These pages are published after PatchSiren validates generated defensive summaries against stored public CVE and source evidence.
CVE-2026-49068 is a Subscriber Sensitive Data Exposure vulnerability in Coupon Affiliates versions up to 7.8.1. The CVE record was published on 2026-06-15T21:17:19.650Z and has not been modified since then.
CVE-2026-40799 is a MEDIUM severity vulnerability in Simple Cloudflare Turnstile plugin versions <= 1.38.0, allowing unauthenticated broken authentication. The CVE record was published on 2026-06-15T21:16:52.253Z and was last modified on 2026-10-25T23:10:00.167Z. The NVD entry is currently Deferred.
CVE-2026-40770 is a HIGH severity Unauthenticated Cross Site Scripting (XSS) vulnerability in Coupon Affiliates plugin versions <= 7.5.3. The vulnerability has a CVSS score of 7.1 and was published on [cvePublishedAt](https://www.cve.org/CVERecord?id=CVE-2026-40770).