🔍 Filter Threats
| Title | Severity | PoC | Actively Exploited | Source | Date |
|---|---|---|---|---|---|
| CVE-2026-101357 The SEOPress – AI SEO Plugin & On-site SEO plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'seopress_google_analy... | MEDIUM | ????? | ????? | NVD | 4 days ago |
| CVE-2026-101923 The Photo Reviews for WooCommerce plugin for WordPress is vulnerable to Arbitrary Content Deletion in versions up to, and including, 1.2.30. This is d... | HIGH | ????? | ????? | NVD | 4 days ago |
| CVE-2026-101162 The WP Ultimate Review WordPress plugin before 2.4.4 does not escape some of its review overview settings before outputting them in posts, which could... | MEDIUM | ????? | ????? | NVD | 4 days ago |
| CVE-2026-101161 The WP Ultimate Review WordPress plugin before 2.4.4 does not prevent unauthenticated users from storing crafted review content that makes the reviewe... | HIGH | ????? | ????? | NVD | 4 days ago |
| CVE-2026-101160 The WP Ultimate Review WordPress plugin before 2.4.4 does not validate that a submitted review rating is numeric before storing it and later using it ... | HIGH | ????? | ????? | NVD | 4 days ago |
| CVE-2026-101159 The WP Ultimate Review WordPress plugin before 2.4.4 does not properly sanitise and escape reviews submitted through its public review form, which is ... | HIGH | ????? | ????? | NVD | 4 days ago |
| CVE-2026-100149 The WPZOOM Connect: AI Chat, Click to Chat, Social Icons & Share Buttons plugin for WordPress is vulnerable to Sensitive Information Exposure in a... | MEDIUM | ????? | ????? | NVD | 4 days ago |
| CVE-2026-100152 The The All in One SEO – AI SEO Plugin to Boost SEO Rankings & Traffic (Schema, Local SEO, Sitemap & SEO Insights) plugin for WordPress is v... | MEDIUM | ????? | ????? | NVD | 4 days ago |
| CVE-2026-100148 The Rich Showcase for Google Reviews plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'reviews[].text' parameter in... | MEDIUM | ????? | ????? | NVD | 4 days ago |
| CVE-2025-12828 The Ultra Addons Lite for Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Type Out widget in all versions up to, a... | MEDIUM | ????? | ????? | NVD | 4 days ago |
| CVE-2026-92977 The Real Cookie Banner: GDPR & ePrivacy Cookie Consent plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Comment in all versio... | HIGH | ????? | ????? | NVD | 4 days ago |
| CVE-2026-92826 The EWWW Image Optimizer plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via REQUEST_URI Parameter Key in all versions up to, and... | MEDIUM | ????? | ????? | NVD | 4 days ago |
| CVE-2026-97644 The Groundhogg — CRM, Newsletters, and Marketing Automation plugin for WordPress is vulnerable to Privilege Escalation via Contact Identity Rebindin... | HIGH | ????? | ????? | NVD | 4 days ago |
| CVE-2026-92727 The EmbedPress – PDF Embedder, 3D PDF FlipBook, Google Reviews, YouTube Videos, Upload & Embed PDF documents plugin for WordPress is vulnerable ... | MEDIUM | ????? | ????? | NVD | 4 days ago |
| CVE-2026-92538 The LearnPress – WordPress LMS Plugin for Create and Sell Online Courses plugin for WordPress is vulnerable to Reflected DOM-Based Cross-Site Script... | MEDIUM | ????? | ????? | NVD | 4 days ago |
| CVE-2026-92551 The Paid Membership Plugin, Ecommerce, User Registration Form, Login Form, User Profile & Restrict Content – ProfilePress plugin for WordPress i... | MEDIUM | ????? | ????? | NVD | 4 days ago |
| CVE-2026-92536 The Paid Membership Plugin, Ecommerce, User Registration Form, Login Form, User Profile & Restrict Content – ProfilePress plugin for WordPress i... | HIGH | ????? | ????? | NVD | 4 days ago |
| CVE-2026-93428 The Ultimate Member – User Profile, Registration, Login, Member Directory, Content Restriction & Membership Plugin plugin for WordPress is vulne... | HIGH | ????? | ????? | NVD | 4 days ago |
| CVE-2026-94539 The SupportCandy – AI Customer Support Ticket System & Live Chatbot Agent plugin for WordPress is vulnerable to time-based SQL Injection via the... | MEDIUM | ????? | ????? | NVD | 4 days ago |
| CVE-2026-94378 The SupportCandy – AI Customer Support Ticket System & Live Chatbot Agent plugin for WordPress is vulnerable to Stored Cross-Site Scripting via ... | MEDIUM | ????? | ????? | NVD | 4 days ago |