A security flaw tracked as CVE-2026-15826 has been identified in the User Profile Builder plugin for WordPress, impacting all versions up to and including 3.16.4. The vulnerability stems from a bug in the plugin's user login handling code that is triggered when a visitor submits a site registration attempt with a username between 61 and 70 ...
Continue reading
A security vulnerability has been identified in the User Session Synchronizer plugin for WordPress, affecting all versions up to and including 1.4.0. This flaw allows unauthenticated attackers (people without existing login access to your site) to take over any user account on your WordPress site, including administrator accounts, with no need for ...
Continue reading
A security flaw has been identified in the 6Storage Rentals plugin for WordPress, impacting all versions up to and including 2.27.0. This vulnerability allows anyone without a valid account for your WordPress site to log in as any existing user, including site administrators, by only providing that user’s email address.
The issue stems from a ...
Continue reading
A security flaw, tracked as CVE-2026-14484, has been found in the RapiSafe – Secure Multi File Upload for Contact Form 7 plugin for WordPress, which impacts all versions up to and including 1.0.4. The plugin does not properly validate file paths when handling file deletion requests, making it possible for anyone without an account on your site ...
Continue reading
