WP Vulnerability Watch — vulnerability alerts https://en.shindan.m-g-n.me/alerts/ Newly disclosed vulnerabilities in widely used WordPress plugins and themes. en Vulnerability in Pods – Custom Content Types and Fields — CVE-2026-76573 https://en.shindan.m-g-n.me/alerts/cve-2026-76573/ https://en.shindan.m-g-n.me/alerts/cve-2026-76573/ Sat, 05 Sep 2026 09:16:50 GMT Vulnerability CVE-2026-76573 has been disclosed in Pods – Custom Content Types and Fields.Version 3.3.9.2 fixes it — update now. Vulnerability in Post Grid — CVE-2024-11080 https://en.shindan.m-g-n.me/alerts/cve-2024-11080/ https://en.shindan.m-g-n.me/alerts/cve-2024-11080/ Sat, 05 Sep 2026 09:16:48 GMT Vulnerability CVE-2024-11080 has been disclosed in Post Grid.Version 2.3.33 fixes it — update now. Vulnerability in Photo Gallery by FooGallery : Responsive Image Gallery, Masonry Gallery & Carousel — CVE-2026-85414 https://en.shindan.m-g-n.me/alerts/cve-2026-85414/ https://en.shindan.m-g-n.me/alerts/cve-2026-85414/ Sat, 05 Sep 2026 08:16:40 GMT Vulnerability CVE-2026-85414 has been disclosed in Photo Gallery by FooGallery : Responsive Image Gallery, Masonry Gallery & Carousel.Version 3.3.3 fixes it — update now. Vulnerability in Unlimited Elements For Elementor — CVE-2026-75586 https://en.shindan.m-g-n.me/alerts/cve-2026-75586/ https://en.shindan.m-g-n.me/alerts/cve-2026-75586/ Sat, 05 Sep 2026 08:16:40 GMT Vulnerability CVE-2026-75586 has been disclosed in Unlimited Elements For Elementor.Version 2.0.18 fixes it — update now. Vulnerability in W3 Total Cache — CVE-2026-78438 https://en.shindan.m-g-n.me/alerts/cve-2026-78438/ https://en.shindan.m-g-n.me/alerts/cve-2026-78438/ Sat, 05 Sep 2026 07:17:12 GMT Vulnerability CVE-2026-78438 has been disclosed in W3 Total Cache.Version 2.10.6 fixes it — update now. Vulnerability in Spam protection, Honeypot, Anti-Spam by CleanTalk — CVE-2026-77830 https://en.shindan.m-g-n.me/alerts/cve-2026-77830/ https://en.shindan.m-g-n.me/alerts/cve-2026-77830/ Sat, 05 Sep 2026 07:17:12 GMT Vulnerability CVE-2026-77830 has been disclosed in Spam protection, Honeypot, Anti-Spam by CleanTalk.Version 6.87 fixes it — update now. Vulnerability in Welcart e-Commerce — CVE-2026-19887 https://en.shindan.m-g-n.me/alerts/cve-2026-19887/ https://en.shindan.m-g-n.me/alerts/cve-2026-19887/ Sat, 05 Sep 2026 07:17:11 GMT Vulnerability CVE-2026-19887 has been disclosed in Welcart e-Commerce.Version 2.12.2 fixes it — update now. Vulnerability in Ninja Forms – The Contact Form Builder That Grows With You — CVE-2026-19769 https://en.shindan.m-g-n.me/alerts/cve-2026-19769/ https://en.shindan.m-g-n.me/alerts/cve-2026-19769/ Sat, 05 Sep 2026 07:17:11 GMT Vulnerability CVE-2026-19769 has been disclosed in Ninja Forms – The Contact Form Builder That Grows With You.Version 3.15.2 fixes it — update now. Vulnerability in SureForms – Contact Form Builder, AI Forms, Payment Form, Survey & Quiz — CVE-2026-18406 https://en.shindan.m-g-n.me/alerts/cve-2026-18406/ https://en.shindan.m-g-n.me/alerts/cve-2026-18406/ Sat, 05 Sep 2026 07:17:11 GMT Vulnerability CVE-2026-18406 has been disclosed in SureForms – Contact Form Builder, AI Forms, Payment Form, Survey & Quiz.Version 2.12.3 fixes it — update now. Vulnerability in DearFlip – PDF Flipbook, 3D Flipbook, PDF embed, PDF viewer — CVE-2026-8625 https://en.shindan.m-g-n.me/alerts/cve-2026-8625/ https://en.shindan.m-g-n.me/alerts/cve-2026-8625/ Sat, 05 Sep 2026 06:17:10 GMT Vulnerability CVE-2026-8625 has been disclosed in DearFlip – PDF Flipbook, 3D Flipbook, PDF embed, PDF viewer.Version 2.4.37 fixes it — update now. Vulnerability in DearFlip – PDF Flipbook, 3D Flipbook, PDF embed, PDF viewer — CVE-2026-8623 https://en.shindan.m-g-n.me/alerts/cve-2026-8623/ https://en.shindan.m-g-n.me/alerts/cve-2026-8623/ Sat, 05 Sep 2026 06:17:10 GMT Vulnerability CVE-2026-8623 has been disclosed in DearFlip – PDF Flipbook, 3D Flipbook, PDF embed, PDF viewer.Version 2.4.37 fixes it — update now. Vulnerability in Theme My Login — CVE-2026-83628 https://en.shindan.m-g-n.me/alerts/cve-2026-83628/ https://en.shindan.m-g-n.me/alerts/cve-2026-83628/ Sat, 05 Sep 2026 06:17:10 GMT Vulnerability CVE-2026-83628 has been disclosed in Theme My Login.Version 7.2.0 fixes it — update now. Vulnerability in Hummingbird Performance – Cache & Page Speed Optimization for Core Web Vitals | Critical CSS | Minify CSS | Defer CSS Javascript | CDN — CVE-2026-83627 https://en.shindan.m-g-n.me/alerts/cve-2026-83627/ https://en.shindan.m-g-n.me/alerts/cve-2026-83627/ Sat, 05 Sep 2026 06:17:10 GMT Vulnerability CVE-2026-83627 has been disclosed in Hummingbird Performance – Cache & Page Speed Optimization for Core Web Vitals | Critical CSS | Minify CSS | Defer CSS Javascript | CDN.Version 3.21.1 fixes it — update now. Vulnerability in iubenda | All-in-one Compliance for GDPR / CCPA Cookie Consent + more — CVE-2026-77263 https://en.shindan.m-g-n.me/alerts/cve-2026-77263/ https://en.shindan.m-g-n.me/alerts/cve-2026-77263/ Sat, 05 Sep 2026 06:17:09 GMT Vulnerability CVE-2026-77263 has been disclosed in iubenda | All-in-one Compliance for GDPR / CCPA Cookie Consent + more.Version 3.13.5 fixes it — update now. Vulnerability in iubenda | All-in-one Compliance for GDPR / CCPA Cookie Consent + more — CVE-2026-77233 https://en.shindan.m-g-n.me/alerts/cve-2026-77233/ https://en.shindan.m-g-n.me/alerts/cve-2026-77233/ Sat, 05 Sep 2026 06:17:09 GMT Vulnerability CVE-2026-77233 has been disclosed in iubenda | All-in-one Compliance for GDPR / CCPA Cookie Consent + more.Version 3.13.5 fixes it — update now. Vulnerability in Social Chat – Click To Chat App Button — CVE-2026-18404 https://en.shindan.m-g-n.me/alerts/cve-2026-18404/ https://en.shindan.m-g-n.me/alerts/cve-2026-18404/ Sat, 05 Sep 2026 06:17:09 GMT Vulnerability CVE-2026-18404 has been disclosed in Social Chat – Click To Chat App Button.Version 8.6.3 fixes it — update now. Vulnerability in Events Manager – Calendar, Bookings, Tickets, and more! — CVE-2025-14945 https://en.shindan.m-g-n.me/alerts/cve-2025-14945/ https://en.shindan.m-g-n.me/alerts/cve-2025-14945/ Sat, 05 Sep 2026 06:17:09 GMT Vulnerability CVE-2025-14945 has been disclosed in Events Manager – Calendar, Bookings, Tickets, and more!.Version 7.3.4 fixes it — update now. Vulnerability in LearnPress – WordPress LMS Plugin for Create and Sell Online Courses — CVE-2026-82024 https://en.shindan.m-g-n.me/alerts/cve-2026-82024/ https://en.shindan.m-g-n.me/alerts/cve-2026-82024/ Thu, 03 Sep 2026 18:17:24 GMT Vulnerability CVE-2026-82024 has been disclosed in LearnPress – WordPress LMS Plugin for Create and Sell Online Courses.Version 4.4.6 fixes it — update now. Vulnerability in LearnPress – WordPress LMS Plugin for Create and Sell Online Courses — CVE-2026-82023 https://en.shindan.m-g-n.me/alerts/cve-2026-82023/ https://en.shindan.m-g-n.me/alerts/cve-2026-82023/ Thu, 03 Sep 2026 18:17:24 GMT Vulnerability CVE-2026-82023 has been disclosed in LearnPress – WordPress LMS Plugin for Create and Sell Online Courses.Version 4.4.6 fixes it — update now. Vulnerability in GutenKit – Page Builder Blocks, Patterns, and Templates for Gutenberg Block Editor — CVE-2026-2573 https://en.shindan.m-g-n.me/alerts/cve-2026-2573/ https://en.shindan.m-g-n.me/alerts/cve-2026-2573/ Thu, 03 Sep 2026 13:05:06 GMT Vulnerability CVE-2026-2573 has been disclosed in GutenKit – Page Builder Blocks, Patterns, and Templates for Gutenberg Block Editor.Version 2.4.5 fixes it — update now. Vulnerability in Jetpack – WP Security, Backup, Speed, & Growth — WF-72f4776f-5450-4022-92dd-47ddaa91a5cd https://en.shindan.m-g-n.me/alerts/wf-72f4776f-5450-4022-92dd-47ddaa91a5cd/ https://en.shindan.m-g-n.me/alerts/wf-72f4776f-5450-4022-92dd-47ddaa91a5cd/ Thu, 03 Sep 2026 00:00:00 GMT Vulnerability WF-72f4776f-5450-4022-92dd-47ddaa91a5cd has been disclosed in Jetpack – WP Security, Backup, Speed, & Growth.Version 12.0.3 fixes it — update now. Vulnerability in Jetpack – WP Security, Backup, Speed, & Growth — WF-eda9ae01-cdc4-43e0-8a4c-1ec365939fa8 https://en.shindan.m-g-n.me/alerts/wf-eda9ae01-cdc4-43e0-8a4c-1ec365939fa8/ https://en.shindan.m-g-n.me/alerts/wf-eda9ae01-cdc4-43e0-8a4c-1ec365939fa8/ Thu, 03 Sep 2026 00:00:00 GMT Vulnerability WF-eda9ae01-cdc4-43e0-8a4c-1ec365939fa8 has been disclosed in Jetpack – WP Security, Backup, Speed, & Growth.Version 14.5.1 fixes it — update now. Vulnerability in Jetpack – WP Security, Backup, Speed, & Growth — WF-f72c0a27-9602-4465-a14a-15c2a34e578b https://en.shindan.m-g-n.me/alerts/wf-f72c0a27-9602-4465-a14a-15c2a34e578b/ https://en.shindan.m-g-n.me/alerts/wf-f72c0a27-9602-4465-a14a-15c2a34e578b/ Thu, 03 Sep 2026 00:00:00 GMT Vulnerability WF-f72c0a27-9602-4465-a14a-15c2a34e578b has been disclosed in Jetpack – WP Security, Backup, Speed, & Growth.Version 16.1.3 fixes it — update now. Vulnerability in JetFormBuilder — Dynamic Blocks Form Builder — WF-b0fe7d29-118f-42fb-9e48-6217faaa689b https://en.shindan.m-g-n.me/alerts/wf-b0fe7d29-118f-42fb-9e48-6217faaa689b/ https://en.shindan.m-g-n.me/alerts/wf-b0fe7d29-118f-42fb-9e48-6217faaa689b/ Thu, 03 Sep 2026 00:00:00 GMT Vulnerability WF-b0fe7d29-118f-42fb-9e48-6217faaa689b has been disclosed in JetFormBuilder — Dynamic Blocks Form Builder.Version 3.6.2.1 fixes it — update now. Vulnerability in SEOWriting — CVE-2026-75134 https://en.shindan.m-g-n.me/alerts/cve-2026-75134/ https://en.shindan.m-g-n.me/alerts/cve-2026-75134/ Wed, 02 Sep 2026 20:17:36 GMT Vulnerability CVE-2026-75134 has been disclosed in SEOWriting.No fix has been published yet. Consider disabling it or moving to an alternative. Vulnerability in Broken Link Checker — CVE-2026-75528 https://en.shindan.m-g-n.me/alerts/cve-2026-75528/ https://en.shindan.m-g-n.me/alerts/cve-2026-75528/ Wed, 02 Sep 2026 08:16:45 GMT Vulnerability CVE-2026-75528 has been disclosed in Broken Link Checker.Version 2.4.13.1 fixes it — update now. Vulnerability in Simple Membership — CVE-2026-77194 https://en.shindan.m-g-n.me/alerts/cve-2026-77194/ https://en.shindan.m-g-n.me/alerts/cve-2026-77194/ Tue, 01 Sep 2026 12:17:47 GMT Vulnerability CVE-2026-77194 has been disclosed in Simple Membership.Version 4.8.2 fixes it — update now. Vulnerability in Welcart e-Commerce — CVE-2026-19914 https://en.shindan.m-g-n.me/alerts/cve-2026-19914/ https://en.shindan.m-g-n.me/alerts/cve-2026-19914/ Tue, 01 Sep 2026 10:17:12 GMT Vulnerability CVE-2026-19914 has been disclosed in Welcart e-Commerce.Version 2.12.2 fixes it — update now. Vulnerability in Live Composer – Free WordPress Website Builder — CVE-2026-16788 https://en.shindan.m-g-n.me/alerts/cve-2026-16788/ https://en.shindan.m-g-n.me/alerts/cve-2026-16788/ Tue, 01 Sep 2026 10:17:11 GMT Vulnerability CVE-2026-16788 has been disclosed in Live Composer – Free WordPress Website Builder.Version 2.1.20 fixes it — update now. Vulnerability in Live Composer – Free WordPress Website Builder — CVE-2026-16786 https://en.shindan.m-g-n.me/alerts/cve-2026-16786/ https://en.shindan.m-g-n.me/alerts/cve-2026-16786/ Tue, 01 Sep 2026 10:17:11 GMT Vulnerability CVE-2026-16786 has been disclosed in Live Composer – Free WordPress Website Builder.Version 2.1.20 fixes it — update now. Vulnerability in Charitable – Donation & Fundraising Platform (Donation Forms, Recurring Donations & Fundraising Campaigns) — CVE-2026-77189 https://en.shindan.m-g-n.me/alerts/cve-2026-77189/ https://en.shindan.m-g-n.me/alerts/cve-2026-77189/ Tue, 01 Sep 2026 06:16:37 GMT Vulnerability CVE-2026-77189 has been disclosed in Charitable – Donation & Fundraising Platform (Donation Forms, Recurring Donations & Fundraising Campaigns).Version 1.8.12.2 fixes it — update now. Vulnerability in BetterDocs – AI Documentation, Knowledge Base, Docs, Wikis, FAQ with Chatbot — CVE-2026-75980 https://en.shindan.m-g-n.me/alerts/cve-2026-75980/ https://en.shindan.m-g-n.me/alerts/cve-2026-75980/ Tue, 01 Sep 2026 06:16:37 GMT Vulnerability CVE-2026-75980 has been disclosed in BetterDocs – AI Documentation, Knowledge Base, Docs, Wikis, FAQ with Chatbot.Version 4.8.2 fixes it — update now. Vulnerability in User Profile Builder – Beautiful User Registration Forms, User Profiles & User Role Editor — CVE-2026-75964 https://en.shindan.m-g-n.me/alerts/cve-2026-75964/ https://en.shindan.m-g-n.me/alerts/cve-2026-75964/ Tue, 01 Sep 2026 06:16:37 GMT Vulnerability CVE-2026-75964 has been disclosed in User Profile Builder – Beautiful User Registration Forms, User Profiles & User Role Editor.Version 4.0.1 fixes it — update now. Vulnerability in Blocksy Companion — CVE-2026-18488 https://en.shindan.m-g-n.me/alerts/cve-2026-18488/ https://en.shindan.m-g-n.me/alerts/cve-2026-18488/ Tue, 01 Sep 2026 06:16:36 GMT Vulnerability CVE-2026-18488 has been disclosed in Blocksy Companion.Version 2.1.52 fixes it — update now. Vulnerability in LearnPress – WordPress LMS Plugin for Create and Sell Online Courses — CVE-2026-77823 https://en.shindan.m-g-n.me/alerts/cve-2026-77823/ https://en.shindan.m-g-n.me/alerts/cve-2026-77823/ Tue, 01 Sep 2026 05:17:10 GMT Vulnerability CVE-2026-77823 has been disclosed in LearnPress – WordPress LMS Plugin for Create and Sell Online Courses.Version 4.4.5 fixes it — update now. Vulnerability in User Profile Builder – Beautiful User Registration Forms, User Profiles & User Role Editor — CVE-2026-75965 https://en.shindan.m-g-n.me/alerts/cve-2026-75965/ https://en.shindan.m-g-n.me/alerts/cve-2026-75965/ Tue, 01 Sep 2026 05:17:10 GMT Vulnerability CVE-2026-75965 has been disclosed in User Profile Builder – Beautiful User Registration Forms, User Profiles & User Role Editor.Version 4.0.1 fixes it — update now. Vulnerability in Master Addons for Elementor – Elementor Addons, Widgets, Mega Menu Builder, Popup Builder, Widget Builder & Template Kits — CVE-2026-75921 https://en.shindan.m-g-n.me/alerts/cve-2026-75921/ https://en.shindan.m-g-n.me/alerts/cve-2026-75921/ Tue, 01 Sep 2026 05:17:09 GMT Vulnerability CVE-2026-75921 has been disclosed in Master Addons for Elementor – Elementor Addons, Widgets, Mega Menu Builder, Popup Builder, Widget Builder & Template Kits.Version 3.2.0 fixes it — update now. Vulnerability in Live Composer – Free WordPress Website Builder — CVE-2026-16787 https://en.shindan.m-g-n.me/alerts/cve-2026-16787/ https://en.shindan.m-g-n.me/alerts/cve-2026-16787/ Tue, 01 Sep 2026 05:17:08 GMT Vulnerability CVE-2026-16787 has been disclosed in Live Composer – Free WordPress Website Builder.Version 2.1.20 fixes it — update now. Vulnerability in Live Composer – Free WordPress Website Builder — CVE-2026-13203 https://en.shindan.m-g-n.me/alerts/cve-2026-13203/ https://en.shindan.m-g-n.me/alerts/cve-2026-13203/ Tue, 01 Sep 2026 05:17:08 GMT Vulnerability CVE-2026-13203 has been disclosed in Live Composer – Free WordPress Website Builder.Version 2.1.20 fixes it — update now. Vulnerability in WPLP Cookie Consent – Cookie Banner & Consent Management for GDPR, CCPA & Google Consent Mode — CVE-2026-75865 https://en.shindan.m-g-n.me/alerts/cve-2026-75865/ https://en.shindan.m-g-n.me/alerts/cve-2026-75865/ Tue, 01 Sep 2026 03:16:51 GMT Vulnerability CVE-2026-75865 has been disclosed in WPLP Cookie Consent – Cookie Banner & Consent Management for GDPR, CCPA & Google Consent Mode.Version 4.4.2 fixes it — update now. Vulnerability in Booking for Appointments and Events Calendar – Amelia — CVE-2026-9055 https://en.shindan.m-g-n.me/alerts/cve-2026-9055/ https://en.shindan.m-g-n.me/alerts/cve-2026-9055/ Tue, 01 Sep 2026 00:00:00 GMT Vulnerability CVE-2026-9055 has been disclosed in Booking for Appointments and Events Calendar – Amelia.Version 9.6.3 fixes it — update now. Vulnerability in miniOrange Social Login and Register (Discord, Google, Twitter, LinkedIn) — CVE-2026-82229 https://en.shindan.m-g-n.me/alerts/cve-2026-82229/ https://en.shindan.m-g-n.me/alerts/cve-2026-82229/ Mon, 31 Aug 2026 21:17:53 GMT Vulnerability CVE-2026-82229 has been disclosed in miniOrange Social Login and Register (Discord, Google, Twitter, LinkedIn).Version 7.9.0 fixes it — update now. Vulnerability in Paid Membership Plugin, Ecommerce, User Registration Form, Login Form, User Profile & Restrict Content – ProfilePress — CVE-2026-66047 https://en.shindan.m-g-n.me/alerts/cve-2026-66047/ https://en.shindan.m-g-n.me/alerts/cve-2026-66047/ Mon, 31 Aug 2026 15:17:37 GMT Vulnerability CVE-2026-66047 has been disclosed in Paid Membership Plugin, Ecommerce, User Registration Form, Login Form, User Profile & Restrict Content – ProfilePress.Version 4.17.2 fixes it — update now. Vulnerability in WPLP Cookie Consent – Cookie Banner & Consent Management for GDPR, CCPA & Google Consent Mode — CVE-2026-82970 https://en.shindan.m-g-n.me/alerts/cve-2026-82970/ https://en.shindan.m-g-n.me/alerts/cve-2026-82970/ Mon, 31 Aug 2026 00:00:00 GMT Vulnerability CVE-2026-82970 has been disclosed in WPLP Cookie Consent – Cookie Banner & Consent Management for GDPR, CCPA & Google Consent Mode.Version 4.4.2 fixes it — update now. Vulnerability in Customer Reviews for WooCommerce — CVE-2026-76585 https://en.shindan.m-g-n.me/alerts/cve-2026-76585/ https://en.shindan.m-g-n.me/alerts/cve-2026-76585/ Mon, 31 Aug 2026 00:00:00 GMT Vulnerability CVE-2026-76585 has been disclosed in Customer Reviews for WooCommerce.Version 5.118.0 fixes it — update now. Vulnerability in Really Simple Security – Simple and Performant Security (formerly Really Simple SSL) — CVE-2026-81766 https://en.shindan.m-g-n.me/alerts/cve-2026-81766/ https://en.shindan.m-g-n.me/alerts/cve-2026-81766/ Mon, 31 Aug 2026 00:00:00 GMT Vulnerability CVE-2026-81766 has been disclosed in Really Simple Security – Simple and Performant Security (formerly Really Simple SSL).Version 9.8.0 fixes it — update now. Vulnerability in User Profile Builder – Beautiful User Registration Forms, User Profiles & User Role Editor — CVE-2026-76548 https://en.shindan.m-g-n.me/alerts/cve-2026-76548/ https://en.shindan.m-g-n.me/alerts/cve-2026-76548/ Mon, 31 Aug 2026 00:00:00 GMT Vulnerability CVE-2026-76548 has been disclosed in User Profile Builder – Beautiful User Registration Forms, User Profiles & User Role Editor.Version 4.0.1 fixes it — update now. Vulnerability in bbPress — CVE-2026-74010 https://en.shindan.m-g-n.me/alerts/cve-2026-74010/ https://en.shindan.m-g-n.me/alerts/cve-2026-74010/ Mon, 31 Aug 2026 00:00:00 GMT Vulnerability CVE-2026-74010 has been disclosed in bbPress.No fix has been published yet. Consider disabling it or moving to an alternative. Vulnerability in WCFM Marketplace – Multivendor Marketplace for WooCommerce — CVE-2026-83562 https://en.shindan.m-g-n.me/alerts/cve-2026-83562/ https://en.shindan.m-g-n.me/alerts/cve-2026-83562/ Mon, 31 Aug 2026 00:00:00 GMT Vulnerability CVE-2026-83562 has been disclosed in WCFM Marketplace – Multivendor Marketplace for WooCommerce.Version 3.8.3 fixes it — update now. Vulnerability in SAML Single Sign On – SSO Login — CVE-2026-75807 https://en.shindan.m-g-n.me/alerts/cve-2026-75807/ https://en.shindan.m-g-n.me/alerts/cve-2026-75807/ Sat, 29 Aug 2026 18:16:36 GMT Vulnerability CVE-2026-75807 has been disclosed in SAML Single Sign On – SSO Login.Version 5.4.7 fixes it — update now.