🔍 Filter Threats
| Title | Severity | PoC | Actively Exploited | Source | Date |
|---|---|---|---|---|---|
| CVE-2026-120984 CRITICAL A flaw was found in the Keycloak server's client management component. When a client is created or imported with authorization services enabled, ... | CRITICAL | ????? | ????? | NVD | 6 days ago |
| CVE-2026-123988 MEDIUM A vulnerability has been found in SililaWijesinghe Food Ordering System up to ba314e897e3365600461e5ea59432e39ceaa0fa5. This issue affects some unknow... | MEDIUM | ????? | ????? | NVD | 6 days ago |
| CVE-2026-123966 CRITICAL A vulnerability was determined in Tenda AC19 16.03.10.07. Affected by this issue is the function saveParentControlInfo of the file /goform/saveParentC... | CRITICAL | ????? | ????? | NVD | 6 days ago |
| CVE-2026-123477 MEDIUM Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Crocoblock JetEngine jet-engine allows... | MEDIUM | ????? | ????? | NVD | 6 days ago |
| CVE-2026-123483 MEDIUM Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) vulnerability in Crocoblock JetFormBuilder jetformbuilder allows Code In... | MEDIUM | ????? | ????? | NVD | 6 days ago |
| CVE-2026-123474 MEDIUM Missing Authorization vulnerability in LeapWorx Premium Blocks – Gutenberg Blocks for WordPress premium-blocks-for-gutenberg allows Exploiting Incor... | MEDIUM | ????? | ????? | NVD | 6 days ago |
| CVE-2026-123467 MEDIUM Missing Authorization vulnerability in StylemixThemes Motors motors-car-dealership-classified-listings allows Exploiting Incorrectly Configured Access... | MEDIUM | ????? | ????? | NVD | 6 days ago |
| CVE-2026-123861 MEDIUM Authorization Bypass Through User-Controlled Key vulnerability in CrocoBlock JetFormBuilder – Hierarchical Select jet-form-builder-hierarchical-sele... | MEDIUM | ????? | ????? | NVD | 6 days ago |
| CVE-2026-123860 MEDIUM Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) vulnerability in Crocoblock JetFormBuilder jetformbuilder allows Code In... | MEDIUM | ????? | ????? | NVD | 6 days ago |
| CVE-2026-123462 MEDIUM Missing Authorization vulnerability in myCred myCred mycred allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects... | MEDIUM | ????? | ????? | NVD | 6 days ago |
| CVE-2026-122669 MEDIUM Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Everest Forms Everest Forms everest-fo... | MEDIUM | ????? | ????? | NVD | 6 days ago |
| CVE-2026-122663 MEDIUM Missing Authorization vulnerability in VillaTheme CURCY woo-multi-currency allows Exploiting Incorrectly Configured Access Control Security Levels.Thi... | MEDIUM | ????? | ????? | NVD | 6 days ago |
| CVE-2026-123183 MEDIUM Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) vulnerability in PluginUs.Net Active Products Tables for WooCommerce pro... | MEDIUM | ????? | ????? | NVD | 6 days ago |
| CVE-2026-122660 MEDIUM Missing Authorization vulnerability in BAKKBONE Australia FloristPress bakkbone-florist-companion allows Exploiting Incorrectly Configured Access Cont... | MEDIUM | ????? | ????? | NVD | 6 days ago |
| CVE-2026-122659 MEDIUM Missing Authorization vulnerability in WP ManageNinja LLC Fluent Booking fluent-booking allows Exploiting Incorrectly Configured Access Control Securi... | MEDIUM | ????? | ????? | NVD | 6 days ago |
| CVE-2026-122041 CRITICAL The Checkout Field Editor for WooCommerce (Pro) plugin for WordPress is vulnerable to unauthorized deletion of arbitrary attachments due to a missing ... | CRITICAL | ????? | ????? | NVD | 6 days ago |
| CVE-2026-121784 MEDIUM Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Magepeople inc. WpBookingly service-bo... | MEDIUM | ????? | ????? | NVD | 6 days ago |
| CVE-2026-121775 MEDIUM Missing Authorization vulnerability in VillaTheme CURCY woo-multi-currency allows Exploiting Incorrectly Configured Access Control Security Levels.Thi... | MEDIUM | ????? | ????? | NVD | 6 days ago |
| CVE-2026-121579 MEDIUM Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Unlimited Elements Unlimited Elements ... | MEDIUM | ????? | ????? | NVD | 6 days ago |
| CVE-2026-121575 MEDIUM Missing Authorization vulnerability in WP User Manager WP User Manager wp-user-manager allows Exploiting Incorrectly Configured Access Control Securit... | MEDIUM | ????? | ????? | NVD | 6 days ago |