In TinyPNG – JPEG, PNG & WebP image compression component for WordPress versions 3.6.13 and earlier a high severity vulnerability CVE-2026-7311 was detected. This vulnerability allows authenticated attackers to delete arbitrary files on the server, which can lead to remote code execution. To address this issue, users should upgrade TinyPNG – JPEG, PNG & WebP image compression to the latest available version. For more details, visit https://nvd.nist.gov/vuln/detail/CVE-2026-7311.
Read more CMS
In weDocs: AI Powered Knowledge Base, Docs, Documentation, Wiki & AI Chatbot component for WordPress versions 2.3.0 and earlier a medium severity vulnerability CVE-2026-12729 was detected. This vulnerability allows attackers to execute sensitive operations without proper authorization. To address this issue, users should upgrade weDocs: AI Powered Knowledge Base, Docs, Documentation, Wiki & AI Chatbot to the latest available version. For more details, visit https://nvd.nist.gov/vuln/detail/CVE-2026-12729.
Read more CMS
In OpenAI Chatbot for WordPress – Helper component for WordPress versions 1.1.4 and earlier a high severity vulnerability CVE-2025-69134 was detected. This vulnerability allows attackers to delete arbitrary content without authentication. To address this issue, users should upgrade OpenAI Chatbot for WordPress – Helper to the latest available version. For more details, visit https://nvd.nist.gov/vuln/detail/CVE-2025-69134.
Read more CMS
In SpaLab | Beauty Salon WordPress Theme component for WordPress versions 6.7 and earlier a high severity vulnerability CVE-2025-69154 was detected. This vulnerability allows attackers to execute arbitrary web scripts or HTML. To address this issue, users should upgrade SpaLab | Beauty Salon WordPress Theme to the latest available version. For more details, visit https://nvd.nist.gov/vuln/detail/CVE-2025-69154.
Read more CMS
In Fitness Zone WordPress Theme component for WordPress versions 5.7 and earlier a high severity vulnerability CVE-2025-69155 was detected. This vulnerability allows attackers to inject malicious scripts. To address this issue, users should upgrade Fitness Zone WordPress Theme to the latest available version. For more details, visit https://nvd.nist.gov/vuln/detail/CVE-2025-69155.
Read more CMS
In Kids Zone – Children WordPress Theme component for WordPress versions 5.4 and earlier a high severity vulnerability CVE-2025-69156 was detected. This vulnerability allows attackers to execute arbitrary web scripts or HTML. To address this issue, users should upgrade Kids Zone – Children WordPress Theme to the latest available version. For more details, visit https://nvd.nist.gov/vuln/detail/CVE-2025-69156.
Read more CMS
In JetWidgets For Elementor component for WordPress versions 1.0.21 and earlier a medium severity vulnerability CVE-2026-11380 was detected. This vulnerability allows attackers to inject malicious scripts. To address this issue, users should upgrade JetWidgets For Elementor to the latest available version. For more details, visit https://nvd.nist.gov/vuln/detail/CVE-2026-11380.
Read more CMS
In Webmention component for WordPress versions 5.8.0 and earlier a high severity vulnerability CVE-2026-10513 was detected. This vulnerability allows attackers to inject malicious scripts into web pages viewed by other users. To address this issue, users should upgrade Webmention to the latest available version. For more details, visit https://nvd.nist.gov/vuln/detail/CVE-2026-10513.
Read more CMS
In WooCommerce Designer Pro component for WooCommerce versions 1.9.34 and earlier a medium severity vulnerability CVE-2026-57329 was detected. This vulnerability allows attackers to execute arbitrary web scripts. To address this issue, users should upgrade WooCommerce Designer Pro to the latest available version. For more details, visit https://nvd.nist.gov/vuln/detail/CVE-2026-57329.
Read more E-commerce