Business and Enterprise Solutions

In All in One SEO component for WordPress versions before 4.9.9 a low severity vulnerability CVE-2026-10755 was detected. This vulnerability allows users with low-level privileges to overwrite or reset the site-wide AI integration state. To address this issue, users should upgrade All in One SEO to the latest available version. For more details, visit https://nvd.nist.gov/vuln/detail/CVE-2026-10755.

In Modern Event Calendar component for WordPress versions before 7.34.0 a high severity vulnerability CVE-2026-11349 was detected. This vulnerability allows attackers to extract sensitive data from the database. To address this issue, users should upgrade Modern Event Calendar to the latest available version. For more details, visit https://nvd.nist.gov/vuln/detail/CVE-2026-11349.

In WP Travel component for WordPress versions 11.7.1 and earlier a medium severity vulnerability CVE-2026-11868 was detected. This vulnerability allows unauthenticated users to cancel arbitrary bookings. To address this issue, users should upgrade WP Travel to the latest available version. For more details, visit https://nvd.nist.gov/vuln/detail/CVE-2026-11868.

In Gravity Forms component for WordPress versions 2.10.4 and earlier a high severity vulnerability CVE-2026-12997 was detected. This vulnerability allows unauthenticated attackers to read the contents of arbitrary files on the server. To address this issue, users should upgrade Gravity Forms to the latest available version. For more details, visit https://nvd.nist.gov/vuln/detail/CVE-2026-12997.

In Academy LMS component for WordPress versions 3.8.0 and earlier a medium severity vulnerability CVE-2026-9341 was detected. This vulnerability allows authenticated attackers to read, overwrite, or delete private lesson notes and falsify lesson progress for other users. To address this issue, users should upgrade Academy LMS to the latest available version. For more details, visit https://nvd.nist.gov/vuln/detail/CVE-2026-9341.

In Smart Slider 3 component for WordPress versions 3.5.1.37 and earlier a medium severity vulnerability CVE-2026-12385 was detected. This vulnerability allows authenticated attackers to extract titles and full content excerpts of various types of posts. To address this issue, users should upgrade Smart Slider 3 to the latest available version. For more details, visit https://nvd.nist.gov/vuln/detail/CVE-2026-12385.

In Avada (Fusion) Builder component for WordPress versions 3.15.5 and earlier a medium severity vulnerability CVE-2026-12536 was detected. This vulnerability allows authenticated attackers to inject arbitrary web scripts. To address this issue, users should upgrade Avada (Fusion) Builder to the latest available version. For more details, visit https://nvd.nist.gov/vuln/detail/CVE-2026-12536.

In Breeze Cache component for WordPress versions before 2.5.6 a medium severity vulnerability CVE-2026-10551 was detected. This vulnerability allows an attacker to inject arbitrary HTML attributes in the final HTML output. To address this issue, users should upgrade Breeze Cache to the latest available version. For more details, visit https://nvd.nist.gov/vuln/detail/CVE-2026-10551.

In User Registration & Membership component for WordPress versions before 5.2.2 a critical severity vulnerability CVE-2026-11964 was detected. This vulnerability allows unauthenticated attackers to forge a payment-approved event and activate a paid membership without completing a real payment. To address this issue, users should upgrade User Registration & Membership to the latest available version. For more details, visit https://nvd.nist.gov/vuln/detail/CVE-2026-11964.