🔍 Filter Threats
| Title | Severity | PoC | Actively Exploited | Source | Date |
|---|---|---|---|---|---|
| CVE-2026-104746 HIGH The Motors – Car Dealership & Classified Listings Plugin plugin for WordPress is vulnerable to arbitrary file deletion due to insufficient file ... | HIGH | ????? | ????? | NVD | 6 days ago |
| CVE-2026-104768 HIGH The AutomatorWP – No-Code Workflow Automation, Integration & Webhooks Plugin, now with AI plugin for WordPress is vulnerable to Privilege Escala... | HIGH | ????? | ????? | NVD | 6 days ago |
| CVE-2026-104760 MEDIUM The weDocs: AI Powered Knowledge Base, Docs, Documentation, Wiki & AI Chatbot plugin for WordPress is vulnerable to Stored Cross-Site Scripting vi... | MEDIUM | ????? | ????? | NVD | 6 days ago |
| CVE-2026-103914 MEDIUM The Dynific Addons for Elementor plugin for WordPress is vulnerable to SQL Injection via the 'q' parameter in versions up to, and including,... | MEDIUM | ????? | ????? | NVD | 6 days ago |
| CVE-2026-102564 MEDIUM The The Dynific Addons for Elementor (formerly Anywhere Elementor) plugin for WordPress is vulnerable to arbitrary shortcode execution in all versions... | MEDIUM | ????? | ????? | NVD | 6 days ago |
| CVE-2026-123470 MEDIUM Missing Authorization vulnerability in HivePress HivePress hivepress allows Exploiting Incorrectly Configured Access Control Security Levels.This issu... | MEDIUM | ????? | ????? | NVD | 6 days ago |
| CVE-2026-121783 MEDIUM Cross-Site Request Forgery (CSRF) vulnerability in Passionate Programmer Peter WP Data Access wp-data-access allows Cross Site Request Forgery.This is... | MEDIUM | ????? | ????? | NVD | 6 days ago |
| CVE-2026-121724 MEDIUM Missing Authorization vulnerability in WebberZone Contextual Related Posts contextual-related-posts allows Exploiting Incorrectly Configured Access Co... | MEDIUM | ????? | ????? | NVD | 6 days ago |
| CVE-2026-123468 MEDIUM Missing Authorization vulnerability in StylemixThemes Motors motors-car-dealership-classified-listings allows Exploiting Incorrectly Configured Access... | MEDIUM | ????? | ????? | NVD | 6 days ago |
| CVE-2026-123148 MEDIUM Missing Authorization vulnerability in TMS IvyForms ivyforms allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affect... | MEDIUM | ????? | ????? | NVD | 6 days ago |
| CVE-2026-120857 MEDIUM Missing Authorization vulnerability in VideoWhisper.com 2Way VideoCalls and Random Chat webcam-2way-videochat allows Exploiting Incorrectly Configured... | MEDIUM | ????? | ????? | NVD | 6 days ago |
| CVE-2026-120837 MEDIUM Missing Authorization vulnerability in Everest Forms Everest Forms everest-forms allows Exploiting Incorrectly Configured Access Control Security Leve... | MEDIUM | ????? | ????? | NVD | 6 days ago |
| CVE-2026-121571 MEDIUM Missing Authorization vulnerability in WP Desk Autopay dla WooCommerce pay-wp allows Exploiting Incorrectly Configured Access Control Security Levels.... | MEDIUM | ????? | ????? | NVD | 6 days ago |
| CVE-2026-119508 MEDIUM Missing Authorization vulnerability in Mamunur Rashid Radius Booking — Booking Calendar for Appointments & Services radius-booking allows Exploi... | MEDIUM | ????? | ????? | NVD | 6 days ago |
| CVE-2026-120365 MEDIUM Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Aguila Technologies WP Customer Area c... | MEDIUM | ????? | ????? | NVD | 6 days ago |
| CVE-2026-119525 MEDIUM Missing Authorization vulnerability in WP Desk Dropshipping XML for WooCommerce dropshipping-xml-for-woocommerce allows Exploiting Incorrectly Configu... | MEDIUM | ????? | ????? | NVD | 6 days ago |
| CVE-2026-120364 MEDIUM Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Untapwp Vidplex vidplex allows Stored ... | MEDIUM | ????? | ????? | NVD | 6 days ago |
| CVE-2026-119523 MEDIUM Missing Authorization vulnerability in Cozmoslabs Paid Member Subscriptions paid-member-subscriptions allows Exploiting Incorrectly Configured Access ... | MEDIUM | ????? | ????? | NVD | 6 days ago |
| CVE-2026-119513 MEDIUM Missing Authorization vulnerability in Ahmad JS Help Desk js-support-ticket allows Exploiting Incorrectly Configured Access Control Security Levels.Th... | MEDIUM | ????? | ????? | NVD | 6 days ago |
| CVE-2026-119501 MEDIUM Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in BdThemes Element Pack Elementor Addons... | MEDIUM | ????? | ????? | NVD | 6 days ago |