WWordPress Vulnerability Database Community Security Alert Arbitrary File Upload Risk(CVE202513066)February 3, 2026 Arbitrary File Upload in WordPress Demo Importer Plus Plugin
WWordPress Vulnerability Database Community Alert XSS in ONLYOFFICE DocSpace(CVE202411750)February 3, 2026 Cross Site Scripting (XSS) in WordPress ONLYOFFICE DocSpace Plugin
WWordPress Vulnerability Database Hong Kong Advisory Contentstudio Arbitrary File Upload(CVE202512181)February 3, 2026 Arbitrary File Upload in WordPress Contentstudio Plugin
WWordPress Vulnerability Database Community Advisory DynamiApps Frontend Privilege Escalation(CVE202411721)February 3, 2026 Privilege Escalation in WordPress Frontend Admin by DynamiApps Plugin
WWordPress Vulnerability Database Hong Kong Security Advisory Arena IM XSS(CVE202411384)February 3, 2026 Cross Site Scripting (XSS) in WordPress Arena.IM – Live Blogging for real-time events Plugin
WWordPress Vulnerability Database Protect Hong Kong Websites from Koalendar XSS(CVE202411855)February 3, 2026 Cross Site Scripting (XSS) in WordPress Koalendar Plugin
WWordPress Vulnerability Database Community Warning ElementInvader Access Control Flaw(CVE202412059)February 3, 2026 Broken Access Control in WordPress ElementInvader Addons for Elementor Plugin
WWordPress Vulnerability Database Protecting Community Sites from Events Plugin XSS(CVE202411875)February 3, 2026 Cross Site Scripting (XSS) in WordPress Add infos to the events calendar Plugin
WWordPress Vulnerability Database Hong Kong Security Alert Broken Authentication(CVE202413182)February 3, 2026 Broken Authentication in WordPress WP Directorybox Manager Plugin
WWordPress Vulnerability Database Community Alert Contact Form Seven XSS Vulnerability(CVE20240239)February 3, 2026 Cross Site Scripting (XSS) in WordPress Contact Form 7 Connector Plugin