Live Vulnerability Intelligence
Threat Database
Search CVEs, inspect descriptions, and open detail pages with AI-assisted technical context.
Threat Entry
Updated 2026-09-16
Bridge - Security Vulnerability (CVE-2026-15609)
The Bridge - Creative Multipurpose WordPress Theme theme for WordPress is vulnerable to Stored Cross-Site Scripting via 'circle_line' Shortcode Attribute in all versions up to, and including, 30.8.9.1 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.
THEME
Bridge
CVE-2026-15609
Risk Score
Threat Entry
Updated 2026-01-14
Bridge - Remote Code Execution (CVE-2026-21283)
Bridge versions 15.1.2, 16.0 and earlier are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
PLUGIN
Bridge
CVE-2026-21283
Risk Score
Threat Entry
Updated 2026-06-17
Bridge - Cross-Site Scripting (XSS) (CVE-2024-49311)
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WisdmLabs Edwiser Bridge edwiser-bridge allows Stored XSS.This issue affects Edwiser Bridge: from n/a through
PLUGIN
Bridge
CVE-2024-49311
Risk Score
Threat Entry
Updated 2026-06-17
Bridge - Server-Side Request Forgery (SSRF) (CVE-2024-49312)
Server-Side Request Forgery (SSRF) vulnerability in WisdmLabs Edwiser Bridge edwiser-bridge.This issue affects Edwiser Bridge: from n/a through
PLUGIN
Bridge
CVE-2024-49312
Risk Score
Threat Entry
Updated 2026-06-17
Bridge - Cross-Site Request Forgery (CSRF) (CVE-2021-4399)
The Edwiser Bridge plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including,2.0.6. This is due to missing or incorrect nonce validation on the user_data_synchronization_initiater(), course_synchronization_initiater(), users_link_to_moodle_synchronization(), connection_test_initiater(), admin_menus(), and subscribe_handler() function. This makes it possible for unauthenticated attackers to perform unauthorized actions via a forged request granted they can trick a site administrator into performing an action such as clicking on a link.
PLUGIN
Bridge
CVE-2021-4399
Risk Score
Threat Entry
Updated 2026-06-17
Bridge - Cross-Site Scripting (XSS) (CVE-2017-13138)
DOM based Cross-site scripting (XSS) vulnerability in the Bridge theme before 11.2 for WordPress allows remote attackers to inject arbitrary JavaScript.
PLUGIN
Bridge
CVE-2017-13138
Risk Score