Mass-Exploitation

YayMail WooCommerce Plugin Missing Authorization to Privilege Escalation — CVE-2026-1937 newCVE-2026-1937webHIGH 7.2Unverified2026-07-05WordPress SignUp/SignIn & Invoice Generator Password-Reset Account Takeover (CVE-2026-12416 / CVE-2026-12417) newCVE-2026-12416, CVE-2026-12417webCRITICAL 9.8Unverified2026-07-05UpdraftPlus WordPress Plugin — Unauthenticated RPC Key Bypass to Admin Creation & RCE (CVE-2026-10795) newCVE-2026-10795webCRITICALUnverified2026-07-05