Live Vulnerability Intelligence
Threat Database
Search CVEs, inspect descriptions, and open detail pages with AI-assisted technical context.
Threat Entry
Updated 2026-07-21
CVE-2026-14183 - Before 5 Plugin
The Classified Listing WordPress plugin before 5.3.9 does not verify that the order targeted by its payment-receipt handler belongs to the requesting user, allowing authenticated users with subscriber-level access to read the payment receipt details of any other user's order.
PLUGIN
Before 5
CVE-2026-14183
Risk Score
Threat Entry
Updated 2026-07-20
CVE-2026-12592 - Before 5 Plugin
The SlimStat Analytics WordPress plugin before 5.5.0 does not escape a visitor-controlled geolocation value before outputting it in its admin analytics reports, allowing unauthenticated visitors to store a cross-site scripting payload that executes in the browser of an administrator who views the reports. Exploitation requires the SlimStat Analytics WordPress plugin before 5.5.0 to be configured to use the Cloudflare geolocation provider.
PLUGIN
Before 5
CVE-2026-12592
Risk Score
Threat Entry
Updated 2026-07-17
CVE-2026-11961 - Before 5 Plugin
The User Registration & Membership WordPress plugin before 5.2.3 does not validate that the membership tier submitted during public registration is one of the tiers allowed by the registration form before assigning that tier's associated user role, allowing unauthenticated users to register into an arbitrary published membership tier and obtain its role — up to administrator when such a tier exists.
PLUGIN
Before 5
CVE-2026-11961
Risk Score
Threat Entry
Updated 2026-07-17
CVE-2026-11966 - Before 5 Plugin
The User Registration & Membership WordPress plugin before 5.2.3 does not perform a capability check for unauthenticated callers on one of its membership payment actions and acts on a caller-supplied user identifier, allowing unauthenticated attackers to delete recently-registered, payment-pending user accounts.
PLUGIN
Before 5
CVE-2026-11966
Risk Score
Threat Entry
Updated 2026-07-16
CVE-2026-12684 - Before 5 Plugin
The Customer Reviews for WooCommerce WordPress plugin before 5.113.0 does not perform authentication, capability, or nonce checks on one of its media upload AJAX actions when the review media attachment feature is enabled, allowing unauthenticated users to upload media files (bounded to an image and video allowlist) to the Media Library and create attachment posts, leading to media library pollution and disk space exhaustion.
PLUGIN
Before 5
CVE-2026-12684
Risk Score
Threat Entry
Updated 2026-07-16
CVE-2026-11866 - Before 5 Plugin
The Appointment Booking Plugin WordPress plugin before 5.6.3 does not validate a CSRF nonce on several state-changing actions handled by its central request dispatcher, allowing attackers to perform privileged actions, such as overwriting the booking-form configuration or disconnecting the connected payment gateway, via Cross-Site Request Forgery against a logged-in administrator.
PLUGIN
Before 5
CVE-2026-11866
Risk Score
Threat Entry
Updated 2026-07-13
CVE-2026-11964 - Before 5 Plugin
The User Registration & Membership WordPress plugin before 5.2.2 does not verify the authenticity of incoming payment-provider webhook notifications before acting on them, allowing unauthenticated attackers to forge a payment-approved event and activate a paid membership subscription without completing a real payment.
PLUGIN
Before 5
CVE-2026-11964
Risk Score
Threat Entry
Updated 2026-07-13
CVE-2026-11963 - Before 5 Plugin
The User Registration & Membership WordPress plugin before 5.2.2 does not perform an authorization check on a membership-upgrade action and derives the user to modify from a caller-supplied identifier instead of the current user, allowing any authenticated user such as a subscriber to change another user's WordPress role and membership tier.
PLUGIN
Before 5
CVE-2026-11963
Risk Score
Threat Entry
Updated 2026-07-06
CVE-2026-6382 - Before 5 Plugin
The FileOrganizer WordPress plugin before 1.1.9, Advanced File Manager WordPress plugin before 5.4.12, File Manager Pro WordPress plugin before 2.1.1, File Manager WordPress plugin before 8.0.4 do not properly escape a parameter before passing it to a shell command when processing image operations, allowing authenticated users to perform OS Command Injection. This requires the server to have the ImageMagick convert CLI available without either the PHP imagick or GD extensions.
PLUGIN
Before 5
CVE-2026-6382
Risk Score
Threat Entry
Updated 2026-07-02
CVE-2026-11965 - Before 5 Plugin
The User Registration & Membership WordPress plugin before 5.2.0 does not enforce payment completion before activating a paid membership subscription, allowing unauthenticated users (after self-registering an account through the open registration flow) to obtain an active subscription on any paid plan without paying and access the gated content.
PLUGIN
Before 5
CVE-2026-11965
Risk Score
Threat Entry
Updated 2026-07-02
CVE-2026-10077 - Before 5 Theme
The yootheme WordPress theme before 5.0.35 does not prevent its bundled front-end framework from treating certain HTML attributes, which are permitted by wp_kses_post(), as markup, allowing users with the Author role to perform Stored Cross-Site Scripting attacks that execute in the browser of any user who views the affected post.
THEME
Before 5
CVE-2026-10077
Risk Score
Threat Entry
Updated 2026-06-17
CVE-2026-9570 - Before 5 Plugin
The Taskbuilder WordPress plugin before 5.0.8 does not properly sanitise a URL parameter before echoing it into inline JavaScript on a frontend page containing one of its shortcodes, leading to a Reflected Cross-Site Scripting vulnerability that can be triggered against any logged-in user.
PLUGIN
Before 5
CVE-2026-9570
Risk Score
Threat Entry
Updated 2026-06-17
CVE-2026-9269 - Before 5 Plugin
The Secure Copy Content Protection and Content Locking WordPress plugin before 5.1.5 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for example in multisite setup).
PLUGIN
Before 5
CVE-2026-9269
Risk Score
Threat Entry
Updated 2026-06-17
CVE-2026-2696 - Before 5 Plugin
The Export All URLs WordPress plugin before 5.1 generates CSV filenames containing posts URLS (including private posts) in a predictable pattern using a random 6-digit number. These files are stored in the publicly accessible wp-content/uploads/ directory. As a result, any unauthenticated user can brute-force the filenames to gain access to sensitive data contained within the exported files.
PLUGIN
Before 5
CVE-2026-2696
Risk Score
Threat Entry
Updated 2026-06-17
CVE-2026-2626 - Before 5 Plugin
The divi-booster WordPress plugin before 5.0.2 does not have authorization and CSRF checks in one of its fixing function, allowing unauthenticated users to modify stored divi-booster WordPress plugin before 5.0.2 options. Furthermore, due to the use of unserialize() on the data, this could be further exploited when combined with a PHP gadget chain to achieve PHP Object Injection
PLUGIN
Before 5
CVE-2026-2626
Risk Score
Threat Entry
Updated 2026-06-17
CVE-2026-1867 - Before 5 Plugin
The Guest posting / Frontend Posting / Front Editor WordPress plugin before 5.0.6 allows passing a URL parameter to regenerate a .json file based on demo data that it initially creates. If an administrator modifies the demo form and enables admin notifications in the Guest posting / Frontend Posting / Front Editor WordPress plugin before 5.0.6's settings, it is possible for an unauthenticated attacker to export and download all of the form data/settings, including the administrator's email address.
PLUGIN
Before 5
CVE-2026-1867
Risk Score
Threat Entry
Updated 2026-01-08
CVE-2025-14124 - Before 5 Plugin
The Team WordPress plugin before 5.0.11 does not properly sanitize and escape a parameter before using it in a SQL statement via an AJAX action available to unauthenticated users, leading to a SQL injection.
PLUGIN
Before 5
CVE-2025-14124
Risk Score
Threat Entry
Updated 2025-11-25
CVE-2025-12569 - Before 5 Plugin
The Guest posting / Frontend Posting / Front Editor WordPress plugin before 5.0.0 does not validate a parameter before redirecting the user to its value, leading to an Open Redirect issue
PLUGIN
Before 5
CVE-2025-12569
Risk Score
Threat Entry
Updated 2026-01-27
CVE-2025-8113 - Before 5 Plugin
The Ebook Store WordPress plugin before 5.8015 does not escape the $_SERVER['REQUEST_URI'] parameter before outputting it back in an attribute, which could lead to Reflected Cross-Site Scripting in old web browsers.
PLUGIN
Before 5
CVE-2025-8113
Risk Score
Threat Entry
Updated 2025-08-13
CVE-2025-6715 - Before 5 Plugin
The LatePoint WordPress plugin before 5.1.94 is vulnerable to Local File Inclusion via the layout parameter. This makes it possible for attackers to include and execute PHP files on the server, allowing the execution of any PHP code in those files.
PLUGIN
Before 5
CVE-2025-6715
Risk Score