Live Vulnerability Intelligence
Threat Database
Search CVEs, inspect descriptions, and open detail pages with AI-assisted technical context.
Threat Entry
Updated 2026-07-21
CVE-2026-65052 - Ninja Forms Plugin
Ninja Forms WordPress plugin version 3.14.8 and prior contains an improper input validation vulnerability that allows unauthenticated attackers to inject arbitrary numeric values into form calculations and payment totals by submitting values that do not match any configured option in ListSelect or ListRadio fields. Attackers can tamper with form submission payloads to the ajax submit endpoint, causing the get_calc_value() method to fail open and return attacker-controlled values, enabling manipulation of payment amounts to zero or arbitrary figures and bypassing admin-configured pricing logic.
PLUGIN
Ninja Forms
CVE-2026-65052
Risk Score
Threat Entry
Updated 2026-07-21
CVE-2026-65050 - Ninja Forms Plugin
Ninja Forms WordPress plugin version 3.14.8 and prior contains a missing authorization vulnerability in the render callback of the `ninja-forms/submissions-table` Gutenberg block that allows authenticated attackers with Author-level privileges to expose stored form submissions to unauthenticated visitors by embedding the block with an arbitrary formID on a published post. Attackers can retrieve the signed bearer token injected into every page visitor's browser via `wp_localize_script` and use it against the REST API submissions endpoint to access all saved form submission field values, including sensitive personally identifiable information such as names, email…
PLUGIN
Ninja Forms
CVE-2026-65050
Risk Score
Threat Entry
Updated 2026-07-21
CVE-2026-65051 - Ninja Forms Plugin
Ninja Forms WordPress plugin version 3.14.8 contains a client-side enforcement of server-side security vulnerability that allows unauthenticated attackers to bypass all form validation by merging attacker-controlled field metadata over server-loaded form definitions before validation runs. Attackers can craft a malicious AJAX submission overriding field types, removing required flags, and disabling CAPTCHA checks through the nopriv AJAX endpoint to trigger form actions such as email notifications and database storage with unverified, attacker-controlled content.
PLUGIN
Ninja Forms
CVE-2026-65051
Risk Score
Threat Entry
Updated 2026-07-21
CVE-2026-65048 - Ninja Forms Plugin
Ninja Forms plugin for WordPress versions 3.10.4 through 3.14.9 contains an unauthenticated stored cross-site scripting vulnerability in the Repeatable Fieldset feature where parseSubmissionIndex() accepts arbitrary strings as submission indexes without numeric validation, and admin_form_element() interpolates the index directly into HTML without escaping. An unauthenticated attacker can submit a public form with a crafted repeater child key containing malicious script payloads, which execute in an administrator's browser when viewing submissions in the WordPress admin panel, enabling session-cookie theft, creation of administrator accounts, installation of malicious plugins, and arbitrary modification of site…
PLUGIN
Ninja Forms
CVE-2026-65048
Risk Score
Threat Entry
Updated 2026-07-21
CVE-2026-65049 - Ninja Forms Plugin
Ninja Forms plugin version 3.14.8 and prior for WordPress Multisite contains an incorrect authorization vulnerability that allows a subsite Administrator to trigger network-wide deletion of all Ninja Forms data by exploiting a site-scoped capability check combined with unsafe multisite migration defaults. Attackers can send a crafted POST request to the admin-ajax.php endpoint with the nf_delete_all_data action and a per-site nonce to invoke migration routines that unconditionally iterate all blogs via switch_to_blog(), dropping all nf3_* tables and clearing options and transients across every subsite in the network without requiring super-admin or…
PLUGIN
Ninja Forms
CVE-2026-65049
Risk Score
Threat Entry
Updated 2026-07-21
CVE-2026-1771 - Mapsvg Lite Interactive Vector Maps Plugin
The MapSVG plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the SVGFile constructor in all versions up to, and including, 8.14.0 This is due to an incorrect conditional check that prevents file validation from taking place. This makes it possible for authenticated attackers, with Administrator-level access and above, to upload arbitrary files on the affected site's server which may make remote code execution possible.
PLUGIN
Mapsvg Lite Interactive Vector Maps
CVE-2026-1771
Risk Score
Threat Entry
Updated 2026-07-21
CVE-2026-15145 - Essential Addons For Elementor Lite Plugin
The Essential Addons for Elementor – Popular Elementor Templates & Widgets plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Fancy Text Widget in all versions up to, and including, 6.6.11 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.
PLUGIN
Essential Addons For Elementor Lite
CVE-2026-15145
Risk Score
Threat Entry
Updated 2026-07-21
CVE-2026-1372 - Tutor Lms Elementor Addons Plugin
The Tutor LMS Elementor Addons plugin for WordPress is vulnerable to Missing Authorization in all versions up to, and including, 4.0.0 This is due to missing capability checks on the `activate_tutor_free()` and `activate_elementor_free()` functions registered as `admin_action_*` handlers. This makes it possible for authenticated attackers, with Subscriber-level access and above, to activate the Tutor LMS and Elementor plugins without proper authorization.
PLUGIN
Tutor Lms Elementor Addons
CVE-2026-1372
Risk Score
Threat Entry
Updated 2026-07-21
CVE-2026-8082 - Bpost Shipping Platform Plugin
The bpost-shipping-platform WordPress plugin before 3.2.3 does not properly sanitize a parameter before using it in a SQL query during WooCommerce order submission, allowing unauthenticated attackers to perform time-based blind SQL injection on stores running this bpost-shipping-platform WordPress plugin before 3.2.3.
PLUGIN
Bpost Shipping Platform
CVE-2026-8082
Risk Score
Threat Entry
Updated 2026-07-21
CVE-2026-14185 - Allowing Authenticated Users With Subscriber Level Access To Modify The Wpbot Plugin
The WPBot WordPress plugin before 8.2.0 does not perform a capability or nonce check in one of its retrieval-augmented-generation settings handlers, allowing authenticated users with subscriber-level access to modify the WPBot WordPress plugin before 8.2.0's configuration.
PLUGIN
Allowing Authenticated Users With Subscriber Level Access To Modify The Wpbot
CVE-2026-14185
Risk Score
Threat Entry
Updated 2026-07-21
CVE-2026-14184 - Academy Lms Plugin
The Academy LMS WordPress plugin before 3.8.1 does not verify ownership of a user-supplied user identifier in several of its lesson AJAX handlers, allowing authenticated users with subscriber-level access to read and modify other users' lesson notes and mark other users' lesson content as completed.
PLUGIN
Academy Lms
CVE-2026-14184
Risk Score
Threat Entry
Updated 2026-07-21
CVE-2026-14183 - Classified Listing Plugin
The Classified Listing WordPress plugin before 5.3.9 does not verify that the order targeted by its payment-receipt handler belongs to the requesting user, allowing authenticated users with subscriber-level access to read the payment receipt details of any other user's order.
PLUGIN
Classified Listing
CVE-2026-14183
Risk Score
Threat Entry
Updated 2026-07-21
CVE-2026-13694 - Bit Form Plugin
The Bit Form WordPress plugin before 3.1.0 does not properly validate its workflow-trigger token once the associated transient has expired, allowing unauthenticated attackers to re-trigger a form's configured workflow actions such as notification emails and integrations.
PLUGIN
Bit Form
CVE-2026-13694
Risk Score
Threat Entry
Updated 2026-07-21
CVE-2026-13693 - Bit Form Plugin
The Bit Form WordPress plugin before 3.1.0 does not restrict a form file-field value to a safe path before reading the file and attaching it to a notification email, allowing unauthenticated attackers to read arbitrary server files such as the WordPress configuration file.
PLUGIN
Bit Form
CVE-2026-13693
Risk Score
Threat Entry
Updated 2026-07-21
CVE-2026-11767 - Free Builder For Elementor Plugin
The Free Builder for Elementor WordPress plugin before 1.6.7 does not sanitise submitted contact form field values before storing them and outputting them in the admin dashboard, allowing unauthenticated attackers to perform Stored Cross-Site Scripting attacks that execute when a logged-in administrator views the form submissions.
PLUGIN
Free Builder For Elementor
CVE-2026-11767
Risk Score
Threat Entry
Updated 2026-07-21
CVE-2026-13439 - Easy Form Builder Plugin
The Easy Form Builder by WhiteStudio plugin for WordPress is vulnerable to Unauthenticated Privilege Escalation to Administrator in versions up to, and including, 4.0.11 This is due to the password recovery flow using the publicly-visible session identifier ('sid') as the password reset token stored in wp_emsfb_temp_links, combined with a publicly-accessible nonce refresh endpoint (Emsfb/v1/nonce/refresh) that issues valid WordPress REST nonces to unauthenticated visitors. This makes it possible for unauthenticated attackers to reset the password of any WordPress user — including administrators — by scraping the public sid from a published…
PLUGIN
Easy Form Builder
CVE-2026-13439
Risk Score
Threat Entry
Updated 2026-07-21
CVE-2026-15782 - Wpforms Lite Plugin
The WPForms – AI Form Builder for WordPress – Contact Forms, Payment Forms, Survey Form, Quiz & More plugin for WordPress is vulnerable to Stored Cross-Site Scripting via OptinMonster Integration data-sitekey Attribute in Post Content in all versions up to, and including, 2.0.0.1 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. Exploitation requires the OptinMonster plugin to be installed and configured…
PLUGIN
Wpforms Lite
CVE-2026-15782
Risk Score
Threat Entry
Updated 2026-07-21
CVE-2026-15156 - Essential Addons For Elementor Lite Plugin
The Essential Addons for Elementor – Popular Elementor Templates & Widgets plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Reading Progress Global Color Settings in all versions up to, and including, 6.6.11 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.
PLUGIN
Essential Addons For Elementor Lite
CVE-2026-15156
Risk Score
Threat Entry
Updated 2026-07-20
CVE-2026-12900 - Ultimate Addons For Gutenberg Plugin
The Spectra Gutenberg Blocks – Website Builder for the Block Editor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the `uagb/image` block in all versions up to, and including, 2.19.28 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.
PLUGIN
Ultimate Addons For Gutenberg
CVE-2026-12900
Risk Score
Threat Entry
Updated 2026-07-20
CVE-2026-9833 - Tag Groups Is The Advanced Way To Display Your Taxonomy Terms Plugin
The Tag Groups is the Advanced Way to Display Your Taxonomy Terms WordPress plugin before 2.2.0 does not properly escape one of its AJAX parameters before reflecting it in the response body served with an HTML content type, allowing unauthenticated attackers to execute arbitrary JavaScript in the browser of a logged-in user with `edit_pages` capability (Editor or higher) who is tricked into following a crafted link.
PLUGIN
Tag Groups Is The Advanced Way To Display Your Taxonomy Terms
CVE-2026-9833
Risk Score