Live Vulnerability Intelligence
Threat Database
Search CVEs, inspect descriptions, and open detail pages with AI-assisted technical context.
Threat Entry
Updated 2026-10-08
Wpcomplete - Security Vulnerability (CVE-2026-66479)
Cross-Site Request Forgery (CSRF) vulnerability in Liquid Web / StellarWP WPComplete wpcomplete allows Stored XSS.This issue affects WPComplete: from n/a through 2.9.5.6.
PLUGIN
Wpcomplete
CVE-2026-66479
Risk Score
Threat Entry
Updated 2026-09-21
Wpcomplete - Security Vulnerability (CVE-2026-77820)
The WPComplete plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'empty' Shortcode Attribute in all versions up to, and including, 2.9.9.0 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. This requires the premium version of the software in order to exploit. Please note this only affects the pro version.
PLUGIN
Wpcomplete
CVE-2026-77820
Risk Score
Threat Entry
Updated 2026-10-12
WPComplete - Cross-Site Scripting (XSS) (CVE-2026-66599)
Unauthenticated Cross Site Scripting (XSS) in WPComplete
PLUGIN
WPComplete
CVE-2026-66599
Risk Score
Threat Entry
Updated 2026-06-26
WPComplete - Broken Access Control (CVE-2026-57661)
Subscriber Broken Access Control in WPComplete
PLUGIN
WPComplete
CVE-2026-57661
Risk Score
Threat Entry
Updated 2026-06-17
Wpcomplete - Cross-Site Scripting (XSS) (CVE-2026-42750)
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Nexcess WPComplete wpcomplete allows Stored XSS.This issue affects WPComplete: from n/a through
PLUGIN
Wpcomplete
CVE-2026-42750
Risk Score
Threat Entry
Updated 2026-06-17
Wpcomplete - Broken Access Control (CVE-2025-49906)
Missing Authorization vulnerability in StellarWP WPComplete wpcomplete allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects WPComplete: from n/a through
PLUGIN
Wpcomplete
CVE-2025-49906
Risk Score
Threat Entry
Updated 2026-06-17
Wpcomplete - Cross-Site Scripting (XSS) (CVE-2025-58974)
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in StellarWP WPComplete wpcomplete allows Stored XSS.This issue affects WPComplete: from n/a through
PLUGIN
Wpcomplete
CVE-2025-58974
Risk Score
Threat Entry
Updated 2026-06-17
Wpcomplete - Cross-Site Scripting (XSS) (CVE-2025-50046)
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in StellarWP WPComplete wpcomplete allows Stored XSS.This issue affects WPComplete: from n/a through
PLUGIN
Wpcomplete
CVE-2025-50046
Risk Score
Threat Entry
Updated 2026-06-17
Wpcomplete - Cross-Site Scripting (XSS) (CVE-2022-45825)
Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in iThemes WPComplete plugin
PLUGIN
Wpcomplete
CVE-2022-45825
Risk Score