Announcements

CVE-2026-19598 (matched: wordpress)

  • 16th August 2026
A security vulnerability has been identified in the Pods plugin for WordPress, a tool used to create custom content types and fields for WordPress sites. The flaw affects all versions of the plugin up to and including version 3.3.9. The vulnerability breaks the plugin’s standard security protections, so people who do not have a login account for ...
Continue reading

CVE-2026-16142 (matched: wordpress)

  • 16th August 2026
A security flaw has been identified in the TrueBooker plugin for WordPress, impacting all versions up to and including 1.2.6. The vulnerability allows unauthenticated visitors (people who are not logged into your WordPress site) to modify the email address associated with any user account on your site, including administrator accounts, with no ...
Continue reading

CVE-2026-15826 (matched: wordpress)

  • 16th August 2026
A security vulnerability exists in the User Profile Builder plugin for WordPress, impacting all versions up to and including 3.16.4. This flaw allows people who do not have a valid account on your site to bypass normal login security measures.If attackers exploit this vulnerability, they can log in as your site's main Administrator account, giving ...
Continue reading

CVE-2026-15341 (matched: wordpress)

  • 16th August 2026
A critical security vulnerability has been identified in the User Session Synchronizer plugin for WordPress, impacting all versions up to and including 1.4.0. This flaw allows unauthenticated attackers to bypass normal login security measures to take over any user account on a WordPress site, including high-level administrator accounts.The ...
Continue reading