tag
Wp-Ajax
Critical
WooCommerce Dynamic Pricing & Discounts (WC Designer Pro) Unauthenticated File Upload RCE (CVE-2025-6440)
CVE-2025-6440·
WordPress WooCommerce Dynamic Pricing & Discounts plugin (wc-designer-pro)
unpatched
High
WordPress HT Mega (Absolute Addons for Elementor) Unauthenticated PII Disclosure (CVE-2026-4106)
CVE-2026-4106·
HT Mega – Absolute Addons for Elementor (WordPress plugin)
unpatched
Critical
LA-Studio Element Kit for Elementor — Unauthenticated Admin Account Creation (CVE-2026-0920)
CVE-2026-0920·
LA-Studio Element Kit for Elementor (WordPress plugin, slug lakit)
unpatched