CVE-2026-62114WordPress Passster plugin <= 4.3.13 - Broken Access Control vulnerability Exploitation status Not known exploited Fix Affected product P Passster Published 09/11/2026 Severity Medium CVE-2026-84781WordPress Gallery PhotoBlocks plugin <= 1.3.4 - Cross Site Scripting (XSS) vulnerability Exploitation status Not known exploited Fix Affected product G Gallery PhotoBlocks Published 09/02/2026 Severity Medium CVE-2026-81276WordPress Kali Forms plugin <= 2.4.23 - Broken Access Control vulnerability Exploitation status Not known exploited Fix Affected product K Kali Forms Published 08/27/2026 Severity Medium CVE-2026-65446WordPress Kali Forms plugin <= 2.4.18 - Cross Site Scripting (XSS) vulnerability Exploitation status Not known exploited Fix Affected product K Kali Forms Published 07/27/2026 Severity High CVE-2026-66448WordPress Gallery PhotoBlocks plugin <= 1.3.3 - Cross Site Scripting (XSS) vulnerability Exploitation status Not known exploited Fix Affected product G Gallery PhotoBlocks Published 07/27/2026 Severity Medium CVE-2026-65475WordPress Modula Image Gallery plugin 2.14.25-2.14.30 - Cross Site Scripting (XSS) vulnerability Exploitation status Not known exploited Fix Affected product M Modula Image Gallery Published 07/23/2026 Severity Medium CVE-2026-59542WordPress Kali Forms plugin <= 2.4.18 - Arbitrary File Deletion vulnerability Exploitation status Not known exploited Fix Affected product K Kali Forms Published 07/23/2026 Severity High CVE-2026-42688WordPress Modula Image Gallery plugin <= 2.14.23 - Cross Site Scripting (XSS) vulnerability Exploitation status Not known exploited Fix Affected product M Modula Image Gallery Published 06/15/2026 Severity Medium CVE-2026-39489WordPress Download Monitor plugin <= 5.1.9 - Non-Arbitrary File Download vulnerability Exploitation status Not known exploited Fix Affected product D Download Monitor Published 06/15/2026 Severity Medium CVE-2026-39481WordPress Modula Image Gallery plugin <= 2.14.18 - PHP Object Injection vulnerability Exploitation status Not known exploited Fix Affected product M Modula Image Gallery Published 06/15/2026 Severity High CVE-2026-27398WordPress RSVP and Event Management plugin <= 2.7.16 - Broken Access Control vulnerability Exploitation status Not known exploited Fix Affected product R RSVP and Event Management Published 05/25/2026 Severity Medium CVE-2026-27424WordPress Image Photo Gallery Final Tiles Grid plugin <= 3.6.11 - Broken Access Control vulnerability Exploitation status Not known exploited Fix Affected product I Image Photo Gallery Final Tiles Grid Published 05/20/2026 Severity Medium CVE-2026-39561WordPress Revive.so plugin <= 2.0.7 - Broken Access Control vulnerability Exploitation status Not known exploited Fix Affected product R Revive.so Published 04/08/2026 Severity Medium CVE-2026-39536WordPress RSVP and Event Management plugin <= 2.7.16 - Sensitive Data Exposure vulnerability Exploitation status Not known exploited Fix Affected product R RSVP and Event Management Published 04/08/2026 Severity Medium CVE-2026-39510WordPress Image Photo Gallery Final Tiles Grid plugin <= 3.6.11 - Insecure Direct Object References (IDOR) vulnerability Exploitation status Not known exploited Fix Affected product I Image Photo Gallery Final Tiles Grid Published 04/08/2026 Severity Low CVE-2026-39486WordPress Download Monitor plugin <= 5.1.8 - SQL Injection vulnerability Exploitation status Not known exploited Fix Affected product D Download Monitor Published 04/08/2026 Severity High CVE-2026-28133WordPress Filr plugin <= 1.2.14 - Arbitrary File Upload vulnerability Exploitation status Not known exploited Fix Affected product F Filr Published 03/05/2026 Severity High CVE-2026-25375WordPress Image Photo Gallery Final Tiles Grid plugin <= 3.6.10 - Broken Access Control vulnerability Exploitation status Not known exploited Fix Affected product I Image Photo Gallery Final Tiles Grid Published 02/19/2026 Severity Medium CVE-2026-25036WordPress Passster plugin <= 4.2.25 - Broken Access Control vulnerability Exploitation status Not known exploited Fix Affected product P Passster Published 02/03/2026 Severity Medium CVE-2026-24957WordPress Strong Testimonials plugin <= 3.2.20 - Broken Access Control vulnerability Exploitation status Not known exploited Fix Affected product S Strong Testimonials Published 02/03/2026 Severity Medium CVE-2026-24939WordPress Modula Image Gallery plugin <= 2.13.6 - Broken Access Control vulnerability Exploitation status Not known exploited Fix Affected product M Modula Image Gallery Published 02/03/2026 Severity Medium CVE-2026-24389WordPress Gallery PhotoBlocks plugin <= 1.3.2 - Cross Site Scripting (XSS) vulnerability Exploitation status Not known exploited Fix Affected product G Gallery PhotoBlocks Published 01/22/2026 Severity Medium CVE-2026-23976WordPress Modula Image Gallery plugin <= 2.13.4 - Cross Site Scripting (XSS) vulnerability Exploitation status Not known exploited Fix Affected product M Modula Image Gallery Published 01/22/2026 Severity Medium CVE-2025-64230WordPress Filr plugin <= 1.2.10 - Arbitrary File Deletion vulnerability Exploitation status Not known exploited Fix Affected product F Filr Published 12/18/2025 Severity High CVE-2025-64218WordPress Passster plugin <= 4.2.19 - Sensitive Data Exposure vulnerability Exploitation status Not known exploited Fix Affected product P Passster Published 12/18/2025 Severity High CVE-2025-59551WordPress Revive.so Plugin <= 2.0.6 - Broken Access Control Vulnerability Exploitation status Not known exploited Fix Affected product R Revive.so Published 09/22/2025 Severity Medium CVE-2025-57926WordPress Passster Plugin <= 4.2.18 - Cross Site Scripting (XSS) Vulnerability Exploitation status Not known exploited Fix Affected product P Passster Published 09/22/2025 Severity Medium CVE-2025-58610WordPress Gallery PhotoBlocks Plugin <= 1.3.1 - Cross Site Scripting (XSS) Vulnerability Exploitation status Not known exploited Fix Affected product G Gallery PhotoBlocks Published 09/03/2025 Severity Medium CVE-2025-47439WordPress Download Monitor plugin <= 5.0.22 - Local File Inclusion Vulnerability Exploitation status Not known exploited Fix Affected product D Download Monitor Published 05/07/2025 Severity High CVE-2025-32233WordPress Revive.so plugin <= 2.0.3 - Broken Access Control vulnerability Exploitation status Not known exploited Fix Affected product R Revive.so Published 04/04/2025 Severity Medium CVE-2025-26975WordPress Strong Testimonials plugin <= 3.2.3 - Broken Access Control vulnerability Exploitation status Not known exploited Fix Affected product S Strong Testimonials Published 02/25/2025 Severity Medium CVE-2025-24683WordPress RSVP and Event Management Plugin <= 2.7.14 - SQL Injection vulnerability Exploitation status Not known exploited Fix Affected product R RSVP and Event Management Published 01/24/2025 Severity High CVE-2025-22773WordPress Htaccess File Editor <= 1.0.19 - Broken Authentication vulnerability Exploitation status Not known exploited Fix Affected product H Htaccess File Editor Published 01/15/2025 Severity Medium CVE-2023-46083WordPress Kali Forms plugin <= 2.3.27 - Broken Access Control vulnerability Exploitation status Not known exploited Fix Affected product K Kali Forms Published 01/02/2025 Severity Medium CVE-2023-45275WordPress Contact Form builder with drag & drop plugin <= 2.3.28 - Broken Access Control vulnerability Exploitation status Not known exploited Fix Affected product K Kali Forms Published 01/02/2025 Severity Medium CVE-2024-49256WordPress Htaccess File Editor plugin <= 1.0.18 - Broken Access Control vulnerability Exploitation status Not known exploited Fix Affected product H Htaccess File Editor Published 11/01/2024 Severity Medium CVE-2024-47362WordPress Strong Testimonials plugin <= 3.1.16 - Broken Access Control vulnerability Exploitation status Not known exploited Fix Affected product S Strong Testimonials Published 11/01/2024 Severity Medium CVE-2024-43329WordPress Allegiant theme <= 1.2.7 - Cross Site Scripting (XSS) vulnerability Exploitation status Not known exploited Fix Affected product A Allegiant Published 08/18/2024 Severity Medium CVE-2024-43216WordPress Filr plugin <= 1.2.4 - Cross Site Scripting (XSS) vulnerability Exploitation status Not known exploited Fix Affected product F Filr Published 08/12/2024 Severity Medium CVE-2023-28171WordPress Brilliance Theme <= 1.3.1 is vulnerable to Cross Site Scripting (XSS) Exploitation status Not known exploited Fix Affected product B Brilliance Published 06/22/2023 Severity Medium 
