WordPress Security Update Advisory (CVE-2026-64638)
Overview A security update has been released to address a vulnerability in WordPress. This vulnerability, identified as CVE-2026-64638, is a pre-authentication reflected cross-site scripting (XSS) vulnerability—a type of vulnerability that tricks users into executing malicious scripts—occurring on the WordPress login screen. Affected Versions The affected WordPress versions are as follows:
WordPress Product Security Update Advisory
Overview A security update has been released to address vulnerabilities in WordPress. Users of this product should update to the latest version. Affected Versions WordPress versions: 6.8.0 Through 6.8.5. WordPress versions: 6.9.0 Through 6.9.4. WordPress versions: 7.0.0 Through 7.0.1. Resolved Vulnerabilities CVE-2026-60137: SQL injection vulnerability in WordPress (a vulnerability where
WordPress Plugin Security Update Advisory (CVE-2026-8732)
Overview A security update has been issued for a vulnerability in the WordPress plugin WP Maps Pro. the vulnerability is an unauthenticated privilege escalation vulnerability (CVE-2026-8732), which can be exploited through the wpgmptempaccess_ajax AJAX Action (a feature that allows web applications to handle asynchronous requests) related to the way threat
WordPress Plugin Security Update Advisory (CVE-2026-1357)
Overview We have released a security update to address a vulnerability in our WordPress plugin. Users of affected products are advised to update to the latest version. Affected Products CVE-2026-1357 WPvivid Backup & Migration Version: 0.9.123 and earlier Resolved Vulnerabilities Unauthenticated arbitrary file
WordPress Plugin Security Update Advisory (CVE-2025-13486)
Overview We have released a security update to address a vulnerability in our WordPress plugin. Users of affected products are advised to update to the latest version. Affected Products CVE-2025-13486 Advanced Custom Fields: Extended Versions: 0.9.0.5 and later and 0.9.1.1 and earlier Resolved Vulnerabilities
WordPress Plugin Security Update Advisory (CVE-2025-6389)
Overview We have released a security update to address a vulnerability in our WordPress plugin. Users of affected products are advised to update to the latest version. Affected Products CVE-2025-6389 Sneeit Framework Version: 8.3 and earlier Resolved Vulnerabilities Remote code execution vulnerability in
WordPress Plugin Security Update Advisory (CVE-2025-9501)
Overview We have released a security update to address a vulnerability in our WordPress plugin. Users of affected products are advised to update to the latest version. Affected Products CVE-2025-9501 W3 Total Cache versions: 2.8.12 and earlier Resolved Vulnerabilities Remote code execution (RCE)
WordPress Plugin Security Update Advisory (CVE-2025-5821)
Overview We have released a security update to address a vulnerability in our WordPress plugin. Users of affected products are advised to update to the latest version. Affected Products CVE-2025-5821 Case-theme-user Version: 1.0.3 and earlier Resolved Vulnerabilities Social Login Authentication Bypass Vulnerability in
WordPress Plugin Security Update Advisory (CVE-2025-7384)
Overview We have released a security update to address a vulnerability in our WordPress plugin. Users of affected products are advised to update to the latest version. Affected Products CVE-2025-7384 Contact-form-entries Version: 1.4.3 and earlier Resolved Vulnerabilities PHP object injection vulnerability in contact-form-entries
WordPress Product Security Update Advisory (CVE-2025-6463)
Overview We have released a security update to fix vulnerabilities in our WordPress products. Users of affected products are advised to update to the latest version. Affected Products CVE-2025-6463 Forminator Forms Plugin Version: 1.44.2 and earlier Resolved Vulnerabilities Arbitrary file deletion vulnerability in
