🔍 Filter Threats
| Title | Severity | PoC | Actively Exploited | Source | Date |
|---|---|---|---|---|---|
| CVE-2026-118529 LOW The Directorist: AI-Powered Business Directory, Listings & Classified Ads WordPress plugin before 8.11 does not verify that a user owns a listing ... | LOW | ????? | ????? | NVD | 6 days ago |
| CVE-2026-118528 MEDIUM The Directorist: AI-Powered Business Directory, Listings & Classified Ads WordPress plugin before 8.11 does not validate that the requesting user ... | MEDIUM | ????? | ????? | NVD | 6 days ago |
| CVE-2026-117588 MEDIUM The WP Google Review Slider WordPress plugin before 18.11 does not perform nonce validation when updating its active Google Places configuration, allo... | MEDIUM | ????? | ????? | NVD | 6 days ago |
| CVE-2026-117525 HIGH The FV Flowplayer Video Player WordPress plugin before 7.5.57.7212 does not escape shortcode attribute values embedded in comments before rendering th... | HIGH | ????? | ????? | NVD | 6 days ago |
| CVE-2025-15708 LOW The Live Composer WordPress plugin before 2.1.23 does not sanitise and escape some of its custom post type slug settings before using them in front-e... | LOW | ????? | ????? | NVD | 6 days ago |
| CVE-2026-9601 MEDIUM The Stackable – Page Builder Gutenberg Blocks plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'update_block_style... | MEDIUM | ????? | ????? | NVD | 6 days ago |
| CVE-2026-93902 MEDIUM The Soledad theme for WordPress is vulnerable to Stored Cross-Site Scripting via Social Profile Fields in all versions up to, and including, 8.7.7 due... | MEDIUM | ????? | ????? | NVD | 6 days ago |
| CVE-2026-93779 MEDIUM The Tutor LMS – eLearning and online course solution plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, a... | MEDIUM | ????? | ????? | NVD | 6 days ago |
| CVE-2026-75590 HIGH IBM API Connect 12.1.0.0 through 12.1.1.2 could allow a remote attacker to access internal network resources and obtain sensitive information due to s... | HIGH | ????? | ????? | NVD | 6 days ago |
| CVE-2026-19131 MEDIUM IBM API Connect 12.1.0.0 through 12.1.1.2 could allow low-privileged users to query arbitrary indices and read sensitive data due to missing authoriza... | MEDIUM | ????? | ????? | NVD | 6 days ago |
| CVE-2026-19129 MEDIUM IBM API Connect 10.0.8.0 through 10.0.8.12 and 12.1.0.0 through 12.1.1.2 could allow a network-positioned attacker to intercept backup data due to imp... | MEDIUM | ????? | ????? | NVD | 6 days ago |
| CVE-2026-19128 HIGH IBM API Connect 12.1.0.0 through 12.1.1.2 could allow an authenticated attacker to send unauthorized requests from the system due to server-side reque... | HIGH | ????? | ????? | NVD | 6 days ago |
| CVE-2026-19126 MEDIUM IBM API Connect 10.0.8.0 through 10.0.8.12 and 12.1.0.0 through 12.1.1.2 uses weaker than expected cryptographic algorithms that could allow an attack... | MEDIUM | ????? | ????? | NVD | 6 days ago |
| CVE-2026-19122 LOW IBM API Connect 12.1.0.0 through 12.1.1.2 could allow an authenticated privileged attacker to send unauthorized requests from the system due to server... | LOW | ????? | ????? | NVD | 6 days ago |
| CVE-2026-19124 MEDIUM IBM API Connect 10.0.8.0 through 10.0.8.12 could allow an attacker with access to stored data to decrypt sensitive credentials due to the use of a har... | MEDIUM | ????? | ????? | NVD | 6 days ago |
| CVE-2026-19121 HIGH IBM API Connect 12.1.0.0 through 12.1.1.2 could allow an authenticated attacker to gain unauthorized access due to improper authorization. Tenant cont... | HIGH | ????? | ????? | NVD | 6 days ago |
| CVE-2026-18838 CRITICAL IBM API Connect 12.1.0.0 through 12.1.1.2 could allow a remote attacker to obtain sensitive information and modify API configurations due to improper ... | CRITICAL | ????? | ????? | NVD | 6 days ago |
| CVE-2026-18836 CRITICAL IBM API Connect 10.0.8.0 through 10.0.8.12 and 12.1.0.0 through 12.1.1.2 could allow a remote attacker to obtain sensitive information due to server-s... | CRITICAL | ????? | ????? | NVD | 6 days ago |
| CVE-2026-18689 MEDIUM IBM API Connect 10.0.8.0 through 10.0.8.12 and 12.1.0.0 through 12.1.1.2 could allow an authenticated user to obtain limited information about other o... | MEDIUM | ????? | ????? | NVD | 6 days ago |
| CVE-2026-18535 CRITICAL IBM API Connect 10.0.8.0 through 10.0.8.12 and 12.1.0.0 through 12.1.1.2 are vulnerable to a Regular Expression Denial of Service (ReDoS) attack and t... | CRITICAL | ????? | ????? | NVD | 6 days ago |