Business and Enterprise Solutions

In EDD Product Catalog Feed by PixelYourSite component for WordPress versions 1.0.2 and earlier a high severity vulnerability CVE-2026-9331 was detected. This vulnerability allows authenticated attackers to delete arbitrary option values. To address this issue, users should upgrade EDD Product Catalog Feed by PixelYourSite to the latest available version. For more details, visit https://nvd.nist.gov/vuln/detail/CVE-2026-9331.

In LearnPress – WordPress LMS Plugin for Create and Sell Online Courses component for WordPress versions up to and including 4.3.9.1 a medium severity vulnerability CVE-2026-12230 was detected. This vulnerability allows authenticated attackers to inject arbitrary web scripts. To address this issue, users should upgrade LearnPress – WordPress LMS Plugin for Create and Sell Online Courses to the latest available version. For more details, visit https://nvd.nist.gov/vuln/detail/CVE-2026-12230.

In WPML Multilingual CMS component for WordPress versions 4.9.5 and earlier a medium severity vulnerability CVE-2026-17509 was detected. This vulnerability allows authenticated attackers to extract sensitive information from the database. To address this issue, users should upgrade WPML Multilingual CMS to the latest available version. For more details, visit https://nvd.nist.gov/vuln/detail/CVE-2026-17509.

In Beaver Builder Page Builder – Drag and Drop Website Builder component for WordPress versions 2.10.3.1 and earlier a medium severity vulnerability CVE-2026-18021 was detected. This vulnerability allows attackers to execute arbitrary shortcodes. To address this issue, users should upgrade Beaver Builder Page Builder – Drag and Drop Website Builder to the latest available version. For more details, visit https://nvd.nist.gov/vuln/detail/CVE-2026-18021.

In Live Composer – Free WordPress Website Builder component for WordPress versions 2.1.18 and earlier a high severity vulnerability CVE-2026-16502 was detected. This vulnerability allows authenticated attackers to inject a PHP Object. To address this issue, users should upgrade Live Composer – Free WordPress Website Builder to the latest available version. For more details, visit https://nvd.nist.gov/vuln/detail/CVE-2026-16502.

In Powerkit component for WordPress versions 3.0.4 and earlier a medium severity vulnerability CVE-2026-2390 was detected. This vulnerability allows attackers to inject arbitrary web scripts. To address this issue, users should upgrade Powerkit to the latest available version. For more details, visit https://nvd.nist.gov/vuln/detail/CVE-2026-2390.

In Flamingo component for WordPress versions 2.6.2 and earlier a medium severity vulnerability CVE-2026-12853 was detected. This vulnerability allows unauthorized users to perform restricted actions. To address this issue, users should upgrade Flamingo to the latest available version. For more details, visit https://nvd.nist.gov/vuln/detail/CVE-2026-12853.

In Otter Blocks component for WordPress versions 3.1.7 and earlier a medium severity vulnerability CVE-2026-4945 was detected. This vulnerability allows unauthenticated attackers to pay for a lower-cost product while obtaining entitlement for a premium product. To address this issue, users should upgrade Otter Blocks to the latest available version. For more details, visit https://nvd.nist.gov/vuln/detail/CVE-2026-4945.

In User Profile Builder – Beautiful User Registration Forms, User Profiles & User Role Editor component for WordPress versions 3.15.7 and earlier a high severity vulnerability CVE-2026-6431 was detected. This vulnerability allows unauthenticated attackers to inject arbitrary web scripts. To address this issue, users should upgrade User Profile Builder – Beautiful User Registration Forms, User Profiles & User Role Editor to the latest available version. For more details, visit https://nvd.nist.gov/vuln/detail/CVE-2026-6431.