Common Vulnerabilities and Exposures (CVE)
CVE-2026-66670
Unauthenticated Local File Inclusion in Måne <= 1.7 versions.
CVE-2026-66650
Unauthenticated PHP Object Injection in FreightCo <= 1.1.15 versions.
CVE-2026-66648
Unauthenticated Privilege Escalation in Jawn <= 1.4.2 versions.
CVE-2026-66610
Unauthenticated Cross Site Scripting (XSS) in Urna <= 2.6.2 versions.
CVE-2026-66587
Unauthenticated Local File Inclusion in WP Cafe Pro < 3.0.15 versions.
CVE-2026-66585
Unauthenticated Sensitive Data Exposure in WP Cafe Pro < 3.0.15 versions.
CVE-2026-32558
Unauthenticated Privilege Escalation in Affiliate Pro - Affiliate Program for WooCommerce & WordPress <= 8.9.1 versions.
CVE-2026-32551
Unauthenticated SQL Injection in Woo Essential <= 4.3.0 versions.
CVE-2026-32478
Subscriber SQL Injection in WP Project Manager Pro <= 4.0.1 versions.
CVE-2026-32477
Unauthenticated Arbitrary File Deletion in ShopBuilder Pro – Elementor WooCommerce Builder Addons <= 2.2.0 versions.
CVE-2026-32476
Unauthenticated Cross Site Scripting (XSS) in Brave Conversion Engine (PRO) <= 0.8.6 versions.
CVE-2026-32471
Subscriber SQL Injection in ProLancer Element <= 1.4.8 versions.
CVE-2026-28190
Subscriber Broken Access Control in ProLancer Element <= 1.4.8 versions.
CVE-2026-28171
Unauthenticated Arbitrary File Deletion in WooCommerce File Approval <= 10.7 versions.
CVE-2026-28167
Unauthenticated Arbitrary File Download in Super Forms <= 6.3.315 versions.