Liquid Web / StellarWP

Liquid Web / StellarWP Security Releases - October 2026

liquid-web-stellarwp-2026-10 Oct 1, 2026 Source: Vendor

Liquid Web / StellarWP security advisories for October 2026, compiled from CVE.org records.

Source of record The credited names below are quoted verbatim from the vendor's own advisory: https://www.cve.org/CVERecord?id=CVE-2026-110900

Are you credited here? Sign in to claim your line. It is yours immediately, with no review queue. The name the vendor printed stays next to your handle for anyone to check against the advisory above, and any member who thinks a claim is wrong can refute it.

Credited

3 lines

Showing 1–3 of 3 matching , clear filters

CVE-2026-110900 BR2026-0000-034208 BookIt unclaimed

Missing Authorization vulnerability in Liquid Web / StellarWP BookIt bookit allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects BookIt: from n/a through 2.6.0.5.

Credited as Alpaslan Fatih Sözer

CVE-2026-110903 BR2026-0000-034212 The Events Calendar unclaimed

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Liquid Web / StellarWP The Events Calendar the-events-calendar allows Stored XSS.This issue aff...

Credited as dzaku

CVE-2026-111396 BR2026-0000-034213 Advanced Post Manager unclaimed

Missing Authorization vulnerability in Liquid Web / StellarWP Advanced Post Manager advanced-post-manager allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects ...

Credited as cazy