🔍 Filter Threats
| Title | Severity | PoC | Actively Exploited | Source | Date |
|---|---|---|---|---|---|
| ???-????-???? ?????????????????????????????????? ?????????????????????????????????? | HIGH | ????? | ????? | SA | 23 hours ago |
| ???-????-???? ?????????????????????????????????? ?????????????????????????????????? | HIGH | ????? | ????? | SA | 2 days ago |
| ???-????-???? ?????????????????????????????????? ?????????????????????????????????? | CRITICAL | ????? | ????? | SA | 2 days ago |
| ???-????-???? ?????????????????????????????????? ?????????????????????????????????? | CRITICAL | ????? | ????? | SA | 3 days ago |
| ???-????-???? ?????????????????????????????????? ?????????????????????????????????? | HIGH | ????? | ????? | SA | 3 days ago |
| CVE-2026-121768 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Markus Wiesenhofer Contact Form 7 R... | MEDIUM | ????? | ????? | NVD | 6 minutes ago |
| CVE-2026-52713 Missing Authorization vulnerability in ThimPress LearnPress learnpress allows Exploiting Incorrectly Configured Access Control Security Levels.This is... | MEDIUM | ????? | ????? | NVD | 8 minutes ago |
| CVE-2026-119467 Missing Authorization vulnerability in WPVibes AnyWhere Elementor anywhere-elementor allows Exploiting Incorrectly Configured Access Control Security ... | MEDIUM | ????? | ????? | NVD | 9 minutes ago |
| CVE-2026-66669 Cross-Site Request Forgery (CSRF) vulnerability in Suplugins Superb Addons: Blocks, Patterns & Theme Designer superb-blocks allows Cross Site Requ... | HIGH | ????? | ????? | NVD | 9 minutes ago |
| CVE-2026-119510 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Saeed MC Woocommerce Wishlist smart-wi... | MEDIUM | ????? | ????? | NVD | 11 minutes ago |
| CVE-2026-123958 A vulnerability was identified in TOTOLINK CA300-PoE 6.2c.884. The affected element is the function setLanConfig of the file /cgi-bin/cstecgi.cgi. Suc... | CRITICAL | ????? | ????? | NVD | 11 minutes ago |
| CVE-2026-121781 Missing Authorization vulnerability in WP ManageNinja LLC Fluent Booking fluent-booking allows Exploiting Incorrectly Configured Access Control Securi... | MEDIUM | ????? | ????? | NVD | 15 minutes ago |
| CVE-2026-119489 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Bootstrapped Ventures WP Recipe Maker ... | MEDIUM | ????? | ????? | NVD | 15 minutes ago |
| CVE-2026-120849 Missing Authorization vulnerability in WC Lovers WCFM Marketplace wc-multivendor-marketplace allows Exploiting Incorrectly Configured Access Control S... | MEDIUM | ????? | ????? | NVD | 18 minutes ago |
| CVE-2026-120848 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WC Lovers WCFM Marketplace wc-multiven... | MEDIUM | ????? | ????? | NVD | 19 minutes ago |
| CVE-2026-124274 Missing Authorization vulnerability in myCred myCred mycred allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects... | MEDIUM | ????? | ????? | NVD | 21 minutes ago |
| CVE-2026-122675 Cross-Site Request Forgery (CSRF) vulnerability in Wpmet Wp Social wp-social allows Cross Site Request Forgery.This issue affects Wp Social: from n/a ... | MEDIUM | ????? | ????? | NVD | 22 minutes ago |
| CVE-2026-121761 Missing Authorization vulnerability in Infomaniak Network VOD Infomaniak vod-infomaniak allows Exploiting Incorrectly Configured Access Control Securi... | MEDIUM | ????? | ????? | NVD | 22 minutes ago |
| CVE-2026-121767 Missing Authorization vulnerability in weDevs weDocs wedocs allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects... | MEDIUM | ????? | ????? | NVD | 23 minutes ago |
| CVE-2026-121778 Missing Authorization vulnerability in WP Lab WP-Lister Lite for Amazon wp-lister-for-amazon allows Exploiting Incorrectly Configured Access Control S... | MEDIUM | ????? | ????? | NVD | 26 minutes ago |
| CVE-2026-121779 Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in YITH YITH WooCommerce Subscription yith-woocommerce-subscr... | MEDIUM | ????? | ????? | NVD | 28 minutes ago |
| CVE-2026-39733 Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) vulnerability in properfraction ProfilePress wp-user-avatar allows Code ... | MEDIUM | ????? | ????? | NVD | 28 minutes ago |
| CVE-2026-120531 R The Subscribe2 – Form, Email Subscribers & Newsletters plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘data[ip]’ ... | HIGH | ????? | ????? | Wordfence | 43 minutes ago |
| CVE-2026-123957 A vulnerability was determined in TOTOLINK CA300-PoE 6.2c.884. Impacted is the function setIpQosRules of the file /cgi-bin/cstecgi.cgi. This manipulat... | CRITICAL | ????? | ????? | NVD | 56 minutes ago |
| CVE-2026-87112 The QA Assistants – Driven by data plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 5.3.0 via the &#... | HIGH | ????? | ????? | NVD | 1 hour ago |