Business and Enterprise Solutions

In Aruba HiSpeed Cache component for WordPress versions 3.0.14 and earlier a medium severity vulnerability CVE-2026-15889 was detected. This vulnerability allows authenticated attackers to inject arbitrary web scripts. To address this issue, users should upgrade Aruba HiSpeed Cache plugin to the latest available version. For more details, visit https://nvd.nist.gov/vuln/detail/CVE-2026-15889.

In SP Property component for Joomla versions prior to 4.1.4 a critical severity vulnerability CVE-2026-78082 was detected. This vulnerability allows an unauthenticated attacker to extract sensitive data from the database. To address this issue, users should upgrade SP Property to the latest available version. For more details, visit https://nvd.nist.gov/vuln/detail/CVE-2026-78082.

In SP Property component for Joomla versions prior to 4.1.4 a medium severity vulnerability CVE-2026-78084 was detected. This vulnerability allows unauthorized users to remove arbitrary files or upload unverified file types. To address this issue, users should upgrade SP Property to the latest available version. For more details, visit https://nvd.nist.gov/vuln/detail/CVE-2026-78084.

In Redux Framework component for WordPress versions 4.5.13.1 and earlier a medium severity vulnerability CVE-2026-5399 was detected. This vulnerability allows attackers to inject arbitrary web scripts. To address this issue, users should upgrade Redux Framework to the latest available version. For more details, visit https://nvd.nist.gov/vuln/detail/CVE-2026-5399.

In SP Property component for Joomla versions prior to 4.1.4 a high severity vulnerability CVE-2026-78083 was detected. This vulnerability allows attackers to perform unauthorized actions on behalf of authenticated users. To address this issue, users should upgrade SP Property to the latest available version. For more details, visit https://nvd.nist.gov/vuln/detail/CVE-2026-78083.

In Rara One Click Demo Import component for WordPress versions before 1.3.5 a high severity vulnerability CVE-2026-26212 was detected. This vulnerability allows an attacker to achieve remote code execution. To address this issue, users should upgrade Rara One Click Demo Import to the latest available version. For more details, visit https://nvd.nist.gov/vuln/detail/CVE-2026-26212.

In IP2Location Country Blocker component for WordPress versions before 2.45.0 a medium severity vulnerability CVE-2026-82530 was detected. This vulnerability allows unauthenticated attackers to bypass IP-based access restrictions. To address this issue, users should upgrade IP2Location Country Blocker to the latest available version. For more details, visit https://nvd.nist.gov/vuln/detail/CVE-2026-82530.

In EDD Product Catalog Feed by PixelYourSite component for WordPress versions 1.0.2 and earlier a high severity vulnerability CVE-2026-9331 was detected. This vulnerability allows authenticated attackers to delete arbitrary option values. To address this issue, users should upgrade EDD Product Catalog Feed by PixelYourSite to the latest available version. For more details, visit https://nvd.nist.gov/vuln/detail/CVE-2026-9331.

In LearnPress – WordPress LMS Plugin for Create and Sell Online Courses component for WordPress versions up to and including 4.3.9.1 a medium severity vulnerability CVE-2026-12230 was detected. This vulnerability allows authenticated attackers to inject arbitrary web scripts. To address this issue, users should upgrade LearnPress – WordPress LMS Plugin for Create and Sell Online Courses to the latest available version. For more details, visit https://nvd.nist.gov/vuln/detail/CVE-2026-12230.