I went for coffee and came back with 6 vulnerabilities in WordPress plugins

InfoSec Write-ups cybersecurity · April 11, 2026 · Original source

Related Vulnerabilities

CVE-2026-4979: The UsersWP – Front-end login form, User Registration, User Profile & Members Directory plugin for W MEDIUM
CVE-2026-5207: The LifterLMS plugin for WordPress is vulnerable to SQL Injection via the 'order' parameter in all v MEDIUM
CVE-2026-3371: The Tutor LMS – eLearning and online course solution plugin for WordPress is vulnerable to Insecure MEDIUM
CVE-2026-4977: The UsersWP – Front-end login form, User Registration, User Profile & Members Directory plugin for W MEDIUM
CVE-2026-4664: The Customer Reviews for WooCommerce plugin for WordPress is vulnerable to authentication bypass in MEDIUM