🔍 Filter Threats
| Title | Severity | PoC | Actively Exploited | Source | Date |
|---|---|---|---|---|---|
| CVE-2026-119511 MEDIUM Missing Authorization vulnerability in Saeed MC Woocommerce Wishlist smart-wishlist-for-more-convert allows Exploiting Incorrectly Configured Access C... | MEDIUM | ????? | ????? | NVD | 6 days ago |
| CVE-2026-120532 MEDIUM The wpForo Forum plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'post[body]' parameter in all versions up to, and... | MEDIUM | ????? | ????? | NVD | 6 days ago |
| CVE-2026-120548 MEDIUM The YML for Yandex Market plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 5.10.0 via the &#... | MEDIUM | ????? | ????? | NVD | 6 days ago |
| CVE-2026-120514 MEDIUM The Zephyr Project Manager plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'zpm_profile_picture' parameter in all ... | MEDIUM | ????? | ????? | NVD | 6 days ago |
| CVE-2026-119500 MEDIUM Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in bPlugins Flash & HTML5 Video html5... | MEDIUM | ????? | ????? | NVD | 6 days ago |
| CVE-2026-119494 MEDIUM Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) vulnerability in Gemini Labs Site Reviews site-reviews allows Code Injec... | MEDIUM | ????? | ????? | NVD | 6 days ago |
| CVE-2026-119486 MEDIUM Missing Authorization vulnerability in WP ManageNinja LLC FluentBoards fluent-boards allows Exploiting Incorrectly Configured Access Control Security ... | MEDIUM | ????? | ????? | NVD | 6 days ago |
| CVE-2026-119493 MEDIUM Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Metaphor Creations, LLC Ditty ditty-ne... | MEDIUM | ????? | ????? | NVD | 6 days ago |
| CVE-2026-119502 MEDIUM Missing Authorization vulnerability in BdThemes Ultimate Store Kit Elementor Addons ultimate-store-kit allows Exploiting Incorrectly Configured Access... | MEDIUM | ????? | ????? | NVD | 6 days ago |
| CVE-2026-119491 MEDIUM Missing Authorization vulnerability in David Lingren Media LIbrary Assistant media-library-assistant allows Exploiting Incorrectly Configured Access C... | MEDIUM | ????? | ????? | NVD | 6 days ago |
| CVE-2026-119473 MEDIUM Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) vulnerability in properfraction ProfilePress wp-user-avatar allows Code ... | MEDIUM | ????? | ????? | NVD | 6 days ago |
| CVE-2026-119465 MEDIUM Insertion of Sensitive Information Into Sent Data vulnerability in WPVibes Elementor Addon Elements addon-elements-for-elementor-page-builder allows R... | MEDIUM | ????? | ????? | NVD | 6 days ago |
| CVE-2026-119484 MEDIUM Cross-Site Request Forgery (CSRF) vulnerability in Supsystic Photo Gallery by Supsystic gallery-by-supsystic allows Cross Site Request Forgery.This is... | MEDIUM | ????? | ????? | NVD | 6 days ago |
| CVE-2026-119164 HIGH The wpForo Forum plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 3.2.2 via the `data[secondary_groupi... | HIGH | ????? | ????? | NVD | 6 days ago |
| CVE-2026-119155 HIGH The wpForo Forum plugin for WordPress is vulnerable to time-based SQL Injection via the 'href[locale]' parameter in all versions up to, and ... | HIGH | ????? | ????? | NVD | 6 days ago |
| CVE-2026-107616 HIGH The Amelia plugin for WordPress is vulnerable to unauthorized access of attendee data due to a missing authorization check on the GetEventAttendeesCom... | HIGH | ????? | ????? | NVD | 6 days ago |
| CVE-2026-118784 MEDIUM The WPSpeed plugin for WordPress is vulnerable to Stored Cross-Site Scripting in versions up to, and including, 2.6.10 This is due to a combination of... | MEDIUM | ????? | ????? | NVD | 6 days ago |
| CVE-2026-104992 MEDIUM The Booking for Appointments and Events Calendar – Amelia plugin for WordPress is vulnerable to authorization bypass in all versions up to, and incl... | MEDIUM | ????? | ????? | NVD | 6 days ago |
| CVE-2026-110004 MEDIUM The wpForo Forum plugin for WordPress is vulnerable to arbitrary file deletion due to insufficient file path validation in the theme_delete function i... | MEDIUM | ????? | ????? | NVD | 6 days ago |
| CVE-2026-103900 HIGH The WPJAM Basic plugin for WordPress is vulnerable to Privilege Escalation in versions up to, and including, 7.1 This is due to the WPJAM_User_Signup:... | HIGH | ????? | ????? | NVD | 6 days ago |