TotalSuite TotalContest Lite

• CVE-2026-0677 Medium 6.3 WordPress TotalContest Lite plugin <= 2.9.1 - PHP Object Injection vulnerability 0.2%
• CVE-2025-23782 High 7.1 WordPress TotalContest Lite Plugin <= 2.8.1 - Reflected Cross Site Scripting (XSS) vulnerability 0.3%