🔍 Filter Threats
| Title | Severity | PoC | Actively Exploited | Source | Date |
|---|---|---|---|---|---|
| CVE-2026-123961 CRITICAL A security vulnerability has been detected in TOTOLINK CA300-PoE 6.2c.884. This impacts the function setWiFiBasicConfig of the file /cgi-bin/cstecgi.c... | CRITICAL | ????? | ????? | NVD | 6 days ago |
| CVE-2026-123960 CRITICAL A weakness has been identified in TOTOLINK CA300-PoE 6.2c.884. This affects the function setWanConfig of the file /cgi-bin/cstecgi.cgi. Executing a ma... | CRITICAL | ????? | ????? | NVD | 6 days ago |
| CVE-2026-123959 CRITICAL A security flaw has been discovered in TOTOLINK CA300-PoE 6.2c.884. The impacted element is the function setLanguageCfg of the file /cgi-bin/cstecgi.c... | CRITICAL | ????? | ????? | NVD | 6 days ago |
| CVE-2026-66669 HIGH Cross-Site Request Forgery (CSRF) vulnerability in Suplugins Superb Addons: Blocks, Patterns & Theme Designer superb-blocks allows Cross Site Requ... | HIGH | ????? | ????? | NVD | 6 days ago |
| CVE-2026-39733 MEDIUM Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) vulnerability in properfraction ProfilePress wp-user-avatar allows Code ... | MEDIUM | ????? | ????? | NVD | 6 days ago |
| CVE-2026-124274 MEDIUM Missing Authorization vulnerability in myCred myCred mycred allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects... | MEDIUM | ????? | ????? | NVD | 6 days ago |
| CVE-2026-52713 MEDIUM Missing Authorization vulnerability in ThimPress LearnPress learnpress allows Exploiting Incorrectly Configured Access Control Security Levels.This is... | MEDIUM | ????? | ????? | NVD | 6 days ago |
| CVE-2026-121779 MEDIUM Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in YITH YITH WooCommerce Subscription yith-woocommerce-subscr... | MEDIUM | ????? | ????? | NVD | 6 days ago |
| CVE-2026-121778 MEDIUM Missing Authorization vulnerability in WP Lab WP-Lister Lite for Amazon wp-lister-for-amazon allows Exploiting Incorrectly Configured Access Control S... | MEDIUM | ????? | ????? | NVD | 6 days ago |
| CVE-2026-122675 MEDIUM Cross-Site Request Forgery (CSRF) vulnerability in Wpmet Wp Social wp-social allows Cross Site Request Forgery.This issue affects Wp Social: from n/a ... | MEDIUM | ????? | ????? | NVD | 6 days ago |
| CVE-2026-121781 MEDIUM Missing Authorization vulnerability in WP ManageNinja LLC Fluent Booking fluent-booking allows Exploiting Incorrectly Configured Access Control Securi... | MEDIUM | ????? | ????? | NVD | 6 days ago |
| CVE-2026-121767 MEDIUM Missing Authorization vulnerability in weDevs weDocs wedocs allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects... | MEDIUM | ????? | ????? | NVD | 6 days ago |
| CVE-2026-121761 MEDIUM Missing Authorization vulnerability in Infomaniak Network VOD Infomaniak vod-infomaniak allows Exploiting Incorrectly Configured Access Control Securi... | MEDIUM | ????? | ????? | NVD | 6 days ago |
| CVE-2026-120849 MEDIUM Missing Authorization vulnerability in WC Lovers WCFM Marketplace wc-multivendor-marketplace allows Exploiting Incorrectly Configured Access Control S... | MEDIUM | ????? | ????? | NVD | 6 days ago |
| CVE-2026-120848 MEDIUM Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WC Lovers WCFM Marketplace wc-multiven... | MEDIUM | ????? | ????? | NVD | 6 days ago |
| CVE-2026-121768 MEDIUM Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Markus Wiesenhofer Contact Form 7 R... | MEDIUM | ????? | ????? | NVD | 6 days ago |
| CVE-2026-119510 MEDIUM Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Saeed MC Woocommerce Wishlist smart-wi... | MEDIUM | ????? | ????? | NVD | 6 days ago |
| CVE-2026-119489 MEDIUM Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Bootstrapped Ventures WP Recipe Maker ... | MEDIUM | ????? | ????? | NVD | 6 days ago |
| CVE-2026-119467 MEDIUM Missing Authorization vulnerability in WPVibes AnyWhere Elementor anywhere-elementor allows Exploiting Incorrectly Configured Access Control Security ... | MEDIUM | ????? | ????? | NVD | 6 days ago |
| CVE-2026-104738 HIGH The Advanced Form Integration — Connect Forms to 300+ Apps plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and inc... | HIGH | ????? | ????? | NVD | 6 days ago |