sales@hackhalt.com
Free Download

Live Vulnerability Intelligence

Threat Database

Search CVEs, inspect descriptions, and open detail pages with AI-assisted technical context.

Total20,019
Critical1,519
High5,010
Medium13,208
Reset
Showing 1-20 of 20019 records
Threat Entry Updated 2026-09-04

LearnDash LMS - Security Vulnerability (CVE-2026-12483)

The LearnDash LMS plugin for WordPress is vulnerable to Unrestricted File Type Upload in versions up to and including 5.1.5. This is due to insufficient input validation in the 'learndash_fileupload_process' function, which iterates through an entire array and validates only the first file. This makes it possible for authenticated attackers, with subscriber-level access and above who are enrolled in a course with assignment uploads enabled, to upload arbitrary disallowed files, including PHP files, to the server's wp-content/uploads/learndash/assignments/ directory. The uploaded files can only be used for Remote Code Execution if…

PLUGIN LearnDash LMS

CVE-2026-12483

HIGH CVSS 7.5 2026-09-04
Open Full Technical Breakdown
Threat Entry Updated 2026-09-04

E-cab Taxi Booking Manager for Woocommerce - Security Vulnerability (CVE-2026-84045)

The E-cab Taxi Booking Manager for Woocommerce WordPress plugin before 2.0.5 does not validate a client-supplied trip distance and base-price value on the server before pricing a booking, allowing unauthenticated attackers to manipulate the order total down to zero and place real taxi-booking orders at an arbitrary price.

PLUGIN E-cab Taxi Booking Manager for Woocommerce

CVE-2026-84045

MEDIUM CVSS 5.3 2026-09-04
Open Full Technical Breakdown
Threat Entry Updated 2026-09-04

WordPress component - Security Vulnerability (CVE-2026-82923)

The AI Website Builder WordPress plugin (GitHub build) 1.0.0 does not perform any authorisation or nonce check on its REST API routes, allowing unauthenticated attackers to install and activate plugins and themes, import content from a URL under their control, write a file of their choosing into the uploads directory, and delete site content and media. On a host that serves PHP from the uploads directory, that file write is remote code execution.

UNKNOWN WordPress component

CVE-2026-82923

CRITICAL CVSS 9.8 2026-09-04
Open Full Technical Breakdown
Threat Entry Updated 2026-09-04

Restaurant Menu and Food Ordering - Security Vulnerability (CVE-2026-84044)

The Restaurant Menu and Food Ordering WordPress plugin before 2.4.12 does not verify that a PayPal payment notification genuinely originates from PayPal, allowing unauthenticated attackers to forge a payment notification and mark their own order as paid and completed without making any payment.

PLUGIN Restaurant Menu and Food Ordering

CVE-2026-84044

MEDIUM CVSS 5.3 2026-09-04
Open Full Technical Breakdown
Threat Entry Updated 2026-09-04

WP Rentals - Security Vulnerability (CVE-2026-27432)

Authorization Bypass Through User-Controlled Key vulnerability in sc Internet Vivoo WP Rentals allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects WP Rentals: from n/a before 3.16.0.

PLUGIN WP Rentals

CVE-2026-27432

MEDIUM CVSS 5.4 2026-09-04
Open Full Technical Breakdown
Threat Entry Updated 2026-09-04

Xpro Addons - Security Vulnerability (CVE-2026-84146)

The Xpro Addons — 140+ Widgets for Elementor WordPress plugin before 1.7.8 does not perform any capability or post-status check before rendering a WooCommerce product summary from a supplied product identifier, allowing unauthenticated visitors to retrieve the title, price, SKU, description and stock details of products that are not publicly published (draft, pending, private or scheduled status).

PLUGIN Xpro Addons

CVE-2026-84146

MEDIUM CVSS 5.3 2026-09-04
Open Full Technical Breakdown
Threat Entry Updated 2026-09-04

Frontend Admin by DynamiApps - Security Vulnerability (CVE-2026-81347)

The Frontend Admin by DynamiApps WordPress plugin before 3.29.13 does not properly validate a user-controllable directory path before deleting files within it, allowing unauthenticated attackers to delete index.php and .htaccess files outside the intended directory, including the WordPress root, which can render the site inoperable. Successful exploitation requires a non-default form configuration.

PLUGIN Frontend Admin by DynamiApps

CVE-2026-81347

MEDIUM CVSS 5.9 2026-09-04
Open Full Technical Breakdown
Threat Entry Updated 2026-09-04

3.15.2 does not restrict its REST abilities to administrators, accepting a Ninja Forms - Security Vulnerability (CVE-2026-80438)

The Ninja Forms WordPress plugin before 3.15.2 does not restrict its REST abilities to administrators, accepting a Ninja Forms WordPress plugin before 3.15.2-specific capability as equivalent to full site administration, which allows any user granted that capability to read Ninja Forms WordPress plugin before 3.15.2 settings and stored form submissions, overwrite the Ninja Forms WordPress plugin before 3.15.2's configuration, and create or modify arbitrary posts and pages. The capability belongs to no default WordPress role and the Ninja Forms WordPress plugin before 3.15.2 never grants it, so an administrator must…

PLUGIN 3.15.2 does not restrict its REST abilities to administrators, accepting a Ninja Forms

CVE-2026-80438

MEDIUM CVSS 5.9 2026-09-04
Open Full Technical Breakdown
Threat Entry Updated 2026-09-04

WPvivid - Security Vulnerability (CVE-2026-82194)

The WPvivid — Backup, Migration & Staging WordPress plugin before 0.9.134 does not validate a user supplied path before using it in a file deletion routine, allowing administrators to delete arbitrary files on the server, including files outside the web root.

PLUGIN WPvivid

CVE-2026-82194

MEDIUM CVSS 5.5 2026-09-04
Open Full Technical Breakdown
Threat Entry Updated 2026-09-04

WPvivid - Security Vulnerability (CVE-2026-82193)

The WPvivid — Backup, Migration & Staging WordPress plugin before 0.9.134 does not validate a user supplied file name before using it to build a write path, allowing administrators to write files of permitted types to arbitrary locations on the server and to overwrite existing files.

PLUGIN WPvivid

CVE-2026-82193

MEDIUM CVSS 5.5 2026-09-04
Open Full Technical Breakdown
Threat Entry Updated 2026-09-04

WPFunnels - Security Vulnerability (CVE-2026-79632)

The WPFunnels WordPress plugin before 3.13.0 does not perform any authorisation or nonce check in one of its opt-in submission handlers, and takes the notification recipients and subject from the request, allowing unauthenticated users to make the site send emails to arbitrary recipients with an arbitrary subject.

PLUGIN WPFunnels

CVE-2026-79632

MEDIUM CVSS 5.3 2026-09-04
Open Full Technical Breakdown
Threat Entry Updated 2026-09-04

Directorist - Security Vulnerability (CVE-2026-84066)

The Directorist: AI-Powered Business Directory, Listings & Classified Ads WordPress plugin before 8.9 does not verify that the requesting user owns the post being modified before writing uploaded file references to its metadata, allowing users with the subscriber role and above to overwrite image metadata on posts belonging to other users.

PLUGIN Directorist

CVE-2026-84066

LOW CVSS 3.1 2026-09-04
Open Full Technical Breakdown
Threat Entry Updated 2026-09-04

Pods - Security Vulnerability (CVE-2026-74853)

The Pods WordPress plugin before 3.3.9.2 does not restrict which functions a display callback may resolve to, allowing users with the author role and above to read arbitrary files from the server, including files outside the web root. Only sites using the restricted display-callback mode are affected, which is the automatic default on installations whose first Pods version predates 3.1.

PLUGIN Pods

CVE-2026-74853

MEDIUM CVSS 6.8 2026-09-04
Open Full Technical Breakdown

WordPress security that blocks attacks before they land.

sales@hackhalt.com

Product

Resources

Company

© Hack Halt Inc. All rights reserved.