Products: 2
Vulnerabilities: 5
Known Exploited: 0
0
Critical Level Threats
1
High Level Threats
4
Medium Level Threats
0
Low Level Threats
Vulnerabilities
100806040200
JanFebMarAprMayJunJulAugSepOctNovDec
Critical Level Threats
High Level Threats
Medium Level Threats
Low Level Threats
Products Security index
Actions
Items Per Page
Vulnerabilities
CVE-2026-75908
Newsletters <= 4.17 - Missing Authorization to Authenticated (Author+) Arbitrary Modification via 'newsletters_mailinglistsroles' POST Parameter
Last Modified: Aug 25, 2026
Published: Aug 25, 2026
CVE-2026-12939
Newsletters <= 4.15 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'link' Shortcode Attribute
Last Modified: Jul 29, 2026
Published: Jul 29, 2026
CVE-2026-12938
Newsletters <= 4.15 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'target' Shortcode Attribute
Last Modified: Jul 29, 2026
Published: Jul 29, 2026
CVE-2026-2021
Slideshow Gallery LITE <= 1.8.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'alwaysauto' Shortcode Attribute
Last Modified: Jun 24, 2026
Published: Jun 18, 2026
CVE-2026-3018
Newsletters <= 4.13 - Unauthenticated SQL Injection via wpmlsubscriber_id Parameter
Last Modified: Jun 10, 2026
Published: Jun 10, 2026
Items Per Page
