WWordPress Vulnerability Database Security Advisory Employee Directory Cross Site Scripting(CVE20261279)February 6, 2026 Cross Site Scripting (XSS) in WordPress Employee Directory Plugin
WWordPress Vulnerability Database Hong Kong Security Advisory Docus Plugin XSS(CVE20261888)February 6, 2026 Cross Site Scripting (XSS) in WordPress Docus Plugin
WWordPress Vulnerability Database HK NGO Alerts XSS in Orange Comfort(CVE20261808)February 6, 2026 Cross Site Scripting (XSS) in WordPress Orange Comfort+ accessibility toolbar for WordPress Plugin
WWordPress Vulnerability Database Hong Kong Cybersecurity Alert WordPress OAuth Flaw(CVE202510753)February 6, 2026 Broken Access Control in WordPress OAuth Single Sign On – SSO (OAuth Client) Plugin
WWordPress Vulnerability Database Protecting Hong Kong Websites from SSRF Attacks(CVE20236991)February 5, 2026 Server Side Request Forgery (SSRF) in WordPress JSM file_get_contents() Shortcode Plugin
WWordPress Vulnerability Database Community Advisory Post SMTP Plugin SQL Injection(CVE20236620)February 5, 2026 SQL Injection in WordPress Post SMTP Plugin
WWordPress Vulnerability Database Relevanssi Premium IDOR Threatens User Privacy(CVE20237199)February 5, 2026 Insecure Direct Object References (IDOR) in WordPress Relevanssi Premium Plugin
WWordPress Vulnerability Database Security Advisory XSS in WordPress Countdown(CVE20261654)February 5, 2026 Cross Site Scripting (XSS) in WordPress Peter’s Date Countdown Plugin
WWordPress Vulnerability Database Protect Hong Kong Websites from Image Exploits(CVE20261246)February 5, 2026 Arbitrary File Download in WordPress ShortPixel Image Optimizer Plugin
WWordPress Vulnerability Database Community Alert ELEX HelpDesk Access Flaw(CVE202514079)February 4, 2026 Broken Access Control in WordPress ELEX WordPress HelpDesk & Customer Ticketing System Plugin