https://en.shindan.m-g-n.me/alerts/ Newly disclosed vulnerabilities in widely used WordPress plugins and themes. en https://en.shindan.m-g-n.me/alerts/cve-2026-120574/ https://en.shindan.m-g-n.me/alerts/cve-2026-120574/ Tue, 03 Nov 2026 05:18:33 GMT Vulnerability CVE-2026-120574 has been disclosed in SureCart – Ecommerce Made Easy For Selling Physical Products, Digital Downloads, Subscriptions, Donations, & Payments.Version 4.9.6 fixes it — update now. https://en.shindan.m-g-n.me/alerts/cve-2026-120563/ https://en.shindan.m-g-n.me/alerts/cve-2026-120563/ Tue, 03 Nov 2026 05:18:33 GMT Vulnerability CVE-2026-120563 has been disclosed in WPML Multilingual & Multicurrency for WooCommerce.Version 5.5.8 fixes it — update now. https://en.shindan.m-g-n.me/alerts/cve-2026-120561/ https://en.shindan.m-g-n.me/alerts/cve-2026-120561/ Tue, 03 Nov 2026 05:18:33 GMT Vulnerability CVE-2026-120561 has been disclosed in JetFormBuilder — Dynamic Blocks Form Builder.Version 3.6.2.1 fixes it — update now. https://en.shindan.m-g-n.me/alerts/cve-2026-120558/ https://en.shindan.m-g-n.me/alerts/cve-2026-120558/ Tue, 03 Nov 2026 05:18:33 GMT Vulnerability CVE-2026-120558 has been disclosed in Advanced Shipment Tracking for WooCommerce.Version 3.9.1 fixes it — update now. https://en.shindan.m-g-n.me/alerts/cve-2026-120551/ https://en.shindan.m-g-n.me/alerts/cve-2026-120551/ Tue, 03 Nov 2026 05:18:32 GMT Vulnerability CVE-2026-120551 has been disclosed in WP Compress – Instant Performance & Speed Optimization.Version 7.22.38 fixes it — update now. https://en.shindan.m-g-n.me/alerts/cve-2026-120538/ https://en.shindan.m-g-n.me/alerts/cve-2026-120538/ Tue, 03 Nov 2026 05:18:32 GMT Vulnerability CVE-2026-120538 has been disclosed in Easy Digital Downloads – eCommerce Payments and Subscriptions made easy.Version 3.7.3 fixes it — update now. https://en.shindan.m-g-n.me/alerts/cve-2026-111464/ https://en.shindan.m-g-n.me/alerts/cve-2026-111464/ Tue, 03 Nov 2026 03:16:42 GMT Vulnerability CVE-2026-111464 has been disclosed in WP Fastest Cache – WordPress Cache Plugin.Version 1.5.4 fixes it — update now. https://en.shindan.m-g-n.me/alerts/cve-2026-120597/ https://en.shindan.m-g-n.me/alerts/cve-2026-120597/ Mon, 02 Nov 2026 23:17:19 GMT Vulnerability CVE-2026-120597 has been disclosed in Welcart e-Commerce.No fix has been published yet. Consider disabling it or moving to an alternative. https://en.shindan.m-g-n.me/alerts/cve-2026-86596/ https://en.shindan.m-g-n.me/alerts/cve-2026-86596/ Mon, 02 Nov 2026 22:17:23 GMT Vulnerability CVE-2026-86596 has been disclosed in s2Member – Excellent for All Kinds of Memberships, Content Restriction Paywalls & Member Access Subscriptions.Version 261001 fixes it — update now. https://en.shindan.m-g-n.me/alerts/cve-2026-102435/ https://en.shindan.m-g-n.me/alerts/cve-2026-102435/ Mon, 02 Nov 2026 20:17:26 GMT Vulnerability CVE-2026-102435 has been disclosed in Ultra Addons for Contact Form 7.Version 3.5.55 fixes it — update now. https://en.shindan.m-g-n.me/alerts/cve-2026-120318/ https://en.shindan.m-g-n.me/alerts/cve-2026-120318/ Mon, 02 Nov 2026 15:17:22 GMT Vulnerability CVE-2026-120318 has been disclosed in Product Gallery Slider, Additional Variation Images for WooCommerce.Version 2.3.26 fixes it — update now. https://en.shindan.m-g-n.me/alerts/cve-2026-66570/ https://en.shindan.m-g-n.me/alerts/cve-2026-66570/ Sun, 01 Nov 2026 16:18:15 GMT Vulnerability CVE-2026-66570 has been disclosed in Iptanus File Upload.Version 5.2.2 fixes it — update now. https://en.shindan.m-g-n.me/alerts/cve-2026-76010/ https://en.shindan.m-g-n.me/alerts/cve-2026-76010/ Sat, 31 Oct 2026 10:16:38 GMT Vulnerability CVE-2026-76010 has been disclosed in Photo Gallery, Sliders, Proofing and Themes – NextGEN Gallery.Version 4.5.0 fixes it — update now. https://en.shindan.m-g-n.me/alerts/cve-2026-120114/ https://en.shindan.m-g-n.me/alerts/cve-2026-120114/ Sat, 31 Oct 2026 10:16:38 GMT Vulnerability CVE-2026-120114 has been disclosed in Debug Log Manager – Conveniently Monitor and Inspect Errors.Version 2.5.3 fixes it — update now. https://en.shindan.m-g-n.me/alerts/cve-2026-116752/ https://en.shindan.m-g-n.me/alerts/cve-2026-116752/ Sat, 31 Oct 2026 10:16:37 GMT Vulnerability CVE-2026-116752 has been disclosed in GeoDirectory – WP Business Directory Plugin and Classified Listings Directory.Version 2.8.198 fixes it — update now. https://en.shindan.m-g-n.me/alerts/cve-2026-109231/ https://en.shindan.m-g-n.me/alerts/cve-2026-109231/ Sat, 31 Oct 2026 10:16:37 GMT Vulnerability CVE-2026-109231 has been disclosed in Germanized for WooCommerce.Version 4.1.5 fixes it — update now. https://en.shindan.m-g-n.me/alerts/cve-2026-100151/ https://en.shindan.m-g-n.me/alerts/cve-2026-100151/ Sat, 31 Oct 2026 10:16:29 GMT Vulnerability CVE-2026-100151 has been disclosed in Ninja Forms – The Contact Form Builder That Grows With You.Version 3.15.6 fixes it — update now. https://en.shindan.m-g-n.me/alerts/cve-2026-119160/ https://en.shindan.m-g-n.me/alerts/cve-2026-119160/ Sat, 31 Oct 2026 09:16:33 GMT Vulnerability CVE-2026-119160 has been disclosed in Smart Post – Post Grid, Post Carousel, Post Slider Gutenberg Blocks for Blog & News.Version 4.0.10 fixes it — update now. https://en.shindan.m-g-n.me/alerts/cve-2026-109367/ https://en.shindan.m-g-n.me/alerts/cve-2026-109367/ Sat, 31 Oct 2026 09:16:32 GMT Vulnerability CVE-2026-109367 has been disclosed in All in One SEO – AI SEO Plugin to Boost SEO Rankings & Traffic (Schema, Local SEO, Sitemap & SEO Insights).Version 5.0.4 fixes it — update now. https://en.shindan.m-g-n.me/alerts/cve-2026-103915/ https://en.shindan.m-g-n.me/alerts/cve-2026-103915/ Sat, 31 Oct 2026 09:16:32 GMT Vulnerability CVE-2026-103915 has been disclosed in Booking for Appointments and Events Calendar – Amelia.Version 2.4.13 fixes it — update now. https://en.shindan.m-g-n.me/alerts/cve-2026-120070/ https://en.shindan.m-g-n.me/alerts/cve-2026-120070/ Sat, 31 Oct 2026 08:16:49 GMT Vulnerability CVE-2026-120070 has been disclosed in User Frontend – Membership, User Registration, User Profile, User Directory & Content Restriction with Frontend Post Submission.Version 4.3.14 fixes it — update now. https://en.shindan.m-g-n.me/alerts/cve-2026-119096/ https://en.shindan.m-g-n.me/alerts/cve-2026-119096/ Sat, 31 Oct 2026 08:16:49 GMT Vulnerability CVE-2026-119096 has been disclosed in Uncanny Toolkit for LearnDash.Version 3.8.3 fixes it — update now. https://en.shindan.m-g-n.me/alerts/cve-2026-118057/ https://en.shindan.m-g-n.me/alerts/cve-2026-118057/ Sat, 31 Oct 2026 08:16:48 GMT Vulnerability CVE-2026-118057 has been disclosed in Shield Security – Smart Bot Blocking, Brute-Force Login Protection & File Scanning.Version 22.3.4 fixes it — update now. https://en.shindan.m-g-n.me/alerts/cve-2026-116535/ https://en.shindan.m-g-n.me/alerts/cve-2026-116535/ Sat, 31 Oct 2026 08:16:48 GMT Vulnerability CVE-2026-116535 has been disclosed in SEOPress – AI SEO Plugin & On-site SEO.Version 10.4 fixes it — update now. https://en.shindan.m-g-n.me/alerts/cve-2026-111592/ https://en.shindan.m-g-n.me/alerts/cve-2026-111592/ Sat, 31 Oct 2026 08:16:48 GMT Vulnerability CVE-2026-111592 has been disclosed in Co-Authors, Multiple Authors and Guest Authors in an Author Box with PublishPress Authors.Version 4.18.0 fixes it — update now. https://en.shindan.m-g-n.me/alerts/cve-2026-110023/ https://en.shindan.m-g-n.me/alerts/cve-2026-110023/ Sat, 31 Oct 2026 08:16:48 GMT Vulnerability CVE-2026-110023 has been disclosed in WP Data Access – App Builder for Tables, Forms, Charts, Maps & Dashboards.Version 5.5.89 fixes it — update now. https://en.shindan.m-g-n.me/alerts/cve-2026-107759/ https://en.shindan.m-g-n.me/alerts/cve-2026-107759/ Sat, 31 Oct 2026 08:16:48 GMT Vulnerability CVE-2026-107759 has been disclosed in WPO365 | MICROSOFT 365 GRAPH MAILER.Version 6.3 fixes it — update now. https://en.shindan.m-g-n.me/alerts/cve-2026-103997/ https://en.shindan.m-g-n.me/alerts/cve-2026-103997/ Sat, 31 Oct 2026 08:16:47 GMT Vulnerability CVE-2026-103997 has been disclosed in Redux Framework.Version 4.5.16 fixes it — update now. https://en.shindan.m-g-n.me/alerts/cve-2026-103962/ https://en.shindan.m-g-n.me/alerts/cve-2026-103962/ Sat, 31 Oct 2026 08:16:47 GMT Vulnerability CVE-2026-103962 has been disclosed in User Frontend – Membership, User Registration, User Profile, User Directory & Content Restriction with Frontend Post Submission.Version 4.3.14 fixes it — update now. https://en.shindan.m-g-n.me/alerts/cve-2026-103898/ https://en.shindan.m-g-n.me/alerts/cve-2026-103898/ Sat, 31 Oct 2026 08:16:47 GMT Vulnerability CVE-2026-103898 has been disclosed in Wp Social Login and Register Social Counter.Version 3.2.3 fixes it — update now. https://en.shindan.m-g-n.me/alerts/cve-2026-90960/ https://en.shindan.m-g-n.me/alerts/cve-2026-90960/ Sat, 31 Oct 2026 07:16:37 GMT Vulnerability CVE-2026-90960 has been disclosed in Seraphinite Accelerator.Version 2.29.25 fixes it — update now. https://en.shindan.m-g-n.me/alerts/cve-2026-89270/ https://en.shindan.m-g-n.me/alerts/cve-2026-89270/ Sat, 31 Oct 2026 07:16:37 GMT Vulnerability CVE-2026-89270 has been disclosed in Popup Builder – Create highly converting, mobile friendly marketing popups..Version 4.4.6 fixes it — update now. https://en.shindan.m-g-n.me/alerts/cve-2026-120040/ https://en.shindan.m-g-n.me/alerts/cve-2026-120040/ Sat, 31 Oct 2026 07:16:37 GMT Vulnerability CVE-2026-120040 has been disclosed in Mail logging – WP Mail Catcher.Version 2.3.0 fixes it — update now. https://en.shindan.m-g-n.me/alerts/cve-2026-120019/ https://en.shindan.m-g-n.me/alerts/cve-2026-120019/ Sat, 31 Oct 2026 07:16:37 GMT Vulnerability CVE-2026-120019 has been disclosed in W3 Total Cache.Version 2.11.0 fixes it — update now. https://en.shindan.m-g-n.me/alerts/cve-2026-119980/ https://en.shindan.m-g-n.me/alerts/cve-2026-119980/ Sat, 31 Oct 2026 07:16:36 GMT Vulnerability CVE-2026-119980 has been disclosed in UsersWP – Front-end login form, User Registration, User Profile & Members Directory plugin for WP.Version 1.2.79 fixes it — update now. https://en.shindan.m-g-n.me/alerts/cve-2026-119166/ https://en.shindan.m-g-n.me/alerts/cve-2026-119166/ Sat, 31 Oct 2026 07:16:36 GMT Vulnerability CVE-2026-119166 has been disclosed in Welcart e-Commerce.Version 2.12.6 fixes it — update now. https://en.shindan.m-g-n.me/alerts/cve-2026-119163/ https://en.shindan.m-g-n.me/alerts/cve-2026-119163/ Sat, 31 Oct 2026 07:16:36 GMT Vulnerability CVE-2026-119163 has been disclosed in FunnelKit Automations – Email Marketing Automation and CRM for WordPress & WooCommerce.Version 3.8.6 fixes it — update now. https://en.shindan.m-g-n.me/alerts/cve-2026-119162/ https://en.shindan.m-g-n.me/alerts/cve-2026-119162/ Sat, 31 Oct 2026 07:16:36 GMT Vulnerability CVE-2026-119162 has been disclosed in User Submitted Posts – Enable Users to Submit Posts from the Front End.Version 20261029 fixes it — update now. https://en.shindan.m-g-n.me/alerts/cve-2026-119089/ https://en.shindan.m-g-n.me/alerts/cve-2026-119089/ Sat, 31 Oct 2026 07:16:36 GMT Vulnerability CVE-2026-119089 has been disclosed in ThirstyAffiliates – Affiliate Links, Link Branding, Link Tracking & Marketing Plugin.Version 3.12.2 fixes it — update now. https://en.shindan.m-g-n.me/alerts/cve-2026-118070/ https://en.shindan.m-g-n.me/alerts/cve-2026-118070/ Sat, 31 Oct 2026 07:16:36 GMT Vulnerability CVE-2026-118070 has been disclosed in Welcart e-Commerce.Version 2.12.6 fixes it — update now. https://en.shindan.m-g-n.me/alerts/cve-2026-116557/ https://en.shindan.m-g-n.me/alerts/cve-2026-116557/ Sat, 31 Oct 2026 07:16:35 GMT Vulnerability CVE-2026-116557 has been disclosed in WP Booking System – Booking Calendar.Version 2.1.0.6 fixes it — update now. https://en.shindan.m-g-n.me/alerts/cve-2026-116522/ https://en.shindan.m-g-n.me/alerts/cve-2026-116522/ Sat, 31 Oct 2026 07:16:35 GMT Vulnerability CVE-2026-116522 has been disclosed in Relevanssi – A Better Search.Version 4.28.6 fixes it — update now. https://en.shindan.m-g-n.me/alerts/cve-2026-111254/ https://en.shindan.m-g-n.me/alerts/cve-2026-111254/ Sat, 31 Oct 2026 07:16:34 GMT Vulnerability CVE-2026-111254 has been disclosed in W3 Total Cache.Version 2.11.0 fixes it — update now. https://en.shindan.m-g-n.me/alerts/cve-2026-110251/ https://en.shindan.m-g-n.me/alerts/cve-2026-110251/ Sat, 31 Oct 2026 07:16:34 GMT Vulnerability CVE-2026-110251 has been disclosed in Photo Reviews for WooCommerce.Version 1.2.32 fixes it — update now. https://en.shindan.m-g-n.me/alerts/cve-2026-109386/ https://en.shindan.m-g-n.me/alerts/cve-2026-109386/ Sat, 31 Oct 2026 07:16:34 GMT Vulnerability CVE-2026-109386 has been disclosed in Hustle – Email Marketing, Lead Generation, Optins, Popups.Version 7.8.14.4 fixes it — update now. https://en.shindan.m-g-n.me/alerts/cve-2026-109217/ https://en.shindan.m-g-n.me/alerts/cve-2026-109217/ Sat, 31 Oct 2026 07:16:34 GMT Vulnerability CVE-2026-109217 has been disclosed in PDF Invoices & Packing Slips for WooCommerce.Version 5.16.6 fixes it — update now. https://en.shindan.m-g-n.me/alerts/cve-2026-107750/ https://en.shindan.m-g-n.me/alerts/cve-2026-107750/ Sat, 31 Oct 2026 07:16:33 GMT Vulnerability CVE-2026-107750 has been disclosed in PDF Invoices & Packing Slips for WooCommerce.Version 5.16.5 fixes it — update now. https://en.shindan.m-g-n.me/alerts/cve-2026-107653/ https://en.shindan.m-g-n.me/alerts/cve-2026-107653/ Sat, 31 Oct 2026 07:16:32 GMT Vulnerability CVE-2026-107653 has been disclosed in SureCart – Ecommerce Made Easy For Selling Physical Products, Digital Downloads, Subscriptions, Donations, & Payments.Version 4.9.5 fixes it — update now. https://en.shindan.m-g-n.me/alerts/cve-2026-92294/ https://en.shindan.m-g-n.me/alerts/cve-2026-92294/ Sat, 31 Oct 2026 06:16:35 GMT Vulnerability CVE-2026-92294 has been disclosed in Spectra Legacy – Gutenberg Blocks.Version 2.20.5 fixes it — update now. https://en.shindan.m-g-n.me/alerts/cve-2026-116563/ https://en.shindan.m-g-n.me/alerts/cve-2026-116563/ Sat, 31 Oct 2026 06:16:32 GMT Vulnerability CVE-2026-116563 has been disclosed in Photo Gallery, Sliders, Proofing and Themes – NextGEN Gallery.Version 4.5.5 fixes it — update now.