🔍 Filter Threats
| Title | Severity | PoC | Actively Exploited | Source | Date |
|---|---|---|---|---|---|
| CVE-2026-119492 MEDIUM Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) vulnerability in Metaphor Creations, LLC Ditty ditty-news-ticker allows ... | MEDIUM | ????? | ????? | NVD | 6 days ago |
| CVE-2026-119490 MEDIUM Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) vulnerability in Made with Fuel Ltd. Better Notifications for WP bnfw al... | MEDIUM | ????? | ????? | NVD | 6 days ago |
| CVE-2026-119496 MEDIUM Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) vulnerability in David Lingren Media LIbrary Assistant media-library-ass... | MEDIUM | ????? | ????? | NVD | 6 days ago |
| CVE-2026-119478 MEDIUM Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) vulnerability in StylemixThemes MasterStudy LMS masterstudy-lms-learning... | MEDIUM | ????? | ????? | NVD | 6 days ago |
| CVE-2026-61990 MEDIUM Missing Authorization vulnerability in WC Lovers WCFM Membership wc-multivendor-membership allows Exploiting Incorrectly Configured Access Control Sec... | MEDIUM | ????? | ????? | NVD | 6 days ago |
| CVE-2026-95870 HIGH The wpForo Forum plugin for WordPress is vulnerable to generic SQL Injection via the 'data' parameter in all versions up to, and including, ... | HIGH | ????? | ????? | NVD | 6 days ago |
| CVE-2026-121762 HIGH Cross-Site Request Forgery (CSRF) vulnerability in Blubrry Podcasting PowerPress Podcasting powerpress allows Cross Site Request Forgery.This issue af... | HIGH | ????? | ????? | NVD | 6 days ago |
| CVE-2026-123469 MEDIUM Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) vulnerability in Liquid Web / StellarWP The Events Calendar the-events-c... | MEDIUM | ????? | ????? | NVD | 6 days ago |
| CVE-2026-123466 MEDIUM Missing Authorization vulnerability in LeapWorx Premium Blocks – Gutenberg Blocks for WordPress premium-blocks-for-gutenberg allows Exploiting Incor... | MEDIUM | ????? | ????? | NVD | 6 days ago |
| CVE-2026-123464 MEDIUM Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Liquid Web / StellarWP The Events Cale... | MEDIUM | ????? | ????? | NVD | 6 days ago |
| CVE-2026-122668 MEDIUM Missing Authorization vulnerability in myCred myCred mycred allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects... | MEDIUM | ????? | ????? | NVD | 6 days ago |
| CVE-2026-121766 MEDIUM Missing Authorization vulnerability in Blubrry Podcasting PowerPress Podcasting powerpress allows Exploiting Incorrectly Configured Access Control Sec... | MEDIUM | ????? | ????? | NVD | 6 days ago |
| CVE-2026-120850 MEDIUM Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Elementor Elementor Website Builder el... | MEDIUM | ????? | ????? | NVD | 6 days ago |
| CVE-2026-120842 MEDIUM Missing Authorization vulnerability in Brainstorm Force SureForms sureforms allows Exploiting Incorrectly Configured Access Control Security Levels.Th... | MEDIUM | ????? | ????? | NVD | 6 days ago |
| CVE-2026-120840 MEDIUM Missing Authorization vulnerability in ThemeGrill User Registration user-registration allows Exploiting Incorrectly Configured Access Control Security... | MEDIUM | ????? | ????? | NVD | 6 days ago |
| CVE-2026-120853 MEDIUM Missing Authorization vulnerability in Brainstorm Force CartFlows cartflows allows Exploiting Incorrectly Configured Access Control Security Levels.Th... | MEDIUM | ????? | ????? | NVD | 6 days ago |
| CVE-2026-120852 MEDIUM Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) vulnerability in Brainstorm Force CartFlows cartflows allows Code Inject... | MEDIUM | ????? | ????? | NVD | 6 days ago |
| CVE-2026-120847 MEDIUM Missing Authorization vulnerability in Wpmet Metform metform allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affect... | MEDIUM | ????? | ????? | NVD | 6 days ago |
| CVE-2026-119520 MEDIUM Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Brainstorm Force Spectra ultimate-addo... | MEDIUM | ????? | ????? | NVD | 6 days ago |
| CVE-2026-119507 MEDIUM Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) vulnerability in WPDeveloper NotificationX notificationx allows Code Inj... | MEDIUM | ????? | ????? | NVD | 6 days ago |