Business and Enterprise Solutions

In WPML Multilingual CMS component for WordPress versions 4.9.5 and earlier a medium severity vulnerability CVE-2026-17509 was detected. This vulnerability allows authenticated attackers to extract sensitive information from the database. To address this issue, users should upgrade WPML Multilingual CMS to the latest available version. For more details, visit https://nvd.nist.gov/vuln/detail/CVE-2026-17509.

In Beaver Builder Page Builder – Drag and Drop Website Builder component for WordPress versions 2.10.3.1 and earlier a medium severity vulnerability CVE-2026-18021 was detected. This vulnerability allows attackers to execute arbitrary shortcodes. To address this issue, users should upgrade Beaver Builder Page Builder – Drag and Drop Website Builder to the latest available version. For more details, visit https://nvd.nist.gov/vuln/detail/CVE-2026-18021.

In Live Composer – Free WordPress Website Builder component for WordPress versions 2.1.18 and earlier a high severity vulnerability CVE-2026-16502 was detected. This vulnerability allows authenticated attackers to inject a PHP Object. To address this issue, users should upgrade Live Composer – Free WordPress Website Builder to the latest available version. For more details, visit https://nvd.nist.gov/vuln/detail/CVE-2026-16502.

In Powerkit component for WordPress versions 3.0.4 and earlier a medium severity vulnerability CVE-2026-2390 was detected. This vulnerability allows attackers to inject arbitrary web scripts. To address this issue, users should upgrade Powerkit to the latest available version. For more details, visit https://nvd.nist.gov/vuln/detail/CVE-2026-2390.

In Flamingo component for WordPress versions 2.6.2 and earlier a medium severity vulnerability CVE-2026-12853 was detected. This vulnerability allows unauthorized users to perform restricted actions. To address this issue, users should upgrade Flamingo to the latest available version. For more details, visit https://nvd.nist.gov/vuln/detail/CVE-2026-12853.

In Otter Blocks component for WordPress versions 3.1.7 and earlier a medium severity vulnerability CVE-2026-4945 was detected. This vulnerability allows unauthenticated attackers to pay for a lower-cost product while obtaining entitlement for a premium product. To address this issue, users should upgrade Otter Blocks to the latest available version. For more details, visit https://nvd.nist.gov/vuln/detail/CVE-2026-4945.

In User Profile Builder – Beautiful User Registration Forms, User Profiles & User Role Editor component for WordPress versions 3.15.7 and earlier a high severity vulnerability CVE-2026-6431 was detected. This vulnerability allows unauthenticated attackers to inject arbitrary web scripts. To address this issue, users should upgrade User Profile Builder – Beautiful User Registration Forms, User Profiles & User Role Editor to the latest available version. For more details, visit https://nvd.nist.gov/vuln/detail/CVE-2026-6431.

In JetFormBuilder component for WordPress versions before 3.6.5.2 a medium severity vulnerability CVE-2026-19862 was detected. This vulnerability allows unauthenticated users to inject arbitrary e-mail headers, add hidden recipients and spoof the sender. To address this issue, users should upgrade JetFormBuilder to the latest available version. For more details, visit https://nvd.nist.gov/vuln/detail/CVE-2026-19862.

In Ninja Forms component for WordPress versions from 3.14.10 before 3.15.2 a medium severity vulnerability CVE-2026-80437 was detected. This vulnerability allows unauthenticated users to run any shortcode registered on the site. To address this issue, users should upgrade Ninja Forms to the latest available version. For more details, visit https://nvd.nist.gov/vuln/detail/CVE-2026-80437.