Severity: High (CVSS 7.5) Affected Systems: Bit Form Bit Form; Wordpress Wordpress Overview Bit Form < 3.2.0 - Unauthenticated Stored XSS via SVG Signature Upload A high vulnerability identified as CVE-2026-16573 has been disclosed. The Bit Form WordPress plugin before 3.2.0 does not sanitize an uploaded signature image before storing it, ... Read More »
Dear Customer, We are announcing a recently disclosed security vulnerability affecting Plesk, identified as CVE-2026-58046. This vulnerability has been addressed by Plesk and requires immediate attention from all customers managing their own Plesk servers. Vulnerability Summary An improper input validation issue in the Plesk XML-RPC API allows ... Read More »
Severity: Critical (CVSS 9.3) Affected Systems: Romancode Mapsvg; Wordpress Wordpress Overview WordPress MapSVG plugin A critical vulnerability identified as CVE-2026-59527 has been disclosed. Unauthenticated SQL Injection in MapSVG Read More »
Severity: High (CVSS 7.5) Affected Systems: Shiptime Shiptime: Discounted Shipping Rates; Wordpress Wordpress Overview WordPress ShipTime: Discounted Shipping Rates plugin A high vulnerability identified as CVE-2026-59528 has been disclosed. Subscriber Sensitive Data Exposure in ShipTime: Discounted Shipping Rates Read More »
