In Visual Composer Website Builder component for WordPress versions 45.16.0 and earlier a critical severity vulnerability CVE-2026-12227 was detected. This vulnerability allows unauthenticated attackers to include and execute arbitrary files on the server. To address this issue, users should upgrade Visual Composer Website Builder to the latest available version. For more details, visit https://nvd.nist.gov/vuln/detail/CVE-2026-12227.
Read more CMS
In WP Multilang – Translation and Multilingual Plugin component for WordPress versions 2.4.31 and earlier a medium severity vulnerability CVE-2026-15731 was detected. This vulnerability allows authenticated attackers to inject arbitrary web scripts. To address this issue, users should upgrade WP Multilang – Translation and Multilingual Plugin to the latest available version. For more details, visit https://nvd.nist.gov/vuln/detail/CVE-2026-15731.
Read more CMS
In the Kirki – Freeform Page Builder, Website Builder & Customizer component for WordPress versions 6.2.0 and earlier a medium severity vulnerability CVE-2026-18335 was detected. This vulnerability allows unauthenticated attackers to make web requests to arbitrary locations from the server. To address this issue, users should upgrade the Kirki plugin to the latest available version. For more details, visit https://nvd.nist.gov/vuln/detail/CVE-2026-18335.
Read more CMS
In MarketKing component for WordPress versions before 2.1.72 a medium severity vulnerability CVE-2026-93343 was detected. This vulnerability allows authenticated attackers to retrieve personally identifiable information of all registered vendors. To address this issue, users should upgrade MarketKing to the latest available version. For more details, visit https://nvd.nist.gov/vuln/detail/CVE-2026-93343.
Read more CMS
In WP Recipe Maker component for WordPress versions before 10.8.2 a medium severity vulnerability CVE-2026-86601 was detected. This vulnerability allows unauthenticated users to have arbitrary shortcodes executed server side and to read the content of unpublished recipes. To address this issue, users should upgrade WP Recipe Maker to the latest available version. For more details, visit https://nvd.nist.gov/vuln/detail/CVE-2026-86601.
Read more CMS
In HashBar – WordPress Notification Bar component for WordPress versions 2.0.3 and earlier a high severity vulnerability CVE-2026-94117 was detected. This vulnerability allows attackers to execute arbitrary SQL commands. To address this issue, users should upgrade HashBar – WordPress Notification Bar to the latest available version. For more details, visit https://nvd.nist.gov/vuln/detail/CVE-2026-94117.
Read more CMS
In MarketKing plugin component for WordPress versions before 2.1.72 a medium severity vulnerability CVE-2026-93341 was detected. This vulnerability allows authenticated attackers to create fraudulent refund requests against any order. To address this issue, users should upgrade MarketKing to the latest available version. For more details, visit https://nvd.nist.gov/vuln/detail/CVE-2026-93341.
Read more CMS
In OrdaSoft Joomla Gallery component for Joomla versions 6.2.7 and earlier a critical severity vulnerability CVE-2026-88854 was detected. This vulnerability allows unauthenticated attackers to execute arbitrary SQL commands. To address this issue, users should upgrade OrdaSoft Joomla Gallery to the latest available version. For more details, visit https://nvd.nist.gov/vuln/detail/CVE-2026-88854.
Read more CMS
In OrdaSoft Joomla Gallery component for Joomla versions before 6.2.7 a high severity vulnerability CVE-2026-88855 was detected. This vulnerability allows an authenticated attacker to execute SQL commands. To address this issue, users should upgrade OrdaSoft Joomla Gallery to the latest available version. For more details, visit https://nvd.nist.gov/vuln/detail/CVE-2026-88855.
Read more CMS