tag
Wp-Plugin
Critical
Simple User Registration WordPress Plugin — Unauthenticated Privilege Escalation (CVE-2025-4334)
CVE-2025-4334·
"Simple User Registration" WordPress plugin (registration/form-builder plugin, wpr_submit_form AJAX action)
unpatched
Critical
WordPress SignUp/SignIn & Invoice Generator Password-Reset Account Takeover (CVE-2026-12416 / CVE-2026-12417)
CVE-2026-12416, CVE-2026-12417·
SignUp & SignIn WordPress plugin (CVE-2026-12417); Invoice Generator WordPress plugin (CVE-2026-12416)
unpatched
Critical
WordPress "Form Maker" Plugin Unauthenticated SQL Injection — CVE-2026-3359
CVE-2026-3359·
WordPress "Form Maker" plugin by Web10
unpatched
Critical
midi-Synth WordPress Plugin Arbitrary File Upload (CVE-2026-1306)
CVE-2026-1306·
midi-Synth WordPress plugin
unpatched
Medium
Friendly Functions for Welcart WordPress Plugin CSRF (CVE-2026-1208)
CVE-2026-1208·
Friendly Functions for Welcart (WordPress plugin)
patched