Smart Coupons Access Control Vulnerability//Published on 2026-05-17//CVE-2026-45438
CVE-2026-45438: broken access control in Smart Coupons for WooCommerce upgrade now
WP-FIREWALL SECURITY TEAM
Critical SSRF Risk in InfusedWoo Pro//Published on 2026-05-17//CVE-2026-6514
Urgent WordPress SSRF in InfusedWoo Pro <=5.1.2; patch 5.1.3; WP Firewall mitigation guide.
Critical XSS in WordPress Geo Maps Plugin//Published on 2026-05-17//CVE-2025-15345
Remediation guide for WordPress Interactive Geo Maps CVE-2025-15345 reflected XSS
ManageWP Worker Plugin XSS Vulnerability Advisory//Published on 2026-05-17//CVE-2026-3718
Critical guide to ManageWP Worker stored XSS risk and urgent remediation steps
Critical Taskbuilder SQL Injection Vulnerability//Published on 2026-05-17//CVE-2026-6225
Urgent Taskbuilder SQL injection on WordPress <=5.0.6 patch to 5.0.7 and mitigate
Critical IDOR Risk in FluentForm Plugin//Published on 2026-05-17//CVE-2026-5395
IDOR in FluentForm CVE-2026-5395: urgent patch, WAF mitigation, and hardening steps for WordPress
Smart Coupons Access Control Vulnerability//Published on 2026-05-17//CVE-2026-45438
CVE-2026-45438: broken access control in Smart Coupons for WooCommerce upgrade now
Critical XSS in WordPress Geo Maps Plugin//Published on 2026-05-17//CVE-2025-15345
Remediation guide for WordPress Interactive Geo Maps CVE-2025-15345 reflected XSS
Critical SSRF Risk in InfusedWoo Pro//Published on 2026-05-17//CVE-2026-6514
Urgent WordPress SSRF in InfusedWoo Pro <=5.1.2; patch 5.1.3; WP Firewall mitigation guide.
ManageWP Worker Plugin XSS Vulnerability Advisory//Published on 2026-05-17//CVE-2026-3718
Critical guide to ManageWP Worker stored XSS risk and urgent remediation steps