WP Security
WWordPress Vulnerability Database

Hong Kong Community Alert Smart Forms Vulnerability(CVE20262022)

  • February 13, 2026
Broken Access Control in WordPress Smart Forms Plugin
Read More
WWordPress Vulnerability Database

Hong Kong Security Alert CSRF in LatePoint(CVE202514873)

  • February 13, 2026
Cross Site Request Forgery (CSRF) in WordPress LatePoint Plugin
Read More
WWordPress Vulnerability Database

Security Alert XSS in WordPress Language Switcher(CVE20260735)

  • February 13, 2026
Cross Site Scripting (XSS) in WordPress User Language Switch Plugin
Read More
WWordPress Vulnerability Database

Press3D Cross Site Scripting Public Advisory(CVE20261985)

  • February 13, 2026
Cross Site Scripting (XSS) in WordPress Press3D Plugin
Read More
WWordPress Vulnerability Database

HK Security Alert ZoomifyWP Cross Site Scripting(CVE20261187)

  • February 13, 2026
Cross Site Scripting (XSS) in WordPress ZoomifyWP Free Plugin
Read More
WWordPress Vulnerability Database

Cross Site Scripting Threat in Payment Plugin(CVE20260751)

  • February 13, 2026
Cross Site Scripting (XSS) in WordPress Payment Page Plugin
Read More
WWordPress Vulnerability Database

Security Alert XSS in Percent to Infograph(CVE20261939)

  • February 13, 2026
Cross Site Scripting (XSS) in WordPress Percent to Infograph Plugin
Read More
WWordPress Vulnerability Database

Hong Kong Security Alert Bookr Access Flaw(CVE20261932)

  • February 13, 2026
Broken Access Control in WordPress Bookr Plugin
Read More
WWordPress Vulnerability Database

Hong Kong Alert SSRF in Language Plugin(CVE20260745)

  • February 13, 2026
Server Side Request Forgery (SSRF) in WordPress User Language Switch Plugin
Read More
WWordPress Vulnerability Database

Local File Inclusion Risk in WooCommerce(CVE20261988)

  • February 13, 2026
Local File Inclusion in WordPress Flexi Product Slider and Grid for WooCommerce Plugin
Read More
WP Security
© 2025 WP-Security.org Disclaimer: WP-Security.org is an independent, non-profit NGO community committed to sharing WordPress security news and information. We are not affiliated with WordPress, its parent company, or any related entities. All trademarks are the property of their respective owners.

hi there 👋 Sign up to receive awesome WP-Security Alert and update in your inbox, every week.

We don’t spam! Read our privacy policy for more info.

Check your inbox or spam folder to confirm your subscription.

Review My Order

0

Suggested for you

Subtotal

Taxes & shipping calculated at checkout

Checkout
0

Notifications

English
Chinese (Hong Kong) Chinese (China) Spanish Hindi French