ProfilePress XSS Threat Advisory//Published on 2026-04-25//CVE-2026-41556
ProfilePress CVE-2026-41556 XSS vulnerability alert and urgent remediation guidance
WP-FIREWALL SECURITY TEAM
Mitigating XSS in WordPress Booking Forms//Published on 2026-04-25//CVE-2026-40791
Urgent XSS in WP Time Slots Booking Form <=1.2.46; patch 1.2.47 or mitigate.
Securing Learnify Against Local File Inclusion//Published on 2026-04-25//CVE-2025-60085
Learnify LFI vulnerability CVE-2025-60085 with WordPress mitigation guide for site owners
Kapee Theme Cross Site Scripting Vulnerability//Published on 2026-04-25//CVE-2026-41557
Patch Kapee XSS CVE-2026-41557 (1.7.1) and harden WordPress defenses
ProfilePress XSS Threat Advisory//Published on 2026-04-25//CVE-2026-41556
ProfilePress CVE-2026-41556 XSS vulnerability alert and urgent remediation guidance
Mitigating SMS Plugin Data Exposure in WordPress//Published on 2026-04-25//CVE-2026-40790
Urgent guide to mitigate WP SMS CVE-2026-40790 sensitive data exposure in WordPress
Mitigating XSS in WordPress Booking Forms//Published on 2026-04-25//CVE-2026-40791
Urgent XSS in WP Time Slots Booking Form <=1.2.46; patch 1.2.47 or mitigate.
Securing Learnify Against Local File Inclusion//Published on 2026-04-25//CVE-2025-60085
Learnify LFI vulnerability CVE-2025-60085 with WordPress mitigation guide for site owners
Kapee Theme Cross Site Scripting Vulnerability//Published on 2026-04-25//CVE-2026-41557
Patch Kapee XSS CVE-2026-41557 (1.7.1) and harden WordPress defenses
Mitigating SMS Plugin Data Exposure in WordPress//Published on 2026-04-25//CVE-2026-40790
Urgent guide to mitigate WP SMS CVE-2026-40790 sensitive data exposure in WordPress