Calgary, Alberta, Canada
sales@hackhalt.com
Free Download Free Download Free Download
Explore Pricing Explore Pricing Explore Pricing

Blog

"Prevention is cheaper than a breach"

Live Vulnerability Intelligence

Threat Database

Search CVEs, inspect descriptions, and open detail pages with AI-assisted technical context.

Total15,479
Critical934
High3,137
Medium11,193
Reset
Showing 581-600 of 15479 records
Threat Entry Updated 2026-06-18

CVE-2026-11360 - Woo Order Export Lite Plugin

The Advanced Order Export For WooCommerce plugin for WordPress is vulnerable to generic SQL Injection via the 'sort_direction' parameter in all versions up to, and including, 4.0.10 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it possible for authenticated attackers, with shop manager-level access and above, to append additional SQL queries into already existing queries that can be used to extract sensitive information from the database. The endpoint requires a valid woe_nonce and Shop Manager-level capabilities (view_woocommerce_reports…

PLUGIN Woo Order Export Lite

CVE-2026-11360

MEDIUM CVSS 4.9 2026-06-18
Open Full Technical Breakdown
Threat Entry Updated 2026-06-18

CVE-2026-10736 - Elearning And Online Course Solution Plugin

The Tutor LMS – eLearning and online course solution plugin for WordPress is vulnerable to generic SQL Injection via the 'data' parameter in all versions up to, and including, 3.9.11 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it possible for authenticated attackers, with administrator-level access and above, to append additional SQL queries into already existing queries that can be used to extract sensitive information from the database.

PLUGIN Elearning And Online Course Solution

CVE-2026-10736

MEDIUM CVSS 4.9 2026-06-18
Open Full Technical Breakdown
Threat Entry Updated 2026-06-18

CVE-2026-11358 - Themeisle Companion Plugin

The Orbit Fox: Duplicate Page, Menu Icons, SVG Support, Cookie Notice, Custom Fonts & More plugin for WordPress is vulnerable to Stored Cross-Site Scripting via admin settings in all versions up to, and including, 3.0.6 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with administrator-level permissions and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. This only affects multi-site installations and installations where unfiltered_html has been disabled.

PLUGIN Themeisle Companion

CVE-2026-11358

MEDIUM CVSS 4.4 2026-06-18
Open Full Technical Breakdown
Threat Entry Updated 2026-06-18

CVE-2026-11357 - Kadence Blocks Plugin

The Kadence Blocks — Page Builder Toolkit for Gutenberg Editor plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 3.7.5 via the editor_assets_variables. This makes it possible for authenticated attackers, with contributor-level access and above, to extract the site's connected Kadence account license key, license owner email, api_key, api_email, and license domain from the browser console by inspecting window.kadence_blocks_params.proData. Exploitation requires only that an administrator has previously connected a valid Kadence license; the full credential bundle is then readable by any Contributor-level user…

PLUGIN Kadence Blocks

CVE-2026-11357

MEDIUM CVSS 4.3 2026-06-18
Open Full Technical Breakdown
Threat Entry Updated 2026-06-18

CVE-2026-10623 - Pressprimer Quiz Plugin

The PressPrimer Quiz – AI Quiz Maker, Exam Builder & LMS Assessment Plugin plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 2.3.0 via the 'rule_id' parameter due to missing validation on a user controlled key. This makes it possible for authenticated attackers, with custom-level access and above, to modify or delete quiz rules belonging to other teachers, resulting in unauthorized tampering of another user's quiz structure.

PLUGIN Pressprimer Quiz

CVE-2026-10623

MEDIUM CVSS 4.3 2026-06-18
Open Full Technical Breakdown
Threat Entry Updated 2026-06-18

CVE-2026-10029 - Eventkoi Lite Plugin

The Event Koi Lite – Events Calendar, Event Management, RSVP, and Tickets plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 1.3.13.1 via the get_events. This makes it possible for unauthenticated attackers to extract sensitive data including virtual meeting URLs, physical location data, latitude/longitude coordinates, Google Maps links, and RSVP configuration belonging to draft, pending, and private events that are otherwise inaccessible via public URLs.

PLUGIN Eventkoi Lite

CVE-2026-10029

MEDIUM CVSS 5.3 2026-06-18
Open Full Technical Breakdown
Threat Entry Updated 2026-06-18

CVE-2026-12407 - Export Pdf Tool For Wordpress Plugin

The E2Pdf – Export Pdf Tool for WordPress plugin for WordPress is vulnerable to Missing Authorization in versions up to, and including, 1.32.26. This is due to the screen_action() function lacking a dedicated capability check and nonce verification — when invoked via the ?action=screen routing path the controller's index_action() nonce gate is bypassed entirely — while reading an attacker-controlled option name and value from $_POST['wp_screen_options'] and passing them directly to update_option() with no allowlist, relying solely on the page-level e2pdf_templates capability which the plugin's own Permissions UI allows administrators to…

PLUGIN Export Pdf Tool For Wordpress

CVE-2026-12407

HIGH CVSS 8.8 2026-06-18
Open Full Technical Breakdown
Threat Entry Updated 2026-06-18

CVE-2026-10023 - Dokan Lite Plugin

The Dokan: AI Powered WooCommerce Multivendor Marketplace Solution – Build Your Own Amazon, eBay, Etsy plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 5.0.3 via the change_order_status, add_order_note, delete_order_note, add_shipping_tracking_info, grant_access_to_download, and revoke_access_to_download AJAX handlers due to missing ownership validation on a user-controlled order ID key. This makes it possible for authenticated attackers, with custom vendor-level access and above, to modify the status of arbitrary orders, add attacker-controlled notes to any order (including customer-facing notes that trigger WooCommerce notification emails to…

PLUGIN Dokan Lite

CVE-2026-10023

MEDIUM CVSS 4.3 2026-06-18
Open Full Technical Breakdown
Threat Entry Updated 2026-06-17

CVE-2026-9570 - Before 5 Plugin

The Taskbuilder WordPress plugin before 5.0.8 does not properly sanitise a URL parameter before echoing it into inline JavaScript on a frontend page containing one of its shortcodes, leading to a Reflected Cross-Site Scripting vulnerability that can be triggered against any logged-in user.

PLUGIN Before 5

CVE-2026-9570

HIGH CVSS 7.1 2026-06-17
Open Full Technical Breakdown
Threat Entry Updated 2026-06-17

CVE-2026-8607 - Mycred Plugin

The Points Management System For Gamification, Ranks, Badges, and Loyalty Rewards Program – myCred plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'wrap' Shortcode Attribute in all versions up to, and including, 3.1 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.

PLUGIN Mycred

CVE-2026-8607

MEDIUM CVSS 6.4 2026-06-17
Open Full Technical Breakdown
Threat Entry Updated 2026-06-17

CVE-2026-8494 - Permalink Manager Plugin

The Permalink Manager Lite plugin for WordPress is vulnerable to Stored Cross-Site Scripting via post titles in the admin URI Editor interface in all versions up to, and including, 2.5.3.3 due to insufficient output escaping. This makes it possible for authenticated attackers, with Contributor-level access and above, to inject arbitrary web scripts in the admin Permalink Manager page that will execute whenever an administrator accesses the Permalink Manager page.

PLUGIN Permalink Manager

CVE-2026-8494

MEDIUM CVSS 6.4 2026-06-17
Open Full Technical Breakdown
Threat Entry Updated 2026-06-17

CVE-2026-8383 - Before 4 Plugin

The LearnPress WordPress plugin before 4.3.7 does not gate the `edit` context on one of its REST endpoint behind the `edit_users` capability, allowing unauthenticated visitors to retrieve each returned user's roles, full capabilities map, extra capabilities, locale, and registration date via a crafted request

PLUGIN Before 4

CVE-2026-8383

MEDIUM CVSS 5.3 2026-06-17
Open Full Technical Breakdown
Threat Entry Updated 2026-06-17

CVE-2026-8089 - Email Optins For Woocommerce Plugin

The weMail: Email Marketing, Email Automation, Newsletters, Subscribers & Email Optins for WooCommerce WordPress plugin before 2.1.3 does not properly escape a user-supplied parameter before reflecting it into an HTML attribute on a non-nonce-protected AJAX response, allowing unauthenticated attackers to deliver Reflected Cross-Site Scripting against any authenticated user (including administrators) via a crafted URL.

PLUGIN Email Optins For Woocommerce

CVE-2026-8089

HIGH CVSS 7.1 2026-06-17
Open Full Technical Breakdown
Threat Entry Updated 2026-06-17

CVE-2026-7850 - Wp Magnific Popup Plugin

The WP Magnific Popup WordPress plugin through 1.0 does not properly escape user-controlled link URLs before injecting them into the DOM when displaying image load error messages, allowing authenticated attackers with Author-level access or above to perform Stored Cross-Site Scripting attacks against any visiting user.

PLUGIN Wp Magnific Popup

CVE-2026-7850

MEDIUM CVSS 5.9 2026-06-17
Open Full Technical Breakdown
Threat Entry Updated 2026-06-17

CVE-2026-40722 - Yoast SEO Plugin

Missing Authorization vulnerability in Yoast BV Yoast SEO Premium allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects Yoast SEO Premium: from n/a through 26.6.

PLUGIN Yoast SEO

CVE-2026-40722

MEDIUM CVSS 5.5 2026-06-17
Open Full Technical Breakdown
Threat Entry Updated 2026-06-17

CVE-2026-25470 - Custom Post Types Plugin

Improper Control of Generation of Code ('Code Injection') vulnerability in ACPT ACPT (Pro) - Custom Post Types Plugin for WordPress allows Remote Code Inclusion. This issue affects ACPT (Pro) - Custom Post Types Plugin for WordPress: from n/a through 2.0.47.

PLUGIN Custom Post Types

CVE-2026-25470

CRITICAL CVSS 10.0 2026-06-17
Open Full Technical Breakdown
Scroll to top