Common Vulnerabilities and Exposures (CVE)
CVE-2026-32550
Subscriber SQL Injection in Kadence Shop Kit <= 3.0.6 versions.
CVE-2026-32479
Unauthenticated SQL Injection in Visitor Traffic Real Time Statistics Pro <= 11.17 versions.
CVE-2026-81277
Contributor SQL Injection in Suggestion Engine for WooCommerce <= 2.0.11 versions.
CVE-2026-81276
Unauthenticated Broken Access Control in Kali Forms <= 2.4.23 versions.
CVE-2026-81274
Subscriber Broken Access Control in Ditty <= 3.1.67 versions.
CVE-2026-81271
Unauthenticated Cross Site Request Forgery (CSRF) in GeoDirectory <= 2.8.176 versions.
CVE-2026-80433
Subscriber Sensitive Data Exposure in SureFeedback Client Site <= 1.2.12 versions.
CVE-2026-78292
Unauthenticated PHP Object Injection in Hash Form <= 1.4.1 versions.
CVE-2026-78288
Unauthenticated SQL Injection in Beautiful Taxonomy Filters <= 2.4.6 versions.
CVE-2026-78286
Unauthenticated PHP Object Injection in Geo Controller <= 8.9.8 versions.
CVE-2026-78285
Subscriber SQL Injection in Like Button Rating <= 2.6.61 versions.
CVE-2026-78283
Unauthenticated Cross Site Scripting (XSS) in Music Player for WooCommerce <= 1.8.9 versions.
CVE-2026-78281
Unauthenticated Cross Site Scripting (XSS) in CP Media Player <= 1.3.0 versions.
CVE-2026-78261
Unauthenticated Cross Site Scripting (XSS) in Realtyna Organic IDX plugin <= 5.4.1 versions.