🔍 Filter Threats
| Title | Severity | PoC | Actively Exploited | Source | Date |
|---|---|---|---|---|---|
| CVE-2026-88782 The Kubio AI Page Builder WordPress plugin before 2.9.3 does not validate the URI scheme of a user-supplied value before outputting it as a link targe... | MEDIUM | ????? | ????? | NVD | 3 days ago |
| CVE-2026-86834 The MetForm WordPress plugin before 4.3.1 does not properly restrict access to a debug file it writes to the web root on every form submission when i... | LOW | ????? | ????? | NVD | 3 days ago |
| CVE-2026-87091 The Welcart e-Commerce plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Settlement Notification Parameters in all versions up to,... | HIGH | ????? | ????? | NVD | 3 days ago |
| CVE-2026-86832 The MetForm WordPress plugin before 4.3.1 does not properly restrict access to form submission data, allowing unauthenticated attackers to view submi... | MEDIUM | ????? | ????? | NVD | 3 days ago |
| CVE-2026-85568 The Unlimited Elements for Elementor WordPress plugin before 2.0.21 does not correctly handle a search value before rewriting an already prepared SQL ... | MEDIUM | ????? | ????? | NVD | 3 days ago |
| CVE-2026-85015 The Unlimited Elements for Elementor WordPress plugin before 2.0.21 does not sanitise file paths inside uploaded archives before extracting them, allo... | MEDIUM | ????? | ????? | NVD | 3 days ago |
| CVE-2026-80518 The WP Ultimate CSV Importer WordPress plugin before 9.2 does not use a site-specific secret when deriving the storage location of the import logs it... | LOW | ????? | ????? | NVD | 3 days ago |
| CVE-2026-80517 The WP Ultimate CSV Importer WordPress plugin before 9.2 does not properly validate the file types contained in an uploaded archive nor sanitise thei... | LOW | ????? | ????? | NVD | 3 days ago |
| CVE-2026-11399 The Helpdesk Support Ticket System for WooCommerce plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and i... | MEDIUM | ????? | ????? | NVD | 3 days ago |
| CVE-2026-103888 The WPC Smart Quick View for WooCommerce plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'woosq-redirect' param... | MEDIUM | ????? | ????? | NVD | 3 days ago |
| CVE-2026-103909 The Calculated Fields Form – AI Form Builder for WordPress – Contact, Payment, Quote, Quiz & More plugin for WordPress is vulnerable to Reflec... | MEDIUM | ????? | ????? | NVD | 3 days ago |
| CVE-2026-103913 The GeoDirectory plugin for WordPress is vulnerable to SQL Injection via the stored latitude/longitude coordinates of a listing in versions up to, and... | HIGH | ????? | ????? | NVD | 3 days ago |
| CVE-2026-103514 The WP 2FA WordPress plugin before 4.1.0 does not invalidate a time-based one-time passcode once it has been used, allowing an attacker who knows an ... | HIGH | ????? | ????? | NVD | 3 days ago |
| CVE-2026-103293 The MPG WordPress plugin before 4.2.3 does not validate that the dataset source supplied when importing a project is a remote URL before treating it ... | MEDIUM | ????? | ????? | NVD | 3 days ago |
| CVE-2026-101928 The Magic Tooltips For Contact Form 7 plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'author' parameter in all ve... | HIGH | ????? | ????? | NVD | 3 days ago |
| CVE-2026-101357 The SEOPress – AI SEO Plugin & On-site SEO plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'seopress_google_analy... | MEDIUM | ????? | ????? | NVD | 3 days ago |
| CVE-2026-101923 The Photo Reviews for WooCommerce plugin for WordPress is vulnerable to Arbitrary Content Deletion in versions up to, and including, 1.2.30. This is d... | HIGH | ????? | ????? | NVD | 3 days ago |
| CVE-2026-101162 The WP Ultimate Review WordPress plugin before 2.4.4 does not escape some of its review overview settings before outputting them in posts, which could... | MEDIUM | ????? | ????? | NVD | 3 days ago |
| CVE-2026-101161 The WP Ultimate Review WordPress plugin before 2.4.4 does not prevent unauthenticated users from storing crafted review content that makes the reviewe... | HIGH | ????? | ????? | NVD | 3 days ago |
| CVE-2026-101160 The WP Ultimate Review WordPress plugin before 2.4.4 does not validate that a submitted review rating is numeric before storing it and later using it ... | HIGH | ????? | ????? | NVD | 3 days ago |