in the Edge-Themes Shuffle WordPress theme poses a significant risk of unauthorized file access and remote code execution.

Vulnerability Details

CVE-ID: CVE-2026-78566

Affected Software: Edge-Themes Shuffle

Affected Versions: 0 through 1.8

Vulnerability: This vulnerability involves the improper control of filenames for include statements, which allows an unauthenticated attacker to manipulate file paths. This flaw could lead to the inclusion of malicious files or the exposure of sensitive server configuration data.

Business Impact

The exploitation of this vulnerability could lead to a complete compromise of the WordPress installation, including unauthorized access to sensitive data and potential remote code execution. Given the high CVSS score of 8.1, this issue represents a major security risk that could result in significant downtime, data breaches, and reputational harm to the organization.

Remediation Plan

Immediate Action: Organizations using the Shuffle theme must confirm if they are running version 1.8 or lower and immediately update to a secure version if available or remove the theme.

Proactive Monitoring: Security teams should audit web server logs for suspicious requests containing directory traversal sequences, such as "../", which are commonly used in LFI attacks.

Compensating Controls: Deploy a Web Application Firewall (WAF) with rules configured to block common directory traversal patterns and unauthorized file inclusion attempts.

Exploitation Status

Public Exploit Available: No confirmed public exploit exists in our curated sources.

Analyst Notes: As of August 25, 2026, there is no public information indicating active exploitation or a public proof-of-concept for this vulnerability. While currently unexploited, the nature of the flaw makes it a high-value target for automated scanning and exploitation.

Analyst Recommendation

The severity of this vulnerability necessitates immediate attention. Administrators should prioritize identifying and patching all instances of the Shuffle theme to prevent unauthorized access. If an update is not immediately available, disabling the theme is the most effective temporary mitigation.

---METADATA---
VENDOR: Mikado-Themes
PRODUCT: Verdure Core
AFFECTED_VERSIONS: 0 through 1.2
CONFIDENCE: high
MISSING: none
---END_METADATA---

Description Summary:
The Verdure Core plugin for WordPress is vulnerable to Local File Inclusion, which could allow an unauthenticated attacker to access sensitive files on the server.

Executive Summary:
The Verdure Core WordPress plugin is susceptible to a Local File Inclusion vulnerability that could allow unauthorized access to sensitive system files.

Vulnerability Details

CVE-ID: CVE-2026-78562

Affected Software: Mikado-Themes Verdure Core

Affected Versions: 0 through 1.2

Vulnerability: This is a Local File Inclusion (LFI) vulnerability (CWE-98). It occurs because the plugin improperly controls filenames used in include or require statements, allowing an attacker to include arbitrary files from the server.

Business Impact

An LFI vulnerability can lead to the exposure of sensitive configuration files, credentials, or other internal data. With a CVSS score of 8.1, this represents a significant threat to data confidentiality and could serve as a precursor to further system exploitation.

Remediation Plan

Immediate Action: Update the Verdure Core plugin to the latest version to address the file inclusion flaw.

Proactive Monitoring: Monitor server logs for directory traversal patterns (e.g., ../) or attempts to access unexpected file paths within the WordPress installation.

Compensating Controls: Use a WAF to block requests that contain path traversal sequences or attempts to access restricted system files.

Exploitation Status

Public Exploit Available: Unknown.

Analyst Notes: As of August 25, 2026, there is no public information indicating active exploitation or a public proof-of-concept for this vulnerability. LFI vulnerabilities are inherently dangerous as they can lead to sensitive information disclosure or remote code execution depending on the server configuration.

Analyst Recommendation

Administrators must treat this LFI vulnerability with high urgency. Ensure that the Verdure Core plugin is updated to the latest version immediately to mitigate the risk of unauthorized file access and potential system-wide compromise.

---METADATA---
VENDOR: Elated-Themes
PRODUCT: Mane
AFFECTED_VERSIONS: 0 through 1.7
CONFIDENCE: high
MISSING: none
---END_METADATA---

Description Summary:
The Elated-Themes Mane WordPress theme contains a Local File Inclusion vulnerability, enabling unauthenticated attackers to potentially read or execute arbitrary files on the underlying web server.

Executive Summary:
A high-severity Local File Inclusion flaw in the Elated-Themes Mane WordPress theme creates a significant risk of unauthorized server access and potential remote code execution.

Vulnerability Details

CVE-ID: CVE-2026-78478

Affected Software: Elated-Themes Mane

Affected Versions: 0 through 1.7

Vulnerability: The vulnerability stems from improper input validation during file inclusion processes, allowing an unauthenticated attacker to inject malicious file paths. This flaw enables the attacker to manipulate the file system interactions of the application.

Business Impact

Successful exploitation allows an attacker to bypass authentication and access sensitive files on the host server, leading to potential data theft or full system compromise. With a CVSS score of 8.1, this vulnerability poses a high risk to organizational security, potentially leading to service disruption and the exposure of proprietary information.

Remediation Plan

Immediate Action: Review all WordPress installations for the Mane theme and update to the latest patched version immediately.

Proactive Monitoring: Monitor server logs for unusual file access patterns or attempts to access configuration files that should not be exposed to the web directory.

Compensating Controls: Utilize a Web Application Firewall to filter incoming HTTP requests and block attempts to traverse directories or include unauthorized local files.

Exploitation Status

Public Exploit Available: No confirmed public exploit exists in our curated sources.

Analyst Notes: As of August 25, 2026, there is no public information indicating active exploitation or a public proof-of-concept for this vulnerability. The vulnerability is inherently dangerous, as LFI flaws are frequently targeted for initial access.

Analyst Recommendation

Security teams must treat this vulnerability with high priority due to the potential for total system compromise. Ensure that all plugins and themes are regularly updated and that unnecessary themes are removed from the production environment to reduce the attack surface.

---METADATA---
VENDOR: MVPThemes
PRODUCT: Jawn
AFFECTED_VERSIONS: 0 through 1.4.2
CONFIDENCE: high
MISSING: patch
---END_METADATA---

Description Summary:
The Jawn theme for WordPress is susceptible to an unauthenticated privilege escalation vulnerability, allowing attackers to gain administrative control.

Executive Summary:
A critical privilege escalation vulnerability in the MVPThemes Jawn theme allows unauthenticated attackers to elevate their privileges to administrator status.

Vulnerability Details

CVE-ID: CVE-2026-78477

Affected Software: MVPThemes Jawn

Affected Versions: 0 through 1.4.2

Vulnerability: This is an incorrect privilege assignment vulnerability (CWE-266) that permits unauthenticated users to modify their account roles or gain unauthorized access to administrative functions.

Business Impact

A CVSS score of 9.8 reflects the extreme impact of this vulnerability, as it allows for the complete takeover of the WordPress instance by an unauthenticated attacker. Unauthorized administrative access can lead to the theft of customer data, the defacement of the website, or the redirection of traffic to malicious external sites.

Remediation Plan

Immediate Action: Update the Jawn theme to the latest version as soon as an update is released by the vendor.

Proactive Monitoring: Audit WordPress user accounts for unauthorized administrative users and monitor for suspicious authentication logs or password changes.

Compensating Controls: Implement strict access controls and consider disabling user registration or limiting administrative access to known IP addresses while a patch is awaited.

Exploitation Status

Public Exploit Available: Unknown

Analyst Notes: As of Aug 25, 2026, there is no public information indicating active exploitation or a public proof-of-concept for this vulnerability. The flaw's ability to grant full administrative privileges without authentication makes it a high-priority target for attackers.

Analyst Recommendation

Administrators must treat this vulnerability with the highest urgency. Ensure that the MVPThemes Jawn theme is patched to the latest version immediately upon the release of a fix, and conduct a thorough audit of all existing user accounts to ensure no unauthorized administrative access has already occurred.

---METADATA---
VENDOR: WordPress
PRODUCT: 12 Step Meeting List
AFFECTED_VERSIONS: 3.17 up to (excluding) 3.19.17
CONFIDENCE: high
MISSING: none
CREDITS: Huseyn (finder); WPScan (coordinator)
SOURCES_JSON: [{"url":"https://wpscan.com/vulnerability/27de9242-d60e-42e8-a3a5-e355bfc00393/","name":null,"tags":["exploit","vdb-entry","technical-description"]}]
---END_METADATA---

Description Summary:
The 12 Step Meeting List plugin for WordPress is vulnerable to Stored Cross-Site Scripting (XSS) due to improper sanitization of user-submitted data stored in activity logs.

Executive Summary:
The 12 Step Meeting List WordPress plugin contains a high-severity stored cross-site scripting vulnerability that allows unauthenticated attackers to execute malicious scripts in an administrator's browser session.

Vulnerability Details

CVE-ID: CVE-2026-78333

Affected Software: WordPress 12 Step Meeting List

Affected Versions: 3.17 up to (excluding) 3.19.17

Vulnerability: This is a Stored Cross-Site Scripting (CWE-79) vulnerability where unauthenticated users can inject malicious payloads into the plugin activity log. The payload executes when an administrator views the log within the WordPress dashboard.

Business Impact

Successful exploitation allows an attacker to execute arbitrary scripts in the context of an administrator session. This could lead to full site compromise, unauthorized administrative actions, or the creation of rogue administrator accounts, severely impacting business operations and data integrity. The CVSS score of 8.8 reflects the high potential for impact on confidentiality, integrity, and availability.

Remediation Plan

Immediate Action: Update the 12 Step Meeting List plugin to version 3.19.17 or later to ensure proper input sanitization.

Proactive Monitoring: Review administrative audit logs for unusual activity or unauthorized configuration changes that may indicate a compromised session.

Compensating Controls: Deploy a Web Application Firewall (WAF) with rules configured to block common XSS patterns and malicious script injections targeting the WordPress administration interface.

Exploitation Status

Public Exploit Available: No

Analyst Notes: As of August 28, 2026, there is no public information indicating active exploitation or a public proof-of-concept for this vulnerability. The vulnerability is inherently dangerous because it targets the trust relationship between the application log and the administrative user.

Analyst Recommendation

Given the potential for administrative account takeover, this vulnerability poses a significant risk to site security. Administrators should prioritize updating the 12 Step Meeting List plugin immediately to the fixed version to prevent potential exploitation of this cross-site scripting flaw.

---METADATA---
VENDOR: LikeBtn
PRODUCT: Like Button Rating
AFFECTED_VERSIONS: n/a through 2.6.61
CONFIDENCE: high
MISSING: none
CREDITS: daroo | Patchstack Bug Bounty Program (finder)
SOURCES_JSON: [{"url":"https://patchstack.com/database/wordpress/plugin/likebtn-like-button/vulnerability/wordpress-like-button-rating-plugin-2-6-61-sql-injection-vulnerability?_s_id=cve","name":null,"tags":["vdb-entry"]}]
---END_METADATA---

Description Summary:
A SQL injection vulnerability exists in the Like Button Rating plugin for WordPress, allowing authenticated subscribers to execute arbitrary SQL commands.

Executive Summary:
The Like Button Rating plugin for WordPress is vulnerable to an SQL injection flaw that allows authenticated attackers to potentially compromise sensitive database information.

Vulnerability Details

CVE-ID: CVE-2026-78285

Affected Software: LikeBtn Like Button Rating

Affected Versions: n/a through 2.6.61

Vulnerability: The plugin suffers from improper neutralization of special elements used in an SQL command, classified as CWE-89. This vulnerability allows an attacker with Subscriber-level privileges to inject malicious SQL queries via the application.

Business Impact

Successful exploitation of this vulnerability can result in unauthorized access to sensitive database content, potentially leading to data breaches or the exposure of private user information. With a CVSS score of 8.5, this high-severity flaw represents a significant risk to the integrity and confidentiality of the WordPress environment.

Remediation Plan

Immediate Action: Update the WordPress Like Button Rating plugin to version 2.6.62 or later immediately to resolve the identified security gap.

Proactive Monitoring: Review database access logs for unusual query patterns or unexpected syntax that may indicate automated SQL injection attempts.

Compensating Controls: Deploy a Web Application Firewall (WAF) with rules configured to detect and block common SQL injection patterns targeting WordPress plugins.

Exploitation Status

Public Exploit Available: No (exploit_available: false).

Analyst Notes: As of August 28, 2026, there is no public information indicating active exploitation or a public proof-of-concept for this vulnerability. While the vulnerability is restricted to authenticated users, the potential for database-wide impact necessitates prompt patching.

Analyst Recommendation

This vulnerability presents a clear risk to data security for any site utilizing the affected plugin. Administrators should prioritize updating to version 2.6.62 to eliminate the SQL injection vector. Failure to apply this update leaves the underlying database exposed to unauthorized query execution by any authenticated subscriber.

---METADATA---
VENDOR: Stylemix
PRODUCT: MasterStudy LMS
AFFECTED_VERSIONS: n/a through 3.7.42
CONFIDENCE: high
MISSING: none
---END_METADATA---

Description Summary:
The MasterStudy LMS plugin for WordPress contains an unauthenticated arbitrary file deletion vulnerability due to improper path traversal validation.

Executive Summary:
An unauthenticated path traversal vulnerability in the Stylemix MasterStudy LMS plugin allows remote attackers to delete arbitrary files on the server, posing a significant risk to site integrity.

Vulnerability Details

CVE-ID: CVE-2026-78284

Affected Software: Stylemix MasterStudy LMS

Affected Versions: n/a through 3.7.42

Vulnerability: This flaw is classified as a CWE-22 Improper Limitation of a Pathname to a Restricted Directory (Path Traversal). It allows an unauthenticated attacker to manipulate file paths and trigger the deletion of files outside the intended directory, potentially leading to a complete denial of service or site corruption.

Business Impact

Successful exploitation of this vulnerability could lead to the deletion of critical system or application files, resulting in severe service disruption and site unavailability. With a CVSS score of 8.6, this is a high-severity issue because it requires no authentication and can be exploited over the network with low complexity.

Remediation Plan

Immediate Action: Update the WordPress MasterStudy LMS plugin to version 3.7.43 or later to apply the necessary security patch.

Proactive Monitoring: Review web server and WordPress access logs for unusual requests targeting file paths or attempts to access restricted system directories.

Compensating Controls: Implement a Web Application Firewall (WAF) with rules configured to block path traversal sequences, such as dot-dot-slash patterns, to mitigate potential exploitation attempts.

Exploitation Status

Public Exploit Available: No confirmed public exploit in the available data.

Analyst Notes: As of August 25, 2026, there is no public information indicating active exploitation or a public proof-of-concept for this vulnerability. The lack of authentication requirements makes this an attractive target for automated scanning and mass exploitation campaigns.

Analyst Recommendation

Given the high CVSS score and the ease of exploitation, immediate action is required to secure affected installations. System administrators should prioritize updating the plugin to the latest version to prevent potential site destruction by unauthorized actors.

---METADATA---
VENDOR: ManageNinja
PRODUCT: FluentCRM Pro
AFFECTED_VERSIONS: n/a through 3.1.12
CONFIDENCE: high
MISSING: none
---END_METADATA---

Description Summary:
An SQL injection vulnerability in the FluentCRM Pro plugin allows authenticated authors to execute arbitrary database queries.

Executive Summary:
An authenticated SQL injection vulnerability in the FluentCRM Pro plugin could allow authorized authors to manipulate database queries and potentially access sensitive data.

Vulnerability Details

CVE-ID: CVE-2026-78270

Affected Software: ManageNinja FluentCRM Pro

Affected Versions: n/a through 3.1.12

Vulnerability: This vulnerability is a SQL injection (CWE-89) that occurs due to insufficient input validation. It requires high-privileged (Author) access, allowing the attacker to interact with the backend database in an unauthorized manner.

Business Impact

The vulnerability allows for potential data exfiltration from the CRM database, which often contains highly sensitive customer information and marketing data. With a CVSS score of 7.6, the risk of data compromise is significant, potentially leading to regulatory non-compliance and reputational damage.

Remediation Plan

Immediate Action: Update the FluentCRM Pro plugin to version 3.1.13 or later immediately.

Proactive Monitoring: Review database logs for unusual query activity and audit the permissions of all accounts with Author-level access.

Compensating Controls: Utilize a Web Application Firewall to filter malicious SQL syntax from incoming HTTP requests.

Exploitation Status

Public Exploit Available: No (exploit_available: false)

Analyst Notes: As of August 25, 2026, there is no public information indicating active exploitation or a public proof-of-concept for this vulnerability. While the exploit requires Author-level privileges, the potential impact on customer data necessitates a rapid patching cycle.

Analyst Recommendation

Security teams must prioritize updating this plugin to the latest version. Given the high-privilege requirement, it is also recommended to review existing user roles within the WordPress environment to ensure that only trusted personnel hold Author-level access.

---METADATA---
VENDOR: Extend
PRODUCT: Lead Generation Contact Widget & AI Chatbot (SiteLeads)
AFFECTED_VERSIONS: n/a through 1.2.0
CONFIDENCE: high
MISSING: none
---END_METADATA---

Description Summary:
The SiteLeads WordPress plugin is vulnerable to unauthenticated sensitive data exposure, allowing unauthorized access to system information via the plugin's interface.

Executive Summary:
A critical unauthenticated information disclosure vulnerability in the SiteLeads WordPress plugin exposes sensitive system data, posing a significant risk of reconnaissance and potential further exploitation.

Vulnerability Details

CVE-ID: CVE-2026-78268

Affected Software: Extend Lead Generation Contact Widget & AI Chatbot: Chat Button, Phone Call, Telegram, Email – SiteLeads

Affected Versions: n/a through 1.2.0

Vulnerability: The plugin suffers from an exposure of sensitive system information (CWE-497), which can be triggered by an unauthenticated attacker via a network-based request.

Business Impact

Successful exploitation allows unauthorized parties to harvest sensitive system information, which facilitates targeted attacks against the hosting environment. Given the CVSS score of 7.5, this high-severity flaw requires immediate attention to prevent the compromise of infrastructure details that could lead to full system takeover.

Remediation Plan

Immediate Action: Update the SiteLeads plugin to version 1.2.1 or later immediately.

Proactive Monitoring: Review web server access logs for unusual traffic patterns or unauthorized requests directed at plugin-specific endpoints.

Compensating Controls: Implement a Web Application Firewall (WAF) rule to block unauthorized access to the plugin directory and sensitive API endpoints until the update is applied.

Exploitation Status

Public Exploit Available: Unknown

Analyst Notes: As of August 25, 2026, there is no public information indicating active exploitation or a public proof-of-concept for this vulnerability. The flaw's unauthenticated nature makes it highly accessible to automated scanners.

Analyst Recommendation

The vulnerability presents a clear risk to data confidentiality and infrastructure security. Administrators must prioritize updating to version 1.2.1 to close this exposure vector and prevent potential reconnaissance activities.

---METADATA---
VENDOR: Cozmoslabs
PRODUCT: TranslatePress
AFFECTED_VERSIONS: n/a through 3.3.2
CONFIDENCE: high
MISSING: none
---END_METADATA---

Description Summary:
The TranslatePress WordPress plugin contains an unauthenticated privilege escalation vulnerability, allowing remote attackers to gain unauthorized administrative access.

Executive Summary:
A critical privilege escalation flaw in the TranslatePress WordPress plugin allows unauthenticated attackers to obtain unauthorized administrative privileges.

Vulnerability Details

CVE-ID: CVE-2026-78267

Affected Software: Cozmoslabs TranslatePress

Affected Versions: n/a through 3.3.2

Vulnerability: This vulnerability involves incorrect privilege assignment (CWE-266) within the TranslatePress plugin. It permits an unauthenticated attacker to escalate their privileges to an administrative level, effectively granting them full control over the affected WordPress installation.

Business Impact

A successful exploit provides an attacker with complete control over the WordPress site, leading to potential data theft, site defacement, or the installation of malicious software. With a CVSS score of 9.8, this vulnerability poses an extreme risk to the integrity and availability of the entire web platform.

Remediation Plan

Immediate Action: Update the TranslatePress plugin to version 3.3.3 or the latest available version immediately.

Proactive Monitoring: Audit user account creation logs for suspicious administrative account activity or unauthorized modifications to site configurations.

Compensating Controls: Utilize a Web Application Firewall (WAF) to detect and block common privilege escalation patterns targeting WordPress plugins.

Exploitation Status

Public Exploit Available: No (exploit_available: false)

Analyst Notes: As of Aug 24, 2026, there is no public information indicating active exploitation or a public proof-of-concept for this vulnerability. The vulnerability is highly severe because it allows for total system compromise without any prior authentication.

Analyst Recommendation

Given the critical severity of this privilege escalation flaw, immediate remediation is required. Organizations should update the plugin without delay to prevent potential site takeover and ensure that all administrative accounts are reviewed for signs of unauthorized activity.

---METADATA---
VENDOR: StoreGrowth
PRODUCT: StoreGrowth (WordPress Plugin)
AFFECTED_VERSIONS: StoreGrowth WordPress plugin before 2.1.2
CONFIDENCE: high
MISSING: none
PROFILE: grounded@2cca291e317a
MODEL: gemini-3.1-flash-lite
GENERATED: 2026-09-02T09:35:02.173Z
CREDITS: Shikhali Jamalzade (finder); WPScan (coordinator)
SOURCES_JSON: [{"url":"https://wpscan.com/vulnerability/15d1a53b-c5f3-4509-9889-ddc48507df35/","name":null,"tags":["exploit","vdb-entry","technical-description"]}]
---END_METADATA---

Description Summary:
The StoreGrowth WordPress plugin fails to validate product prices on unauthenticated actions, allowing attackers to modify cart totals via the BOGO offer feature.

Executive Summary:
A critical vulnerability in the StoreGrowth WordPress plugin allows unauthenticated attackers to manipulate product pricing during checkout, posing a significant financial risk to e-commerce operations.

Vulnerability Details

CVE-ID: CVE-2026-78137

Affected Software: StoreGrowth WordPress plugin

Affected Versions: StoreGrowth WordPress plugin before 2.1.2

Vulnerability: The plugin suffers from improper server-side validation of browser-supplied price parameters during unauthenticated checkout actions. This flaw allows an unauthenticated attacker to inject arbitrary prices into the shopping cart, which are subsequently honored during the payment process when the BOGO offer feature is active.

Business Impact

This vulnerability carries a CVSS score of 7.5, reflecting its high impact on the integrity of financial transactions. Successful exploitation enables unauthorized price manipulation, which can lead to direct revenue loss, inventory depletion, and potential legal or compliance issues regarding transaction records. The ability for unauthenticated actors to perform this attack without specialized access makes it a high-priority risk for any organization utilizing this plugin.

Remediation Plan

Immediate Action: Update the StoreGrowth plugin to version 2.1.2 or later immediately to implement proper server-side price validation.

Proactive Monitoring: Review transaction logs for anomalous checkout totals or unusually low-priced orders that do not align with current promotional campaigns.

Compensating Controls: Deploy a Web Application Firewall (WAF) with rules configured to inspect and block suspicious POST requests directed at the plugin checkout endpoints, or temporarily disable the BOGO offer feature until the patch is applied.

Exploitation Status

Public Exploit Available: No

Analyst Notes: As of August 27, 2026, there is no public information indicating active exploitation or a public proof-of-concept for this vulnerability. The flaw is inherently dangerous due to its lack of authentication requirements and direct impact on the checkout flow.

Analyst Recommendation

Given the ease of exploitation and the direct financial impact, administrators must prioritize upgrading to version 2.1.2. Failure to patch allows attackers to bypass standard store pricing, directly impacting the bottom line. Security teams should verify that all instances of the StoreGrowth plugin are updated across their environment to eliminate this vector of attack.

---METADATA---
VENDOR: DynamiApps
PRODUCT: Frontend Admin by DynamiApps
AFFECTED_VERSIONS: 0 through 3.29.2
CONFIDENCE: high
MISSING: none
---END_METADATA---

Description Summary:
A missing authorization vulnerability in the Frontend Admin by DynamiApps WordPress plugin allows authenticated users to bypass access controls.

Executive Summary:
An authorization bypass vulnerability in the Frontend Admin by DynamiApps plugin for WordPress allows authenticated attackers to perform unauthorized actions.

Vulnerability Details

CVE-ID: CVE-2026-7802

Affected Software: DynamiApps Frontend Admin

Affected Versions: 0 through 3.29.2

Vulnerability: The plugin suffers from a missing authorization flaw (CWE-862). This vulnerability requires the attacker to have at least low-level authenticated access to the WordPress environment to successfully bypass security checks.

Business Impact

With a CVSS score of 8.8, this vulnerability allows an authenticated user to perform actions they are not authorized to access, potentially leading to unauthorized data modification or administrative privilege escalation. This represents a significant risk to site integrity and data security, particularly in multi-user WordPress environments.

Remediation Plan

Immediate Action: Update the "Frontend Admin by DynamiApps" plugin to version 3.29.3 or later immediately.

Proactive Monitoring: Review WordPress user activity logs for suspicious actions performed by lower-privileged accounts that deviate from standard operational behavior.

Compensating Controls: Utilize a Web Application Firewall (WAF) to block suspicious requests targeting plugin-specific PHP files and administrative functions.

Exploitation Status

Public Exploit Available: Unknown

Analyst Notes: As of May 28, 2026, there is no public information indicating active exploitation or a public proof-of-concept for this vulnerability. However, the flaw's existence in a widely used plugin type necessitates prompt remediation.

Analyst Recommendation

Administrators must update the affected plugin to version 3.29.3 immediately to close the authorization gap. Failure to do so exposes the site to potential unauthorized actions by authenticated users who may abuse the missing capability checks.

---METADATA---
VENDOR: Mailgun
PRODUCT: Mailgun for WordPress
AFFECTED_VERSIONS: 0 through 2.2.0
CONFIDENCE: high
MISSING: none
---END_METADATA---

Description Summary:
A Server-Side Request Forgery (SSRF) vulnerability in the Mailgun for WordPress plugin allows unauthenticated attackers to perform unauthorized API actions, potentially leading to account takeover.

Executive Summary:
A critical SSRF vulnerability in the Mailgun for WordPress plugin permits unauthenticated attackers to manipulate the site API and perform account takeovers.

Vulnerability Details

CVE-ID: CVE-2026-78003

Affected Software: Mailgun for WordPress

Affected Versions: 0 through 2.2.0

Vulnerability: The plugin contains an SSRF vulnerability in the add_list function due to insufficient input validation. An unauthenticated attacker can send crafted POST requests to the Mailgun API, facilitating the creation of email-forwarding routes that intercept sensitive communications.

Business Impact

This flaw poses a severe threat to site security, as it allows attackers to intercept password reset emails and perform full administrator account takeovers. Given the CVSS score of 9.8, the potential for total loss of site control and subsequent data theft makes this a high-priority incident for all WordPress administrators.

Remediation Plan

Immediate Action: Update the Mailgun for WordPress plugin to version 2.2.1 or later immediately.

Proactive Monitoring: Review WordPress audit logs for unexpected account modifications, password reset requests, or changes to email-forwarding configurations.

Compensating Controls: Deploy a Web Application Firewall (WAF) with rules designed to detect and block malicious POST requests containing path traversal patterns directed toward plugin-specific endpoints.

Exploitation Status

Public Exploit Available: Unknown (no confirmed public exploit in available data)

Analyst Notes: As of Aug 22, 2026, there is no public information indicating active exploitation or a public proof-of-concept for this vulnerability. The flaw is inherently dangerous due to the lack of required authentication for exploitation.

Analyst Recommendation

This vulnerability is highly critical due to the ease with which an attacker can escalate to full site administration. All users of the Mailgun for WordPress plugin must update to version 2.2.1 without delay to prevent potential account takeover and unauthorized email interception.

---METADATA---
VENDOR: WordPress
PRODUCT: Order Tip for WooCommerce
AFFECTED_VERSIONS: 0 up to 1.6.0
CONFIDENCE: high
MISSING: none
CREDITS: Shikhali Jamalzade (finder); WPScan (coordinator)
SOURCES_JSON: [{"url":"https://wpscan.com/vulnerability/630de65a-d3ca-4690-a21a-985616ebfad1/","name":null,"tags":["exploit","vdb-entry","technical-description"]}]
---END_METADATA---

Description Summary:
The Order Tip for WooCommerce plugin lacks capability checks and path restrictions, allowing authenticated users with Shop Manager privileges to delete arbitrary files on the server.

Executive Summary:
A critical vulnerability in the Order Tip for WooCommerce plugin allows authenticated users to perform unauthorized arbitrary file deletions, potentially leading to a full site compromise.

Vulnerability Details

CVE-ID: CVE-2026-77693

Affected Software: WordPress Order Tip for WooCommerce

Affected Versions: 0 up to 1.6.0

Vulnerability: This flaw involves an improper check of file paths and user capabilities (CWE-73), which permits users with the Shop Manager role or higher to delete critical server files. The vulnerability requires the attacker to be authenticated as a user with at least Shop Manager privileges.

Business Impact

The ability to delete arbitrary files poses a severe risk to business continuity and data integrity. An attacker could remove essential application files or configuration data to disable the site (Denial of Service) or manipulate the environment to achieve remote code execution. Given the CVSS score of 8.7, this vulnerability is classified as High severity and represents a significant threat to the availability and integrity of the WordPress installation.

Remediation Plan

Immediate Action: Update the Order Tip for WooCommerce plugin to version 1.6.0 or higher immediately.

Proactive Monitoring: Monitor server logs for suspicious file deletion requests or unauthorized access patterns involving the plugin directory.

Compensating Controls: Implement a Web Application Firewall (WAF) to block requests attempting to traverse directories or access sensitive system paths.

Exploitation Status

Public Exploit Available: No (exploit_available: false)

Analyst Notes: As of August 27, 2026, there is no public information indicating active exploitation or a public proof-of-concept for this vulnerability. While the exploit requires authenticated access, the potential for total site takeover makes this a priority for any organization utilizing the Shop Manager role.

Analyst Recommendation

Organizations using the Order Tip for WooCommerce plugin must prioritize patching to version 1.6.0 to eliminate this file deletion vector. If an immediate update is not feasible, administrators should restrict plugin access or disable the plugin until a secure version is deployed to prevent potential site takeover.

---METADATA---
VENDOR: Ultimate Member
PRODUCT: Ultimate Member Plugin
AFFECTED_VERSIONS: See vendor advisory for specific affected versions
---END_METADATA---

Description Summary:
The Ultimate Member plugin for WordPress is vulnerable to account takeover via password reset link disclosure.

Executive Summary:
A critical account takeover vulnerability in the Ultimate Member WordPress plugin allows unauthenticated attackers to compromise user accounts.

Vulnerability Details

CVE-ID: CVE-2026-7761

Affected Software: Ultimate Member Plugin

Affected Versions: See vendor advisory for specific affected versions

Vulnerability: This vulnerability involves the improper handling of password reset mechanisms, leading to the disclosure of sensitive reset links. An attacker can leverage this to perform an account takeover without requiring prior authentication.

Business Impact

The ability for an attacker to hijack user accounts, including those with administrative privileges, presents a critical threat to the entire WordPress ecosystem. With a CVSS score of 8.8, this vulnerability could lead to total site compromise, data exfiltration, and the distribution of malicious content to visitors.

Remediation Plan

Immediate Action: Update the Ultimate Member plugin to the latest available version provided by the developer.

Proactive Monitoring: Review user account modification logs and investigate any unexpected password reset requests or suspicious profile changes.

Compensating Controls: Disable the plugin temporarily if a patch is not immediately available and employ rate-limiting on reset requests via a WAF.

Exploitation Status

Public Exploit Available: false

Analyst Notes: As of June 24, 2026, there is no public information indicating active exploitation of this vulnerability. However, due to the nature of the flaw, the potential for exploitation is high.

Analyst Recommendation

This vulnerability is highly severe due to its impact on user account security. Organizations using the Ultimate Member plugin must prioritize updating their installation immediately to prevent unauthorized access and potential site-wide takeover.

---METADATA---
VENDOR: 101gen
PRODUCT: Automation Web Platform – Notifications and OTP for WooCommerce, Advanced Country Code
AFFECTED_VERSIONS: 0 through 4.8.6
CONFIDENCE: high
MISSING: patch
---END_METADATA---

Description Summary:
The Automation Web Platform plugin for WordPress is vulnerable to an authentication bypass, allowing unauthenticated attackers to log in as any user, including administrators.

Executive Summary:
A critical authentication bypass vulnerability in the 101gen Automation Web Platform plugin allows unauthenticated attackers to gain full administrative access to affected WordPress sites.

Vulnerability Details

CVE-ID: CVE-2026-77264

Affected Software: 101gen Automation Web Platform – Notifications and OTP for WooCommerce, Advanced Country Code

Affected Versions: 0 through 4.8.6

Vulnerability: This is an authentication bypass vulnerability stemming from the improper handling of OTP tokens in the handle_email_otp_return() function. The application inadvertently returns secret magic login tokens in the response to public requests, which enables unauthenticated attackers to perform account takeovers.

Business Impact

Successful exploitation of this vulnerability permits full administrative control over the compromised WordPress installation. This leads to complete data compromise, unauthorized modification of site content, and potential injection of malicious scripts into the environment, which carries a severe risk of long-term reputational and operational damage. The CVSS score of 9.8 reflects the ease of exploitation and the high impact on confidentiality, integrity, and availability.

Remediation Plan

Immediate Action: Discontinue the use of the plugin or disable the OTP functionality until a vendor-supplied security update is released and verified.

Proactive Monitoring: Review web server and WordPress authentication logs for unusual login patterns or multiple failed attempts originating from unexpected IP addresses.

Compensating Controls: Deploy a Web Application Firewall (WAF) with rules configured to block suspicious requests directed at OTP-related endpoints and monitor for anomalous traffic patterns.

Exploitation Status

Public Exploit Available: Unknown.

Analyst Notes: As of August 21, 2026, there is no public information indicating active exploitation or a public proof-of-concept for this vulnerability. The flaw is inherently dangerous due to the exposure of authentication tokens in plain text responses.

Analyst Recommendation

This is a high-severity flaw that requires immediate attention. Given that no patch is currently identified, site administrators should prioritize disabling the affected plugin functionality to prevent unauthorized access. Monitor your environment closely for any signs of account takeover or unexpected administrative activity until a secure version is available.

---METADATA---
VENDOR: Brave
PRODUCT: Popup Builder
AFFECTED_VERSIONS: 0 up to 0.8.6
CONFIDENCE: high
MISSING: none
CREDITS: Huseyin Mertoglu (finder); WPScan (coordinator)
SOURCES_JSON: [{"url":"https://wpscan.com/vulnerability/d4a760c0-8e71-4261-a08b-9b6a296c631a/","name":null,"tags":["exploit","vdb-entry","technical-description"]}]
---END_METADATA---

Description Summary:
A reflected cross-site scripting (XSS) vulnerability in the Brave Popup Builder plugin allows unauthenticated attackers to execute arbitrary scripts in the context of a user session.

Executive Summary:
The Brave Popup Builder plugin for WordPress contains a reflected XSS vulnerability that allows unauthenticated attackers to execute malicious scripts within a victim's browser session.

Vulnerability Details

CVE-ID: CVE-2026-77115

Affected Software: Brave Popup Builder

Affected Versions: 0 up to 0.8.6

Vulnerability: The plugin is susceptible to reflected cross-site scripting (XSS) due to insufficient input validation. This allows an unauthenticated attacker to inject malicious JavaScript into the application, which is then executed in the context of the user session.

Business Impact

Successful exploitation allows an attacker to perform actions on behalf of the user, potentially leading to unauthorized account access, session hijacking, or the defacement of the website. With a CVSS score of 7.1, this represents a high-severity risk that could compromise the integrity and confidentiality of user interactions within the WordPress environment.

Remediation Plan

Immediate Action: Update the Brave Popup Builder plugin to version 0.8.6 or later to apply the vendor-supplied security patch.

Proactive Monitoring: Review web server access logs for unusual request patterns, particularly those containing script tags or encoded URL parameters.

Compensating Controls: Implement a Web Application Firewall (WAF) with rules configured to detect and block common XSS attack vectors.

Exploitation Status

Public Exploit Available: No (the referenced WPScan entry provides a technical description but does not constitute a weaponized exploit).

Analyst Notes: As of August 24, 2026, there is no public information indicating active exploitation or a public proof-of-concept for this vulnerability. The flaw is inherently exploitable via standard network vectors if a user can be tricked into clicking a malicious link.

Analyst Recommendation

Given the high CVSS severity and the potential for account takeover, administrators should prioritize updating the Brave Popup Builder plugin immediately. Applying the patch is the only definitive way to eliminate this risk.

---METADATA---
VENDOR: WordPress
PRODUCT: Workeera
AFFECTED_VERSIONS: 0 up to (excluding) 1.0.6
CONFIDENCE: high
MISSING: none
CREDITS: Erwan LR (WPScan) (finder); WPScan (coordinator)
SOURCES_JSON: [{"url":"https://wpscan.com/vulnerability/2d13eaeb-d2ac-4f21-9acf-32152f03bdb8/","name":null,"tags":["exploit","vdb-entry","technical-description"]}]
---END_METADATA---

Description Summary:
The Workeera WordPress plugin contains an unrestricted file upload vulnerability that allows authenticated subscribers to achieve remote code execution on the underlying server.

Executive Summary:
The Workeera WordPress plugin is vulnerable to an arbitrary file upload flaw that enables authenticated attackers to execute malicious code on the server, resulting in a full system compromise.

Vulnerability Details

CVE-ID: CVE-2026-77018

Affected Software: WordPress Workeera

Affected Versions: 0 up to (excluding) 1.0.6

Vulnerability: This vulnerability, identified as CWE-434, stems from a failure to validate file types and restrict profile submissions within the Workeera plugin. An authenticated attacker with subscriber-level access can upload malicious files to a publicly accessible directory, leading to remote code execution.

Business Impact

The ability for a low-privileged user to execute arbitrary code on the web server poses a critical risk to business operations. This vulnerability could lead to total system compromise, unauthorized data exfiltration, or the deployment of ransomware. Given the CVSS score of 8.8, this flaw represents a significant threat to data integrity, confidentiality, and availability.

Remediation Plan

Immediate Action: Update the Workeera plugin to version 1.0.6 or later immediately to incorporate the necessary file validation controls.

Proactive Monitoring: Inspect web server logs for suspicious file uploads or requests directed at directories where user-supplied content is stored.

Compensating Controls: Implement a Web Application Firewall (WAF) rule to block unauthorized file uploads and restrict access to the affected plugin endpoints if an immediate update is not feasible.

Exploitation Status

Public Exploit Available: No (exploit_available: false)

Analyst Notes: As of August 28, 2026, there is no public information indicating active exploitation or a public proof-of-concept for this vulnerability. The flaw's inherent exploitability is high due to the lack of server-side file type validation, which simplifies the execution of arbitrary code once an attacker has established a low-privileged session.

Analyst Recommendation

This vulnerability presents a severe risk to WordPress environments by allowing remote code execution through a simple authenticated upload. Organizations utilizing the Workeera plugin must prioritize the update to version 1.0.6 immediately. Failure to patch this vulnerability leaves the application infrastructure susceptible to complete takeover by malicious actors.

---METADATA---
VENDOR: Workeera
PRODUCT: Workeera WordPress plugin
AFFECTED_VERSIONS: 0 up to (excluding) 1.0.6
CONFIDENCE: high
MISSING: none
PROFILE: daily@7c4e524780a4
MODEL: gemini-3.1-flash-lite
GENERATED: 2026-09-01T14:00:21.800Z
CREDITS: Artus KG and Shhriyash (finder); WPScan (coordinator)
SOURCES_JSON: [{"url":"https://wpscan.com/vulnerability/8764a981-09a8-4949-a5d1-599987fb73f6/","name":null,"tags":["exploit","vdb-entry","technical-description"]}]
---END_METADATA---

Description Summary:
The Workeera WordPress plugin before 1.0.6 allows authenticated subscribers to perform arbitrary file reads on the server due to insufficient input validation and directory restriction.

Executive Summary:
A high-severity information exposure vulnerability in the Workeera WordPress plugin allows authenticated users to read sensitive server files, including configuration data and authentication secrets.

Vulnerability Details

CVE-ID: CVE-2026-77017

Affected Software: Workeera Workeera WordPress plugin

Affected Versions: 0 up to (excluding) 1.0.6

Vulnerability: This vulnerability is caused by a failure to perform adequate input validation on profile submissions and a lack of directory traversal protection, which permits any authenticated user with subscriber-level access to access files outside the intended web directory.

Business Impact

The ability for low-privileged users to read arbitrary files poses a significant risk to the integrity and confidentiality of the entire hosting environment. An attacker could extract database credentials, configuration files, or encryption keys, which typically leads to full system compromise or unauthorized access to sensitive user data. The CVSS score of 7.7 reflects the high potential for impact on the confidentiality of the affected server.

Remediation Plan

Immediate Action: Update the Workeera plugin to version 1.0.6 or later immediately to apply the necessary input validation and directory path restrictions.

Proactive Monitoring: Review web server access logs for anomalous requests targeting sensitive system files or unexpected file path patterns associated with profile updates.

Compensating Controls: Implement a Web Application Firewall (WAF) rule to block requests containing directory traversal sequences, such as dot-dot-slash patterns, directed at the plugin functionality.

Exploitation Status

Public Exploit Available: Unknown

Analyst Notes: As of August 27, 2026, there is no public information indicating active exploitation or a public proof-of-concept for this vulnerability. The flaw is inherently dangerous due to the exposure of configuration files and secrets to low-privileged users.

Analyst Recommendation

Given the potential for complete system compromise through the exposure of authentication secrets, this vulnerability should be treated with high urgency. Administrators must prioritize updating the plugin to the fixed version to prevent unauthorized access. If an immediate update is not feasible, restrict access to the plugin settings or temporarily deactivate the component to mitigate the risk of data exfiltration.

---METADATA---
VENDOR: Workeera
PRODUCT: Workeera WordPress plugin
AFFECTED_VERSIONS: 0 up to (excluding) 1.0.6
CONFIDENCE: high
MISSING: none
PROFILE: daily@7c4e524780a4
MODEL: gemini-3.1-flash-lite
GENERATED: 2026-08-31T14:00:12.998Z
CREDITS: Artus KG and Shhriyash (finder); WPScan (coordinator)
SOURCES_JSON: [{"url":"https://wpscan.com/vulnerability/26f8c020-a5d0-4561-9802-c8c53b7755e4/","name":null,"tags":["exploit","vdb-entry","technical-description"]}]
---END_METADATA---

Description Summary:
The Workeera WordPress plugin contains a flaw allowing authenticated subscribers to delete arbitrary files on the server due to insufficient path validation.

Executive Summary:
A critical vulnerability in the Workeera WordPress plugin allows authenticated users to perform unauthorized file deletions, potentially leading to a complete compromise of system availability.

Vulnerability Details

CVE-ID: CVE-2026-77016

Affected Software: Workeera Workeera WordPress plugin

Affected Versions: 0 up to (excluding) 1.0.6

Vulnerability: The plugin fails to validate file paths when processing deletions within a user candidate profile, permitting a low-privileged subscriber to delete arbitrary files from the server filesystem.

Business Impact

Successful exploitation of this vulnerability allows an attacker to delete critical system files or website configuration files, which can result in significant service downtime and loss of data integrity. Given the CVSS score of 9.6, this flaw presents a severe risk to business operations, as it enables an authenticated user to perform destructive actions that can render the entire WordPress instance non-functional.

Remediation Plan

Immediate Action: Update the Workeera WordPress plugin to version 1.0.6 or later immediately to incorporate necessary input validation.

Proactive Monitoring: Review server access logs for anomalous file deletion patterns or unauthorized attempts to access sensitive system paths by subscriber-level accounts.

Compensating Controls: Implement a Web Application Firewall (WAF) rule to block requests containing directory traversal sequences or suspicious path parameters directed at the plugin interface.

Exploitation Status

Public Exploit Available: No

Analyst Notes: As of Aug 27, 2026, there is no public information indicating active exploitation or a public proof-of-concept for this vulnerability. The flaw's high CVSS score is driven by the ability to impact system availability and integrity through arbitrary file deletion.

Analyst Recommendation

The vulnerability represents a critical risk to any WordPress environment utilizing the Workeera plugin. Administrators should prioritize patching to version 1.0.6 immediately, as the low barrier to entry for attackers makes this an attractive target for service disruption. If an update cannot be applied immediately, consider disabling the plugin until a secure version is deployed.

---METADATA---
VENDOR: 爱采集 (Ai Caiji)
PRODUCT: 数据采集和发布插件 (Data Collection and Publishing Plugin)
AFFECTED_VERSIONS: 0 through 1.0.0
CONFIDENCE: high
MISSING: patch
PROFILE: daily@7c4e524780a4
MODEL: gemini-3.1-flash-lite
GENERATED: 2026-08-30T09:00:40.889Z
CREDITS: Pablo González Pérez (finder); Francisco José Ramírez Vicente and Iñigo Sánchez Enciso (finder); WPScan (coordinator)
SOURCES_JSON: [{"url":"https://wpscan.com/vulnerability/025664f8-2af7-4692-a9a0-1d28916a1565/","name":null,"tags":["exploit","vdb-entry","technical-description"]}]
---END_METADATA---

Description Summary:
The 爱采集 WordPress plugin allows unauthenticated attackers to perform arbitrary file reads, server-side request forgery, and arbitrary file writes due to missing authentication and input validation.

Executive Summary:
A critical vulnerability in the 爱采集 WordPress plugin permits unauthenticated attackers to achieve arbitrary file access and remote request execution, posing a severe risk to server integrity.

Vulnerability Details

CVE-ID: CVE-2026-77012

Affected Software: 爱采集 (Ai Caiji) Data Collection and Publishing Plugin

Affected Versions: 0 through 1.0.0

Vulnerability: The plugin fails to require a per-install secret for critical endpoints and lacks validation for URLs or destination paths, enabling unauthenticated attackers to conduct Server-Side Request Forgery (SSRF) and arbitrary file system operations.

Business Impact

The ability for an unauthenticated user to read arbitrary files and write content to the server can lead to full site compromise, sensitive data exfiltration, and the execution of malicious code. Given the CVSS score of 9.3, this vulnerability represents a critical risk that could lead to unauthorized access to configuration files, database credentials, and the potential for complete system takeover.

Remediation Plan

Immediate Action: As no patch is currently available, administrators should immediately deactivate and uninstall the 爱采集 plugin until a secure version is released by the developer.

Proactive Monitoring: Review web server access logs for suspicious requests targeting plugin-specific endpoints or patterns involving file system path traversal.

Compensating Controls: Implement a Web Application Firewall (WAF) rule to block unauthorized access to the specific plugin endpoints identified in the vendor documentation.

Exploitation Status

Public Exploit Available: No (exploit_available: false).

Analyst Notes: As of August 29, 2026, there is no public information indicating active exploitation or a public proof-of-concept for this vulnerability. The flaw is inherently dangerous because it provides unauthenticated access to the underlying server file system and network capabilities.

Analyst Recommendation

The severity of this vulnerability, combined with the lack of authentication, mandates immediate action to remove the affected software from the production environment. Organizations should prioritize the total removal of the plugin to prevent potential exploitation until a verified, patched version is confirmed to be available.

---METADATA---
VENDOR: WordPress
PRODUCT: HEL Online Classroom: AI-powered Online Classrooms
AFFECTED_VERSIONS: 1.0.3 and earlier
CONFIDENCE: high
MISSING: patch
PROFILE: daily@7c4e524780a4
MODEL: gemini-3.1-flash-lite
GENERATED: 2026-08-30T09:02:36.445Z
CREDITS: kimsunghoon (finder); WPScan (coordinator)
SOURCES_JSON: [{"url":"https://wpscan.com/vulnerability/24f1da87-4217-4876-a0f3-5e125f694651/","name":null,"tags":["exploit","vdb-entry","technical-description"]}]
---END_METADATA---

Description Summary:
The HEL Online Classroom WordPress plugin fails to perform authorization checks on REST API routes, allowing unauthenticated users to access sensitive configuration settings and API secrets.

Executive Summary:
An unauthenticated information disclosure vulnerability in the HEL Online Classroom WordPress plugin exposes sensitive API credentials, potentially allowing unauthorized access to connected BigBlueButton servers.

Vulnerability Details

CVE-ID: CVE-2026-77007

Affected Software: WordPress HEL Online Classroom: AI-powered Online Classrooms

Affected Versions: 1.0.3 and earlier

Vulnerability: The vulnerability is an information exposure (CWE-200) resulting from a missing authorization check on a REST API endpoint. This flaw permits any unauthenticated user to retrieve plugin configuration data, specifically the shared secret used for BigBlueButton API authentication.

Business Impact

The exposure of the BigBlueButton shared secret grants an attacker the ability to sign fraudulent API requests, which may lead to unauthorized control over virtual classroom sessions or the interception of sensitive meeting data. Given the CVSS score of 7.5, this high-severity vulnerability presents a significant risk to organizational privacy and the integrity of online learning environments.

Remediation Plan

Immediate Action: Since a specific patch version is not currently identified, administrators should immediately deactivate and remove the HEL Online Classroom plugin if it is not mission-critical. If the plugin must remain active, monitor vendor channels for the release of version 1.0.4 or higher.

Proactive Monitoring: Review web server logs for suspicious requests targeting REST API endpoints associated with the plugin, specifically looking for unauthorized access attempts to configuration routes.

Compensating Controls: Implement a Web Application Firewall (WAF) rule to block unauthorized access to the plugin specific REST API paths until a formal patch is applied.

Exploitation Status

Public Exploit Available: Unknown

Analyst Notes: As of August 30, 2026, there is no public information indicating active exploitation or a public proof-of-concept for this vulnerability. The lack of an authorization check makes this vulnerability trivial to exploit for any remote, unauthenticated attacker once the target endpoint is identified.

Analyst Recommendation

The severity of this flaw necessitates immediate attention due to the exposure of cryptographic secrets. Organizations currently utilizing this plugin should treat the configuration as compromised and rotate any BigBlueButton secrets that were stored within the plugin settings as soon as a secure configuration can be restored.

---METADATA---
VENDOR: SmilePass
PRODUCT: Selfie Login (WordPress Plugin)
AFFECTED_VERSIONS: Through 1.0.2
CONFIDENCE: high
MISSING: patch
CREDITS: Khaled Alenazi (Nxploited) (finder); WPScan (coordinator)
SOURCES_JSON: [{"url":"https://wpscan.com/vulnerability/51236907-a1b4-4c3b-8c39-adafcab7a2ef/","name":null,"tags":["exploit","vdb-entry","technical-description"]}]
---END_METADATA---

Description Summary:
The SmilePass Selfie Login WordPress plugin fails to perform server-side identity verification, allowing unauthenticated attackers to hijack any user account, including administrative accounts.

Executive Summary:
A critical authentication bypass vulnerability in the SmilePass Selfie Login plugin allows unauthenticated attackers to fully compromise any user account, including administrator accounts.

Vulnerability Details

CVE-ID: CVE-2026-77002

Affected Software: SmilePass Selfie Login (WordPress Plugin)

Affected Versions: Through 1.0.2

Vulnerability: This is an improper authentication vulnerability where the plugin fails to perform server-side verification of identity claims. An unauthenticated attacker can supply any user identifier to the application and gain full access to that account without providing valid credentials.

Business Impact

Successful exploitation poses a catastrophic risk to business operations, as it grants attackers immediate, unauthorized access to user accounts. With administrative privileges, an attacker could exfiltrate sensitive data, modify site content, install malicious plugins, or redirect traffic, leading to severe reputational damage and potential loss of data integrity. The CVSS score of 9.8 reflects the high probability of exploitation and the total impact on confidentiality, integrity, and availability.

Remediation Plan

Immediate Action: Since no patch is currently available, administrators should immediately deactivate and remove the SmilePass Selfie Login plugin until a secure version is released.

Proactive Monitoring: Review WordPress user access logs for unusual login patterns, such as multiple successful logins from different IP addresses for the same administrative account.

Compensating Controls: Ensure that Web Application Firewalls are configured to block suspicious traffic patterns, although deactivation remains the only effective mitigation for this flaw.

Exploitation Status

Public Exploit Available: Unknown

Analyst Notes: As of Aug 22, 2026, there is no public information indicating active exploitation or a public proof-of-concept for this vulnerability. The flaw's inherent exploitability is high due to the lack of required authentication.

Analyst Recommendation

Given the critical severity of this authentication bypass, immediate removal of the affected plugin is the only viable path to security. Organizations should audit their WordPress installations for this plugin and prioritize its removal to prevent unauthorized administrative access.

---METADATA---
VENDOR: Slider Hero
PRODUCT: Slider Hero with Video Background, Animation
AFFECTED_VERSIONS: 0 up to (excluding) 9.1.3
CONFIDENCE: high
MISSING: none
CREDITS: Artus KG (finder); WPScan (coordinator)
SOURCES_JSON: [{"url":"https://wpscan.com/vulnerability/f9f5485c-6231-492c-b214-8da87a2bf4d1/","name":null,"tags":["exploit","vdb-entry","technical-description"]}]
---END_METADATA---

Description Summary:
The Slider Hero WordPress plugin is vulnerable to Stored Cross-Site Scripting due to missing authorization and input sanitization, allowing unauthenticated attackers to execute arbitrary JavaScript.

Executive Summary:
A critical Stored Cross-Site Scripting vulnerability in the Slider Hero WordPress plugin allows unauthenticated attackers to execute malicious scripts, posing a severe risk to administrative sessions and site visitors.

Vulnerability Details

CVE-ID: CVE-2026-76789

Affected Software: Slider Hero, Slider Hero with Video Background, Animation

Affected Versions: 0 up to (excluding) 9.1.3

Vulnerability: The plugin fails to perform authorization or nonce checks on specific request handlers and neglects to escape stored settings, enabling unauthenticated attackers to inject malicious JavaScript that executes in the context of administrative users or site visitors.

Business Impact

Successful exploitation of this vulnerability could lead to full administrative account compromise if an administrator views the affected settings page, or widespread site defacement and user session theft for visitors of pages where the slider is embedded. With a CVSS score of 8.8, this flaw represents a high risk to organizational integrity and data confidentiality, as it facilitates unauthorized script execution within a trusted site environment.

Remediation Plan

Immediate Action: Update the Slider Hero with Video Background, Animation plugin to version 9.1.3 or later immediately.

Proactive Monitoring: Review web server access logs for suspicious POST requests targeting the plugin request handlers and monitor for unauthorized changes to plugin settings.

Compensating Controls: Implement a Web Application Firewall (WAF) with rules configured to block common XSS payloads and restrict access to the WordPress administrative dashboard to trusted IP addresses.

Exploitation Status

Public Exploit Available: No — there is no confirmed public exploit or weaponized code available in the provided data.

Analyst Notes: As of August 22, 2026, there is no public information indicating active exploitation or a public proof-of-concept for this vulnerability. The flaw is inherently dangerous due to the lack of authentication requirements for the vulnerable endpoints, which lowers the barrier for entry for malicious actors.

Analyst Recommendation

Given the high CVSS score and the potential for complete site compromise, immediate remediation is mandatory. Organizations utilizing this plugin must verify their current version and update to the patched release to prevent unauthorized code execution. If an update cannot be performed immediately, the plugin should be disabled or access to the vulnerable functionality restricted to mitigate the risk of exploitation.

---METADATA---
VENDOR: WordPress
PRODUCT: Appointment Booking Calendar Plugin and Scheduling Plugin
AFFECTED_VERSIONS: 1.5.6 up to 1.6.3
CONFIDENCE: high
MISSING: none
PROFILE: daily@7c4e524780a4
MODEL: gemini-3.1-flash-lite
GENERATED: 2026-08-30T09:03:13.219Z
CREDITS: Nguyen Phuoc Thinh - HPT Vietnam Corporation (finder); WPScan (coordinator)
SOURCES_JSON: [{"url":"https://wpscan.com/vulnerability/bc74bc9b-92ce-434e-a21d-34d7525c8600/","name":null,"tags":["exploit","vdb-entry","technical-description"]}]
---END_METADATA---

Description Summary:
An improper access control flaw in the Appointment Booking Calendar WordPress plugin allows unauthenticated users to manipulate payment verification, resulting in unauthorized appointment approval.

Executive Summary:
The Appointment Booking Calendar Plugin for WordPress contains an unauthenticated access control vulnerability that permits users to bypass payment verification for bookings.

Vulnerability Details

CVE-ID: CVE-2026-76586

Affected Software: WordPress Appointment Booking Calendar Plugin and Scheduling Plugin

Affected Versions: 1.5.6 up to 1.6.3

Vulnerability: The plugin fails to perform server-side validation of payment amounts during the booking confirmation process. This allows an unauthenticated attacker to manipulate payment data to secure appointments at a fraction of the intended cost.

Business Impact

Successful exploitation of this vulnerability leads to a direct loss of revenue and integrity for business scheduling systems. With a CVSS score of 7.5, the risk is high because it facilitates unauthorized service access without requiring any user credentials, potentially leading to significant operational and financial disruption for organizations relying on the plugin for paid services.

Remediation Plan

Immediate Action: Update the Appointment Booking Calendar Plugin and Scheduling Plugin to version 1.6.3 or later to enforce proper server-side payment verification.

Proactive Monitoring: Review booking logs and payment confirmation records for suspicious transactions where the payment amount does not match the expected service price.

Compensating Controls: Deploy a Web Application Firewall (WAF) to monitor and block abnormal HTTP traffic patterns directed at the booking confirmation endpoint.

Exploitation Status

Public Exploit Available: No

Analyst Notes: As of August 30, 2026, there is no public information indicating active exploitation or a public proof-of-concept for this vulnerability. The flaw is inherently dangerous due to its lack of authentication requirements and direct impact on financial transaction integrity.

Analyst Recommendation

Organizations using this plugin must prioritize the update to version 1.6.3 immediately to close the payment verification gap. Failure to patch this vulnerability leaves the business exposed to direct financial manipulation and unauthorized service consumption by unauthenticated actors.

---METADATA---
VENDOR: Customer Reviews
PRODUCT: Customer Reviews for WooCommerce
AFFECTED_VERSIONS: 0 up to (excluding) 5.118.0
CONFIDENCE: high
MISSING: none
PROFILE: daily@7c4e524780a4
MODEL: gemini-3.1-flash-lite
GENERATED: 2026-09-02T14:03:09.851Z
CREDITS: rasul (finder); WPScan (coordinator)
SOURCES_JSON: [{"url":"https://wpscan.com/vulnerability/7d539fba-d47e-461d-b40f-1aa8f535d506/","name":null,"tags":["exploit","vdb-entry","technical-description"]}]
---END_METADATA---

Description Summary:
The Customer Reviews for WooCommerce plugin fails to sanitize user-submitted review content, enabling unauthenticated attackers to execute Stored Cross-Site Scripting (XSS) attacks.

Executive Summary:
An unauthenticated Stored Cross-Site Scripting vulnerability in the Customer Reviews for WooCommerce plugin allows remote attackers to execute arbitrary scripts in the context of a user session.

Vulnerability Details

CVE-ID: CVE-2026-76585

Affected Software: Customer Reviews for WooCommerce

Affected Versions: 0 up to (excluding) 5.118.0

Vulnerability: The vulnerability is a Stored Cross-Site Scripting (CWE-79) flaw caused by insufficient sanitization and escaping of content within the review submission endpoint. This allows unauthenticated attackers to inject malicious scripts that execute when a victim views the compromised review.

Business Impact

Successful exploitation allows an attacker to hijack administrator or user sessions, potentially leading to unauthorized data access, account takeover, or the distribution of malicious content to site visitors. With a CVSS score of 8.8 (High), this vulnerability poses a significant risk to site integrity and user trust, as it can be leveraged to compromise the administrative interface of the WordPress environment.

Remediation Plan

Immediate Action: Update the Customer Reviews for WooCommerce plugin to version 5.118.0 or later immediately to apply the necessary sanitization patches.

Proactive Monitoring: Review web server access logs for anomalous POST requests to review submission endpoints and monitor site traffic for unusual script execution patterns.

Compensating Controls: Deploy a Web Application Firewall (WAF) with rules configured to detect and block common XSS payloads in input fields until the plugin can be successfully patched.

Exploitation Status

Public Exploit Available: Unknown.

Analyst Notes: As of Aug 30, 2026, there is no public information indicating active exploitation or a public proof-of-concept for this vulnerability. While the vulnerability is highly accessible due to the unauthenticated nature of the attack vector, there is currently no evidence of weaponized exploits in the wild.

Analyst Recommendation

Given the potential for full session compromise and the high CVSS severity rating, administrators should prioritize updating this plugin immediately. Failure to remediate this flaw exposes the WordPress instance to persistent malicious script injection, which could be used to facilitate wider attacks against the site and its authenticated users.

---METADATA---
VENDOR: WPMU DEV
PRODUCT: WPMU DEV Dashboard
AFFECTED_VERSIONS: 0 through 5.0.1
CONFIDENCE: high
MISSING: patch
CREDITS: Alex Thomas (finder); Wordfence Argus (finder)
SOURCES_JSON: [{"url":"https://www.wordfence.com/threat-intel/vulnerabilities/id/3d4321c8-15a4-46f5-9b0e-2098a7fcfb5b?source=cve","name":null,"tags":[]},{"url":"https://wpmudev.com/project/wpmu-dev-dashboard/","name":null,"tags":[]}]
---END_METADATA---

Description Summary:
The WPMU DEV Dashboard plugin for WordPress contains an authentication bypass vulnerability due to improper HMAC signature verification in its SSO AJAX actions.

Executive Summary:
A critical authentication bypass flaw in the WPMU DEV Dashboard plugin allows unauthenticated attackers to hijack administrative sessions on affected WordPress sites.

Vulnerability Details

CVE-ID: CVE-2026-76581

Affected Software: WPMU DEV WPMU DEV Dashboard

Affected Versions: 0 through 5.0.1

Vulnerability: This vulnerability is an improper verification of cryptographic signatures (CWE-347) occurring within the wdpsso_step1 and wdpsso_step2 AJAX actions. An unauthenticated attacker can exploit inconsistent HMAC message construction to forge a valid administrative session.

Business Impact

The exploitation of this vulnerability grants an attacker full administrative access to the WordPress site. This leads to complete system compromise, including the ability to modify site content, install malicious plugins, exfiltrate sensitive user data, or redirect traffic. With a CVSS score of 9.8, this flaw presents an extreme risk to organizational integrity and data confidentiality.

Remediation Plan

Immediate Action: Ensure all instances of the WPMU DEV Dashboard plugin are updated to the latest available version provided by the vendor. If an update is not immediately possible, deactivate the plugin until a patch is applied.

Proactive Monitoring: Review web server access logs for anomalous requests targeting the wdpsso_step1 and wdpsso_step2 endpoints. Monitor for unauthorized administrative logins or unexpected changes to user account permissions.

Compensating Controls: Deploy a Web Application Firewall (WAF) with rules configured to block suspicious or malformed requests directed at the WPMU DEV plugin endpoints.

Exploitation Status

Public Exploit Available: No (Exploit status is currently unknown)

Analyst Notes: As of Aug 28, 2026, there is no public information indicating active exploitation or a public proof-of-concept for this vulnerability. The flaw's reliance on specific SSO configurations makes it highly dangerous for organizations utilizing WPMU DEV Hub integration.

Analyst Recommendation

Given the critical severity and the potential for complete administrative takeover, organizations must prioritize the remediation of this vulnerability. Administrators should verify the current version of the WPMU DEV Dashboard plugin immediately and apply available updates to neutralize the risk of unauthorized session hijacking.

---METADATA---
VENDOR: WordPress
PRODUCT: SureCart
AFFECTED_VERSIONS: 0 through 4.2.3
CONFIDENCE: high
MISSING: none
---END_METADATA---

Description Summary:
The SureCart plugin for WordPress is vulnerable to privilege escalation via account takeover due to a weak password recovery mechanism.

Executive Summary:
A critical account takeover vulnerability in the SureCart plugin for WordPress allows unauthenticated attackers to escalate privileges and compromise user accounts.