🔍 Filter Threats
| Title | Severity | PoC | Actively Exploited | Source | Date |
|---|---|---|---|---|---|
| CVE-2026-121265 CRITICAL SQL::Abstract versions before 2.000003 for Perl allow SQL injection via an arrayref column value in insert and update.
With the array_datatypes optio... | CRITICAL | ????? | ????? | NVD | 6 days ago |
| CVE-2026-120509 MEDIUM The Real Testimonials – Testimonial Slider, Collect Customer Reviews and Video Testimonials plugin for WordPress is vulnerable to Stored Cross-Site ... | MEDIUM | ????? | ????? | NVD | 6 days ago |
| CVE-2026-120685 MEDIUM The Real Testimonials – Testimonial Slider, Collect Customer Reviews and Video Testimonials plugin for WordPress is vulnerable to Stored Cross-Site ... | MEDIUM | ????? | ????? | NVD | 6 days ago |
| CVE-2026-119075 CRITICAL The Registration Form for WooCommerce plugin for WordPress is vulnerable to privilege escalation due to a missing allow-list check in the FormHandler:... | CRITICAL | ????? | ????? | NVD | 6 days ago |
| CVE-2026-120683 MEDIUM The Real Testimonials – Testimonial Slider, Collect Customer Reviews and Video Testimonials plugin for WordPress is vulnerable to Stored Cross-Site ... | MEDIUM | ????? | ????? | NVD | 6 days ago |
| CVE-2026-119183 HIGH The JetFormBuilder — Dynamic Blocks Form Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the '<form field mapp... | HIGH | ????? | ????? | NVD | 6 days ago |
| CVE-2026-118050 MEDIUM The Football Pool plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'shouttext' parameter in all versions up to, and... | MEDIUM | ????? | ????? | NVD | 6 days ago |
| CVE-2026-118267 HIGH The WP Data Access – App Builder for Tables, Forms, Dashboards, Charts & Maps plugin for WordPress is vulnerable to Incorrect Authorization lead... | HIGH | ????? | ????? | NVD | 6 days ago |
| CVE-2026-116751 HIGH The Booking for Appointments and Events Calendar – Amelia Pro plugin for WordPress is vulnerable to time-based SQL Injection via the 'tag[] (ar... | HIGH | ????? | ????? | NVD | 6 days ago |
| CVE-2026-118066 CRITICAL The Appointment Booking Plugin – LatePoint | Calendar & Scheduling for WordPress plugin for WordPress is vulnerable to Authentication Bypass via... | CRITICAL | ????? | ????? | NVD | 6 days ago |
| CVE-2026-118056 MEDIUM The Image Hover Effects Ultimate ( Image Gallery, Effects, Lightbox, Comparison & Magnifier ) plugin for WordPress is vulnerable to Stored Cross-S... | MEDIUM | ????? | ????? | NVD | 6 days ago |
| CVE-2026-118047 MEDIUM The Falang multilanguage for WordPress plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'falang_term[<taxonomy>][&... | MEDIUM | ????? | ????? | NVD | 6 days ago |
| CVE-2026-115548 HIGH The Quttera ThreatSign – Web Malware Scanner for WordPress plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'HTTP_USER... | HIGH | ????? | ????? | NVD | 6 days ago |
| CVE-2026-111317 HIGH The JetFormBuilder — Dynamic Blocks Form Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the '<any form field ... | HIGH | ????? | ????? | NVD | 6 days ago |
| CVE-2026-111370 HIGH The WP Visitor Statistics (Real Time Traffic) plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'os (also browser, res)&#... | HIGH | ????? | ????? | NVD | 6 days ago |
| CVE-2026-109991 HIGH The FunnelKit Payment Gateway for Stripe WooCommerce plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and... | HIGH | ????? | ????? | NVD | 6 days ago |
| CVE-2026-109230 HIGH The WP Visitor Statistics (Real Time Traffic) plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'browser' parameter ... | HIGH | ????? | ????? | NVD | 6 days ago |
| CVE-2026-116537 HIGH The Link Library plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'link_description' parameter in all versions up t... | HIGH | ????? | ????? | NVD | 6 days ago |
| CVE-2026-109214 HIGH The User Frontend – Membership, User Registration, User Profile, User Directory & Content Restriction with Frontend Post Submission plugin for W... | HIGH | ????? | ????? | NVD | 6 days ago |
| CVE-2026-104014 CRITICAL The Naimur Email OTP Verification for WooCommerce plugin for WordPress is vulnerable to authentication bypass in versions up to, and including, 2.1.0.... | CRITICAL | ????? | ????? | NVD | 6 days ago |