Business and Enterprise Solutions

In Contact Form, Survey, Quiz & Popup Form Builder – ARForms component for WordPress versions 1.8.5 and earlier a critical severity vulnerability CVE-2024-13784 was detected. This vulnerability allows unauthenticated attackers to inject a PHP Object. To address this issue, users should upgrade Contact Form, Survey, Quiz & Popup Form Builder – ARForms to the latest available version. For more details, visit https://nvd.nist.gov/vuln/detail/CVE-2024-13784.

In WooMS component for WordPress versions 9.14 and earlier a medium severity vulnerability CVE-2026-13700 was detected. This vulnerability allows unauthenticated attackers to perform Server-Side Request Forgery and disclose configured integration credentials. To address this issue, users should upgrade WooMS to the latest available version. For more details, visit https://nvd.nist.gov/vuln/detail/CVE-2026-13700.

In Phoca Cart component for Joomla versions 6.1.6 and earlier a critical severity vulnerability CVE-2026-74251 was detected. This vulnerability allows an unauthenticated attacker to inject arbitrary SQL to extract the full database. To address this issue, users should upgrade Phoca Cart to the latest available version. For more details, visit https://nvd.nist.gov/vuln/detail/CVE-2026-74251.

In PPWP – Password Protect Pages component for WordPress versions 1.9.21 and earlier a medium severity vulnerability CVE-2026-3639 was detected. This vulnerability allows authenticated attackers to inject arbitrary web scripts in pages. To address this issue, users should upgrade PPWP – Password Protect Pages to the latest available version. For more details, visit https://nvd.nist.gov/vuln/detail/CVE-2026-3639.

In Ecwid by Lightspeed Ecommerce Shopping Cart component for WordPress versions before 7.0.9 a medium severity vulnerability CVE-2026-14332 was detected. This vulnerability allows any authenticated user to disconnect the store and take the storefront offline. To address this issue, users should upgrade Ecwid by Lightspeed Ecommerce Shopping Cart to the latest available version. For more details, visit https://nvd.nist.gov/vuln/detail/CVE-2026-14332.

In the Link Factory component for WordPress a critical severity vulnerability CVE-2026-15413 was detected. This vulnerability allows an attacker to gain unauthorized remote control over the website. To address this issue, users should upgrade Link Factory to the latest available version. For more details, visit https://nvd.nist.gov/vuln/detail/CVE-2026-15413.

In Wallet System for WooCommerce component for WooCommerce versions before 2.7.10 a medium severity vulnerability CVE-2026-15045 was detected. This vulnerability allows authenticated customers to arbitrarily reduce their own order total without paying the merchant. To address this issue, users should upgrade Wallet System for WooCommerce to the latest available version. For more details, visit https://nvd.nist.gov/vuln/detail/CVE-2026-15045.

In Cotton Cloud component for Joomla versions earlier than 2.0.3 a medium severity vulnerability CVE-2026-67284 was detected. This vulnerability allows authenticated users to perform unauthorized file operations on files owned by other users. To address this issue, users should upgrade Cotton Cloud to the latest available version. For more details, visit https://nvd.nist.gov/vuln/detail/CVE-2026-67284.

In Fabrik component for Joomla versions before 4.6.8 a critical severity vulnerability CVE-2026-67282 was detected. This vulnerability allows an unauthenticated attacker to execute arbitrary code. To address this issue, users should upgrade Fabrik to the latest available version. For more details, visit https://nvd.nist.gov/vuln/detail/CVE-2026-67282.