Live Vulnerability Intelligence
Threat Database
Search CVEs, inspect descriptions, and open detail pages with AI-assisted technical context.
Threat Entry
Updated 2026-11-06
WHIZZ - Security Vulnerability (CVE-2026-115230)
The WHIZZ WordPress plugin through 1.1.8 does not validate the password-reset key before updating a user's password, relying only on a nonce that is exposed to unauthenticated visitors, allowing attackers to set an arbitrary password for any user, including administrators, and fully take over their accounts.
PLUGIN
WHIZZ
CVE-2026-115230
Risk Score
Threat Entry
Updated 2026-06-17
Whizz - Cross-Site Request Forgery (CSRF) (CVE-2017-8099)
There is CSRF in the WHIZZ plugin before 1.1.1 for WordPress, allowing attackers to delete any WordPress users and change the plugin's status via a GET request.
PLUGIN
Whizz
CVE-2017-8099
Risk Score
Threat Entry
Updated 2026-06-17
Whizz - Cross-Site Scripting (XSS) (CVE-2016-1000154)
Reflected XSS in wordpress plugin whizz v1.0.7
PLUGIN
Whizz
CVE-2016-1000154
Risk Score