Business and Enterprise Solutions

In Redirection for Contact Form 7 plugin component for WordPress versions from 2.2.7 before 3.2.11 a medium severity vulnerability CVE-2026-80439 was detected. This vulnerability allows unauthenticated users to execute shortcodes and read their output. To address this issue, users should upgrade Redirection for Contact Form 7 plugin to the latest available version. For more details, visit https://nvd.nist.gov/vuln/detail/CVE-2026-80439.

In JetFormBuilder component for WordPress versions before 3.6.5.2 a medium severity vulnerability CVE-2026-19859 was detected. This vulnerability allows unauthenticated users to execute arbitrary shortcodes. To address this issue, users should upgrade JetFormBuilder to the latest available version. For more details, visit https://nvd.nist.gov/vuln/detail/CVE-2026-19859.

In GutenKit – Page Builder Blocks, Patterns, and Templates for Gutenberg Block Editor component for WordPress versions 2.4.4 and earlier a medium severity vulnerability CVE-2026-2573 was detected. This vulnerability allows authenticated attackers to inject arbitrary web scripts in pages. To address this issue, users should upgrade GutenKit – Page Builder Blocks, Patterns, and Templates for Gutenberg Block Editor to the latest available version. For more details, visit https://nvd.nist.gov/vuln/detail/CVE-2026-2573.

In J2Store component for Joomla versions 1.0.0 through 3.3.21, 4.0.0 through 4.0.21, and 4.1.0 through 4.1.6 a high severity vulnerability CVE-2026-77999 was detected. This vulnerability allows an unauthenticated attacker to forge PayPal Instant Payment Notification (IPN) callbacks to fraudulently confirm orders without payment. To address this issue, users should upgrade J2Store to the latest available version. For more details, visit https://nvd.nist.gov/vuln/detail/CVE-2026-77999.

In J2Store component for Joomla versions 1.0.0 through 3.3.21, 4.0.0 through 4.0.21, and 4.1.0 through 4.1.6 a high severity vulnerability CVE-2026-78064 was detected. This vulnerability allows attackers to tamper with cart records. To address this issue, users should upgrade J2Store to the latest available version. For more details, visit https://nvd.nist.gov/vuln/detail/CVE-2026-78064.

In Divi theme component for WordPress versions 4.27.6 and earlier a medium severity vulnerability CVE-2026-3852 was detected. This vulnerability allows attackers to inject malicious scripts. To address this issue, users should upgrade Divi theme to the latest available version. For more details, visit https://nvd.nist.gov/vuln/detail/CVE-2026-3852.

In J2Store component for Joomla versions 1.0.0-3.3.21, 4.0.0-4.0.21, and 4.1.0-4.1.6 a medium severity vulnerability CVE-2026-78000 was detected. This vulnerability allows attackers to perform open redirects, facilitating phishing attacks. To address this issue, users should upgrade J2Store to the latest available version. For more details, visit https://nvd.nist.gov/vuln/detail/CVE-2026-78000.

In Ultimate Gift Cards For WooCommerce component for WooCommerce versions 3.2.9 and earlier a medium severity vulnerability CVE-2026-84760 was detected. This vulnerability allows unauthenticated attackers to gain unauthorized access to restricted functionalities. To address this issue, users should upgrade Ultimate Gift Cards For WooCommerce to the latest available version. For more details, visit https://nvd.nist.gov/vuln/detail/CVE-2026-84760.

In WooCommerce Product Attachment component for WooCommerce versions 2.3.3 and earlier a high severity vulnerability CVE-2026-81774 was detected. This vulnerability allows attackers to expose sensitive data. To address this issue, users should upgrade WooCommerce Product Attachment to the latest available version. For more details, visit https://nvd.nist.gov/vuln/detail/CVE-2026-81774.