New CVE published: CVE-2026-122060
WP Recipe Maker < 10.9.2 (WordPress): unauthenticated visitors could read recipes in password-protected posts through the REST API and structured data.
Fixed in 10.9.2. Update now.
wpscan.com/vulnerability/743โฆ
cve.org/CVERecord?id=CVE-202โฆ
#CVE
New CVE published: CVE-2026-122062
Pronamic Pay < 11.1.0 and its Mollie donation add-on < 1.7.1 (WordPress): unauthenticated visitors could read form submissions via the REST API.
Fixed in 11.1.0 / 1.7.1. Update now.
wpscan.com/vulnerability/026โฆ
cve.org/CVERecord?id=CVE-202โฆ
#CVE
New CVE published: CVE-2026-118637
Simple Download Monitor < 4.1.3 (WordPress): Contributor+ users could read titles and descriptions of private and draft downloads through a shortcode.
Fixed in 4.1.3. Update now.
๐wpscan.com/vulnerability/bf1โฆ
๐cve.org/CVERecord?id=CVE-202โฆ
#CVE
New CVE published: CVE-2026-118523
EventPrime < 4.3.6.1 (WordPress): unauthenticated visitors could read pending posts by overriding the post status in a public request.
Fixed in 4.3.6.1. Update now.
๐ wpscan.com/vulnerability/d3cโฆ
๐cve.org/CVERecord?id=CVE-202โฆ
#infosec #CVE
Unknown โ reported โ patched โ well-known.
wellknown.info
