WordPress 4

• CVE-2026-15248: Meta Box Contributor+ Arbitrary Attachment Deletion Jul 20, 2026
• CVE-2026-11571: Unauthenticated Sensitive Information Exposure in Everest Forms Jun 19, 2026
• CVE-2026-11855: Unauthenticated Stored XSS in Simple Membership Jun 15, 2026
• CVE-2026-14224: Subscriber+ IDOR in Easy Appointments Jun 13, 2026