WWordPress Vulnerability Database Community Warning ElementInvader Access Control Flaw(CVE202412059)February 3, 2026 Broken Access Control in WordPress ElementInvader Addons for Elementor Plugin
WWordPress Vulnerability Database Protecting Community Sites from Events Plugin XSS(CVE202411875)February 3, 2026 Cross Site Scripting (XSS) in WordPress Add infos to the events calendar Plugin
WWordPress Vulnerability Database Hong Kong Security Alert Broken Authentication(CVE202413182)February 3, 2026 Broken Authentication in WordPress WP Directorybox Manager Plugin
WWordPress Vulnerability Database Community Alert Contact Form Seven XSS Vulnerability(CVE20240239)February 3, 2026 Cross Site Scripting (XSS) in WordPress Contact Form 7 Connector Plugin
WWordPress Vulnerability Database Address Drive Plugin Access Control Risks(CVE20242086)February 3, 2026 Broken Access Control in WordPress Integrate Google Drive Plugin
WWordPress Vulnerability Database Community Alert XSS Vulnerability in Elementor Addons(CVE202412120)February 3, 2026 Cross Site Scripting (XSS) in WordPress Royal Elementor Addons Plugin
WWordPress Vulnerability Database Hong Kong Security Alert NitroPack Access Flaw(CVE202411851)February 3, 2026 Broken Access Control in WordPress NitroPack Plugin
WWordPress Vulnerability Database Hong Kong Security Alert SSRF in BuddyPress(CVE202411913)February 3, 2026 Server Side Request Forgery (SSRF) in WordPress Activity Plus Reloaded for BuddyPress Plugin
WWordPress Vulnerability Database Protecting Communities Against Snippet Shortcodes Access Risks(CVE202412018)February 3, 2026 Broken Access Control in WordPress Snippet Shortcodes Plugin
WWordPress Vulnerability Database Protect Hong Kong Users from IdeaPush Flaws(CVE202411844)February 3, 2026 Broken Access Control in WordPress IdeaPush Plugin