tag
Plugin-Vulnerability
Medium
WordPress User Language Switch Plugin SSRF — CVE-2026-0745
CVE-2026-0745 (GHSA-m38c-5p3m-p7gm)·
WordPress "User Language Switch" plugin
unpatched
High
WordPress Ninja Forms Plugin Unauthenticated File Upload — CVE-2026-0740
CVE-2026-0740·
WordPress "Ninja Forms" plugin — file upload field/module
unpatched
High
WordPress HT Mega (Absolute Addons for Elementor) Unauthenticated PII Disclosure (CVE-2026-4106)
CVE-2026-4106·
HT Mega – Absolute Addons for Elementor (WordPress plugin)
unpatched
Medium
WordPress "List Site Contributors" Plugin Reflected XSS Scanner (CVE-2026-0594)
CVE-2026-0594·
"List Site Contributors" WordPress plugin
unpatched