WP Security
WWordPress Vulnerability Database

Hong Kong Security Advisory Paid Link XSS(CVE20261780)

  • March 20, 2026
Cross Site Scripting (XSS) in WordPress [CR]Paid Link Manager Plugin
Read More
WWordPress Vulnerability Database

Protecting Users from WooCommerce Subscription Access Risks(CVE20261926)

  • March 20, 2026
Broken Access Control in WordPress Subscriptions for WooCommerce Plugin
Read More
WWordPress Vulnerability Database

Hong Kong Security Alert Arbitrary File Deletion(CVE20262421)

  • March 20, 2026
Arbitrary File Deletion in WordPress ilGhera Carta Docente for WooCommerce Plugin
Read More
WWordPress Vulnerability Database

Community Advisory RockPress Access Control Flaw(CVE20263550)

  • March 20, 2026
Broken Access Control in WordPress RockPress Plugin
Read More
WWordPress Vulnerability Database

Royal Elementor Addons Access Control Vulnerability(CVE20262373)

  • March 20, 2026
Broken Access Control in WordPress Royal Elementor Addons Plugin
Read More
WWordPress Vulnerability Database

Hong Kong NGO warns XSS in CM(CVE20262432)

  • March 20, 2026
Cross Site Scripting (XSS) in WordPress CM Custom WordPress Reports and Analytics Plugin
Read More
WWordPress Vulnerability Database

Community Alert On CSRF in Media Plugin(CVE20264068)

  • March 19, 2026
Cross Site Request Forgery (CSRF) in WordPress Add Custom Fields to Media Plugin
Read More
WWordPress Vulnerability Database

Hong Kong Security Advisory Content Injection Risk(CVE20263475)

  • March 19, 2026
Content Injection in WordPress Instant Popup Builder Plugin
Read More
WWordPress Vulnerability Database

Community Security Alert Info Cards Plugin XSS(CVE20264120)

  • March 19, 2026
Cross Site Scripting (XSS) in WordPress Info Cards Plugin
Read More
WWordPress Vulnerability Database

NextGEN Gallery Local File Inclusion Advisory(CVE20261463)

  • March 19, 2026
Local File Inclusion in WordPress NextGEN Gallery Plugin
Read More
WP Security
© 2025 WP-Security.org Disclaimer: WP-Security.org is an independent, non-profit NGO community committed to sharing WordPress security news and information. We are not affiliated with WordPress, its parent company, or any related entities. All trademarks are the property of their respective owners.

hi there 👋 Sign up to receive awesome WP-Security Alert and update in your inbox, every week.

We don’t spam! Read our privacy policy for more info.

Check your inbox or spam folder to confirm your subscription.

Review My Order

0

Suggested for you

Subtotal

Taxes & shipping calculated at checkout

Checkout
0

Notifications

English
Chinese (Hong Kong) Chinese (China) Spanish Hindi French