CVE Vulnerability Archive

# 411 Vulnerabilities

Severity:

Platform:

DATE	CVE Code	Vulnerability Description	CVSS / Severity	Platforms
2026-07-27	CVE-2026-65519	CVE-2026-65519 - WordPress Photo Gallery plugin <= 2.7.7.29 - Cross Site Scripting (XSS) vulnerability	3.1 (MEDIUM)	PHP
2026-07-27	CVE-2026-65521	CVE-2026-65521 - WordPress WP Social Ninja plugin <= 4.3.0 - Sensitive Data Exposure vulnerability	3.1 (MEDIUM)	PHP
2026-07-27	CVE-2026-65522	CVE-2026-65522 - WordPress Manual - Documentation, Knowledge Base & Education WordPress theme theme <= 7.5.4 - Cross Site Scripting (XSS) vulnerability	3.1 (MEDIUM)	PHP
2026-07-27	CVE-2026-65524	CVE-2026-65524 - WordPress Avada Custom Branding plugin <= 1.2 - Broken Access Control vulnerability	3.1 (MEDIUM)	PHP
2026-07-27	CVE-2026-65525	CVE-2026-65525 - WordPress Civi Framework plugin <= 2.2.0 - Broken Access Control vulnerability	3.1 (MEDIUM)	PHP
2026-07-27	CVE-2026-65526	CVE-2026-65526 - WordPress Visualizer plugin <= 4.0.6 - SQL Injection vulnerability	3.1 (HIGH)	PHP
2026-07-27	CVE-2026-65527	CVE-2026-65527 - WordPress LIQUID SPEECH BALLOON plugin <= 1.2.5 - Cross Site Scripting (XSS) vulnerability	3.1 (MEDIUM)	PHP
2026-07-27	CVE-2026-65528	CVE-2026-65528 - WordPress BSK PDF Manager plugin <= 3.8 - Cross Site Scripting (XSS) vulnerability	3.1 (MEDIUM)	PHP
2026-07-27	CVE-2026-65529	CVE-2026-65529 - WordPress Graphina plugin <= 3.1.12 - Broken Access Control vulnerability	3.1 (MEDIUM)	PHP
2026-07-27	CVE-2026-65530	CVE-2026-65530 - WordPress TemplateSpare plugin <= 4.2.2 - Broken Access Control vulnerability	3.1 (MEDIUM)	PHP
2026-07-27	CVE-2026-65531	CVE-2026-65531 - WordPress Qubely plugin <= 1.8.14 - Broken Access Control vulnerability	3.1 (MEDIUM)	PHP
2026-07-27	CVE-2026-65532	CVE-2026-65532 - WordPress Persian Woocommerce SMS plugin <= 7.2.2 - SQL Injection vulnerability	3.1 (HIGH)	PHP
2026-07-27	CVE-2026-65533	CVE-2026-65533 - WordPress Smart SEO Tool plugin <= 4.1.2 - Cross Site Scripting (XSS) vulnerability	3.1 (MEDIUM)	PHP
2026-07-27	CVE-2026-65534	CVE-2026-65534 - WordPress Custom links in Elementor Image Carousel plugin <= 1.1.1 - Cross Site Scripting (XSS) vulnerability	3.1 (MEDIUM)	PHP
2026-07-27	CVE-2026-65535	CVE-2026-65535 - WordPress TinyMCE Templates plugin <= 4.8.1 - Sensitive Data Exposure vulnerability	3.1 (MEDIUM)	PHP
2026-07-27	CVE-2026-65536	CVE-2026-65536 - WordPress افزونه حمل و نقل ووکامرس (پست پیشتاز و سفارشی، پیک موتوری) plugin <= 4.4.5 - Cross Site Request Forgery (CSRF) vulnerability	3.1 (MEDIUM)	PHP
2026-07-27	CVE-2026-65537	CVE-2026-65537 - WordPress Cyr to Lat reloaded – transliteration of links and file names plugin <= 1.3.3 - Broken Access Control vulnerability	3.1 (MEDIUM)	PHP
2026-07-27	CVE-2026-65538	CVE-2026-65538 - WordPress Machete plugin <= 5.2 - Cross Site Scripting (XSS) vulnerability	3.1 (MEDIUM)	PHP
2026-07-27	CVE-2026-65539	CVE-2026-65539 - WordPress Kwayy HTML Sitemap plugin <= 4.0 - CSRF to Stored XSS vulnerability	3.1 (HIGH)	PHP
2026-07-27	CVE-2026-65540	CVE-2026-65540 - WordPress Popup for CF7 with Sweet Alert plugin <= 1.6.5 - Cross Site Request Forgery (CSRF) vulnerability	3.1 (HIGH)	PHP
2026-07-27	CVE-2026-65550	CVE-2026-65550 - WordPress Tabs plugin <= 2.5 - Cross Site Scripting (XSS) vulnerability	3.1 (MEDIUM)	PHP
2026-07-27	CVE-2026-15794	CVE-2026-15794 - Grid/List View for WooCommerce <= 3.0.9 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'position' Shortcode Attribute	3.1 (MEDIUM)
2026-07-27	CVE-2026-14282	CVE-2026-14282 - GoDAM <= 1.12.2 - Unauthenticated Arbitrary File Upload via WPForms File Upload Field	3.1 (CRITICAL)
2026-07-27	CVE-2026-15011	CVE-2026-15011 - Customer Support Ticket System & Helpdesk <= 6.0.5 - Unauthenticated Code Injection via 'path' Parameter	3.1 (CRITICAL)
2026-07-27	CVE-2026-65431	CVE-2026-65431 - Joomla Extension - regularlabs.com - Zipslip in GeoIP extension	-	PHP