🔍 Filter Threats
| Title | Severity | PoC | Actively Exploited | Source | Date |
|---|---|---|---|---|---|
| CVE-2026-121777 MEDIUM Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) vulnerability in Cool Plugins Cool Formkit Lite extensions-for-elementor... | MEDIUM | ????? | ????? | NVD | 6 days ago |
| CVE-2026-120841 HIGH Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Magepeople inc. WpT... | HIGH | ????? | ????? | NVD | 6 days ago |
| CVE-2026-120839 HIGH Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Magepeople inc. WpT... | HIGH | ????? | ????? | NVD | 6 days ago |
| CVE-2026-120579 MEDIUM The Active Woot Products Tables for WooCommerce. 100% FREE plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'help_title&... | MEDIUM | ????? | ????? | NVD | 6 days ago |
| CVE-2026-119156 HIGH The Download Manager plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'wpdm_reg[first_name], wpdm_reg[last_name], wpdm_r... | HIGH | ????? | ????? | NVD | 6 days ago |
| CVE-2026-109973 MEDIUM The Image Hover Effects Ultimate Visual Composer (Flipbox - Awesomes Flip Boxes Image Overlay) plugin for WordPress is vulnerable to Stored Cross-Site... | MEDIUM | ????? | ????? | NVD | 6 days ago |
| CVE-2026-123964 MEDIUM A vulnerability was detected in OpenBMB Internet of Agents up to 9d78e88e47160eb42ee1ee8538c05e1c2c47877a. This affects the function launch_goal of th... | MEDIUM | ????? | ????? | NVD | 6 days ago |
| CVE-2026-123963 MEDIUM A security vulnerability has been detected in OpenBMB Internet of Agents up to 9d78e88e47160eb42ee1ee8538c05e1c2c47877a. The impacted element is the f... | MEDIUM | ????? | ????? | NVD | 6 days ago |
| CVE-2026-93766 HIGH The Happyforms Pro plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'happyforms_client_referer' parameter in all ve... | HIGH | ????? | ????? | NVD | 6 days ago |
| CVE-2026-96565 MEDIUM The WP-Members Membership Plugin plugin for WordPress is vulnerable to Stored Cross-Site Scripting via WooCommerce Checkout Multicheckbox/Multiselect ... | MEDIUM | ????? | ????? | NVD | 6 days ago |
| CVE-2026-93755 HIGH The Happyforms plugin for WordPress is vulnerable to Stored Cross-Site Scripting via spoofable client IP headers in versions up to, and including, 1.3... | HIGH | ????? | ????? | NVD | 6 days ago |
| CVE-2026-123776 CRITICAL RRD::CGI::Image versions through 0.01 for Perl pass CGI query parameters containting "tz" to tzset(), , so a FIFO or device path blocks the ... | CRITICAL | ????? | ????? | NVD | 6 days ago |
| CVE-2026-93429 HIGH The VikBooking Hotel Booking Engine & PMS plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'guests[][][documents]' ... | HIGH | ????? | ????? | NVD | 6 days ago |
| CVE-2026-121765 HIGH Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Cozmoslabs TranslatePress translatepre... | HIGH | ????? | ????? | NVD | 6 days ago |
| CVE-2026-121977 MEDIUM The JetFormBuilder — Dynamic Blocks Form Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'note (form field wh... | MEDIUM | ????? | ????? | NVD | 6 days ago |
| CVE-2026-123418 HIGH The Church Admin plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'lat' parameter in all versions up to, and includ... | HIGH | ????? | ????? | NVD | 6 days ago |
| CVE-2026-121976 MEDIUM The Modula plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'items' parameter in versions up to, and including, 3.0... | MEDIUM | ????? | ????? | NVD | 6 days ago |
| CVE-2026-122231 HIGH The WS Form LITE – Drag & Drop Contact Form Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'field_<id... | HIGH | ????? | ????? | NVD | 6 days ago |
| CVE-2026-122059 MEDIUM The WP ImageViewer plugin for WordPress is vulnerable to Stored DOM-Based Cross-Site Scripting via the 'img.alt' parameter in all versions u... | MEDIUM | ????? | ????? | NVD | 6 days ago |
| CVE-2026-119498 MEDIUM Authentication Bypass Using an Alternate Path or Channel vulnerability in RelyWP Simple Cloudflare Turnstile simple-cloudflare-turnstile allows Authen... | MEDIUM | ????? | ????? | NVD | 6 days ago |