Business and Enterprise Solutions

In Event Gallery component for Joomla versions earlier than 6.5.0 a medium severity vulnerability CVE-2026-100748 was detected. This vulnerability allows attackers to perform cross-site request forgery attacks. To address this issue, users should upgrade Event Gallery to the latest available version. For more details, visit https://nvd.nist.gov/vuln/detail/CVE-2026-100748.

In Event Gallery component for Joomla versions 6.5.0 and earlier a medium severity vulnerability CVE-2026-100749 was detected. This vulnerability allows an attacker to perform unintended backend cleanup actions via a crafted request. To address this issue, users should upgrade Event Gallery to the latest available version. For more details, visit https://nvd.nist.gov/vuln/detail/CVE-2026-100749.

In Event Gallery extension component for Joomla versions 6.5.0 and earlier a high severity vulnerability CVE-2026-97164 was detected. This vulnerability allows an authenticated attacker to recursively delete arbitrary directories. To address this issue, users should upgrade Event Gallery extension to the latest available version. For more details, visit https://nvd.nist.gov/vuln/detail/CVE-2026-97164.

In Event Gallery component for Joomla versions earlier than 6.5.0 a medium severity vulnerability CVE-2026-97165 was detected. This vulnerability allows attackers to execute Reflected Cross-Site Scripting (XSS) and perform open redirects. To address this issue, users should upgrade Event Gallery to the latest available version. For more details, visit https://nvd.nist.gov/vuln/detail/CVE-2026-97165.

In MailerLite – Signup forms (official) component for WordPress versions 1.7.21 and earlier a medium severity vulnerability CVE-2026-3253 was detected. This vulnerability allows authenticated attackers to create or delete arbitrary signup forms. To address this issue, users should upgrade MailerLite – Signup forms (official) to the latest available version. For more details, visit https://nvd.nist.gov/vuln/detail/CVE-2026-3253.

In Custom Thank You Page for WooCommerce component for WordPress versions 1.1.2 and earlier a medium severity vulnerability CVE-2026-4806 was detected. This vulnerability allows unauthenticated attackers to export or reset the plugin’s settings. To address this issue, users should upgrade Custom Thank You Page for WooCommerce to the latest available version. For more details, visit https://nvd.nist.gov/vuln/detail/CVE-2026-4806.

In Spectra Legacy – Gutenberg Blocks component for WordPress versions 2.20.0 and earlier a medium severity vulnerability CVE-2026-16302 was detected. This vulnerability allows authenticated attackers with at least Contributor-level access to extract sensitive data, including Instagram Graph API access tokens. To address this issue, users should upgrade Spectra Legacy – Gutenberg Blocks to the latest available version. For more details, visit https://nvd.nist.gov/vuln/detail/CVE-2026-16302.

In eesy_ID2WP – Publish InDesign HTML5 plugin component for WordPress versions 1.0.3 and earlier a high severity vulnerability CVE-2026-77193 was detected. This vulnerability allows unauthenticated attackers to read the contents of arbitrary files on the server. To address this issue, users should upgrade eesy_ID2WP – Publish InDesign HTML5 plugin to the latest available version. For more details, visit https://nvd.nist.gov/vuln/detail/CVE-2026-77193.

In YOP Poll component for WordPress versions 7.0.10 and earlier a high severity vulnerability CVE-2026-85682 was detected. This vulnerability allows unauthenticated attackers to take over an administrator’s account. To address this issue, users should upgrade YOP Poll to the latest available version. For more details, visit https://nvd.nist.gov/vuln/detail/CVE-2026-85682.