773 PoCs | 119 CISA KEV

tag

Plugin-Vulnerability

WordPress User Language Switch Plugin SSRF — CVE-2026-0745

CVE-2026-0745 (GHSA-m38c-5p3m-p7gm) web Unverified

CVE-2026-0745webMEDIUMUnverified2026-07-05WordPress Ninja Forms Plugin Unauthenticated File Upload — CVE-2026-0740 EPSS 63%

CVE-2026-0740 web Unverified

CVE-2026-0740webHIGHUnverified2026-07-05WordPress HT Mega (Absolute Addons for Elementor) Unauthenticated PII Disclosure (CVE-2026-4106)

CVE-2026-4106 web Unverified

CVE-2026-4106webHIGHUnverified2026-07-05WordPress "List Site Contributors" Plugin Reflected XSS Scanner (CVE-2026-0594)

CVE-2026-0594 web Unverified

CVE-2026-0594webMEDIUMUnverified2026-07-05