In Breeze Cache component for WordPress versions before 2.5.6 a medium severity vulnerability CVE-2026-10551 was detected. This vulnerability allows an attacker to inject arbitrary HTML attributes in the final HTML output. To address this issue, users should upgrade Breeze Cache to the latest available version. For more details, visit https://nvd.nist.gov/vuln/detail/CVE-2026-10551.
Read more CMS
In AcyMailing component for Joomla versions before 10.11.1 a high severity vulnerability CVE-2026-56292 was detected. This vulnerability allows unauthorized database access and data leakage. To address this issue, users should upgrade AcyMailing to version 10.11.1 or later. For more details, visit https://nvd.nist.gov/vuln/detail/CVE-2026-56292.
Read more CMS
In AMP for WP – Accelerated Mobile Pages component for WordPress versions 1.1.12 and earlier a high severity vulnerability CVE-2026-6101 was detected. This vulnerability allows attackers to write arbitrary files to the server. To address this issue, users should upgrade AMP for WP – Accelerated Mobile Pages to the latest available version. For more details, visit https://nvd.nist.gov/vuln/detail/CVE-2026-6101.
Read more CMS
In Website Builder by SeedProd – Theme Builder, Landing Page Builder, Coming Soon Page, Maintenance Mode component for WordPress versions 6.20.2 and earlier a medium severity vulnerability CVE-2025-14785 was detected. This vulnerability allows authenticated attackers to inject arbitrary web scripts. To address this issue, users should upgrade Website Builder by SeedProd – Theme Builder, Landing Page Builder, Coming Soon Page, Maintenance Mode to the latest available version. For more details, visit https://nvd.nist.gov/vuln/detail/CVE-2025-14785.
Read more CMS
In Notifications for Forms & WordPress Actions component for WordPress versions before 2.6 a high severity vulnerability CVE-2024-6228 was detected. This vulnerability allows authenticated users with subscriber-level access to include and execute arbitrary local PHP files. To address this issue, users should upgrade Notifications for Forms & WordPress Actions to the latest available version. For more details, visit https://nvd.nist.gov/vuln/detail/CVE-2024-6228.
Read more CMS
In AllCoach component for WordPress versions before 1.0.2 a high severity vulnerability CVE-2026-10830 was detected. This vulnerability allows unauthenticated attackers to reset the password of arbitrary accounts and take over the site. To address this issue, users should upgrade AllCoach to the latest available version. For more details, visit https://nvd.nist.gov/vuln/detail/CVE-2026-10830.
Read more CMS
In Ultimate Member component for WordPress versions before 2.12.0 a high severity vulnerability CVE-2026-11766 was detected. This vulnerability allows authenticated users with Subscriber-level access to store and execute malicious JavaScript on user profiles. To address this issue, users should upgrade Ultimate Member to the latest available version. For more details, visit https://nvd.nist.gov/vuln/detail/CVE-2026-11766.
Read more CMS
In Simple Membership component for WordPress versions before 4.7.5 a high severity vulnerability CVE-2026-11855 was detected. This vulnerability allows unauthenticated attackers to inject arbitrary web scripts. To address this issue, users should upgrade Simple Membership to the latest available version. For more details, visit https://nvd.nist.gov/vuln/detail/CVE-2026-11855.
Read more CMS
In FileOrganizer component for WordPress versions before 1.2.0 a high severity vulnerability CVE-2026-11962 was detected. This vulnerability allows an authenticated attacker to achieve remote code execution. To address this issue, users should upgrade FileOrganizer to the latest available version. For more details, visit https://nvd.nist.gov/vuln/detail/CVE-2026-11962.
Read more CMS