🔍 Filter Threats
| Title | Severity | PoC | Actively Exploited | Source | Date |
|---|---|---|---|---|---|
| CVE-2026-123958 CRITICAL A vulnerability was identified in TOTOLINK CA300-PoE 6.2c.884. The affected element is the function setLanConfig of the file /cgi-bin/cstecgi.cgi. Suc... | CRITICAL | ????? | ????? | NVD | 6 days ago |
| CVE-2026-123957 CRITICAL A vulnerability was determined in TOTOLINK CA300-PoE 6.2c.884. Impacted is the function setIpQosRules of the file /cgi-bin/cstecgi.cgi. This manipulat... | CRITICAL | ????? | ????? | NVD | 6 days ago |
| CVE-2026-87112 HIGH The QA Assistants – Driven by data plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 5.3.0 via the &#... | HIGH | ????? | ????? | NVD | 6 days ago |
| CVE-2026-93370 MEDIUM The Paystack WooCommerce Payment Gateway plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 5.... | MEDIUM | ????? | ????? | NVD | 6 days ago |
| CVE-2026-83495 UNKNOWN A flaw was found in the Trainer v2 TrainJob API. A user with permissions to create TrainJobs can exploit this by injecting `valueFrom.secretKeyRef` in... | UNKNOWN | ????? | ????? | NVD | 6 days ago |
| CVE-2026-120537 HIGH The TranslatePress – Translate Multilingual sites with AI Translation plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ... | HIGH | ????? | ????? | NVD | 6 days ago |
| CVE-2026-121792 MEDIUM The GamiPress – Gamification plugin to reward points, badges & ranks in WordPress, now with AI plugin for WordPress is vulnerable to generic SQL... | MEDIUM | ????? | ????? | NVD | 6 days ago |
| CVE-2026-122265 MEDIUM The Vanquish Upload Files for WooCommerce plugin for WordPress is vulnerable to Directory Traversal in all versions up to, and including, 2.7.13 via t... | MEDIUM | ????? | ????? | NVD | 6 days ago |
| CVE-2026-122037 HIGH The AgenWebsite Shipping – Plugin Ongkos Kirim & Generate Resi Otomatis Semua Kurir Indonesia plugin for WordPress is vulnerable to Stored Cross... | HIGH | ????? | ????? | NVD | 6 days ago |
| CVE-2026-121536 MEDIUM The WP Data Access – App Builder for Tables, Forms, Dashboards, Charts & Maps plugin for WordPress is vulnerable to generic SQL Injection via th... | MEDIUM | ????? | ????? | NVD | 6 days ago |
| CVE-2026-118800 MEDIUM The aBlocks – Gutenberg Blocks, User Dashboard Builder, Popup Builder, Form Builder & Animation Builder plugin for WordPress is vulnerable to St... | MEDIUM | ????? | ????? | NVD | 6 days ago |
| CVE-2026-118801 MEDIUM The aBlocks – Gutenberg Blocks, User Dashboard Builder, Popup Builder, Form Builder & Animation Builder plugin for WordPress is vulnerable to Se... | MEDIUM | ????? | ????? | NVD | 6 days ago |
| CVE-2026-120530 MEDIUM The WebToffee WP Backup and Migration plugin for WordPress is vulnerable to generic SQL Injection via the 'description' parameter in all ver... | MEDIUM | ????? | ????? | NVD | 6 days ago |
| CVE-2026-120479 MEDIUM The WP Data Access – App Builder for Tables, Forms, Dashboards, Charts & Maps plugin for WordPress is vulnerable to Stored Cross-Site Scripting ... | MEDIUM | ????? | ????? | NVD | 6 days ago |
| CVE-2026-118204 MEDIUM The WP Data Access – App Builder for Tables, Forms, Dashboards, Charts & Maps plugin for WordPress is vulnerable to Stored Cross-Site Scripting ... | MEDIUM | ????? | ????? | NVD | 6 days ago |
| CVE-2026-120515 MEDIUM The SEOPress – AI SEO Plugin & On-site SEO plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'seopress_google_analy... | MEDIUM | ????? | ????? | NVD | 6 days ago |
| CVE-2026-115811 HIGH The Strong Testimonials plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'star_rating' parameter in all versions up... | HIGH | ????? | ????? | NVD | 6 days ago |
| CVE-2026-116621 MEDIUM The Ultimate Member – User Profile, Registration, Login, Member Directory, Content Restriction & Membership Plugin plugin for WordPress is vulne... | MEDIUM | ????? | ????? | NVD | 6 days ago |
| CVE-2026-118048 MEDIUM The WP Data Access plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Simple Form autocomplete lookup label in versions up to, ... | MEDIUM | ????? | ????? | NVD | 6 days ago |
| CVE-2026-116558 HIGH The Unlimited Elements for Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the '<title>/<description>... | HIGH | ????? | ????? | NVD | 6 days ago |