Live Vulnerability Intelligence
Threat Database
Search CVEs, inspect descriptions, and open detail pages with AI-assisted technical context.
Threat Entry
Updated 2026-07-13
CVE-2026-57726 - Kirki Plugin
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Themeum Kirki kirki allows Blind SQL Injection.This issue affects Kirki: from n/a through
PLUGIN
Kirki
CVE-2026-57726
Risk Score
Threat Entry
Updated 2026-07-13
CVE-2026-57719 - Aimogen Pro Plugin
Unrestricted Upload of File with Dangerous Type vulnerability in CodeRevolution Aimogen Pro aimogen-pro allows Using Malicious Files.This issue affects Aimogen Pro: from n/a through
PLUGIN
Aimogen Pro
CVE-2026-57719
Risk Score
Threat Entry
Updated 2026-07-13
CVE-2026-57710 - WoowBot Pro Max Plugin
Unrestricted Upload of File with Dangerous Type vulnerability in quantumcloud WoowBot Pro Max woowbot-pro-max allows Using Malicious Files.This issue affects WoowBot Pro Max: from n/a through
PLUGIN
WoowBot Pro Max
CVE-2026-57710
Risk Score
Threat Entry
Updated 2026-07-13
CVE-2026-57714 - LatePoint Plugin
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in LatePoint LatePoint latepoint allows Blind SQL Injection.This issue affects LatePoint: from n/a through
PLUGIN
LatePoint
CVE-2026-57714
Risk Score
Threat Entry
Updated 2026-07-13
CVE-2026-57707 - Simple Business Directory Pro Plugin
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in quantumcloud Simple Business Directory Pro simple-business-directory-pro allows SQL Injection.This issue affects Simple Business Directory Pro: from n/a through
PLUGIN
Simple Business Directory Pro
CVE-2026-57707
Risk Score
Threat Entry
Updated 2026-07-13
CVE-2026-57702 - Amelia Plugin
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Melograno Venture Studio Amelia ameliabooking allows Blind SQL Injection.This issue affects Amelia: from n/a through
PLUGIN
Amelia
CVE-2026-57702
Risk Score
Threat Entry
Updated 2026-07-13
CVE-2026-57401 - SureDash Plugin
Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Brainstorm Force SureDash suredash allows Path Traversal.This issue affects SureDash: from n/a through
PLUGIN
SureDash
CVE-2026-57401
Risk Score
Threat Entry
Updated 2026-07-13
CVE-2026-11964 - Before 5 Plugin
The User Registration & Membership WordPress plugin before 5.2.2 does not verify the authenticity of incoming payment-provider webhook notifications before acting on them, allowing unauthenticated attackers to forge a payment-approved event and activate a paid membership subscription without completing a real payment.
PLUGIN
Before 5
CVE-2026-11964
Risk Score
Threat Entry
Updated 2026-07-21
CVE-2026-57807 - OAuth Single Sign On - SSO (OAuth Client Plugin
Authentication Bypass Using an Alternate Path or Channel vulnerability in miniOrange Security Software Pvt Ltd. OAuth Single Sign On - SSO (OAuth Client) allows Password Recovery Exploitation. This issue affects OAuth Single Sign On - SSO (OAuth Client): from n/a through 38.5.8.
PLUGIN
OAuth Single Sign On - SSO (OAuth Client
CVE-2026-57807
Risk Score
Threat Entry
Updated 2026-07-13
CVE-2026-12761 - Miniorange Login Openid Plugin
The miniOrange Social Login and Register (Discord, Google, Twitter, LinkedIn) plugin for WordPress is vulnerable to authentication bypass leading to account takeover in versions up to and including 7.7.0. This is due to the Profile Completion flow accepting an arbitrary email address via the 'email_field' POST parameter without verifying that the email belongs to the identity returned by the OAuth provider, combined with send_otp_token() returning the SHA-512(customer_key || otp) transaction hash to the client where the OTP space is only 99,000 values (wp_rand(1000, 99999)) and the customer_key is a static…
PLUGIN
Miniorange Login Openid
CVE-2026-12761
Risk Score
Threat Entry
Updated 2026-07-10
CVE-2026-15300 - Geo My Wp Plugin
The GEO my WP plugin for WordPress was vulnerable to SQL Injection via the 'distance', 'lat', and 'lng' parameters in versions up to, and including, 4.5.4. The values were read from $_SERVER['QUERY_STRING'] via parse_str() (bypassing wp_magic_quotes, which does not cover $_SERVER), then passed through bare esc_sql() before being interpolated into unquoted numeric positions in the proximity-search query (HAVING/SELECT clause distance math, BETWEEN bounding-box pre-filter) built by gmw_locations_query() in plugins/posts-locator/includes/class-gmw-wp-query.php. Because esc_sql() only escapes string delimiters and these positions are numeric, payloads such as `1 OR SLEEP(3)` survived sanitization. Fixed in…
PLUGIN
Geo My Wp
CVE-2026-15300
Risk Score
Threat Entry
Updated 2026-07-14
CVE-2026-15282 - Instant Appointment Plugin
The Instant Appointment plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the 'insapp_upload_image_as_attachment' function in all versions up to, and including, 1.2. This makes it possible for unauthenticated attackers to upload arbitrary files on the affected site's server which may make remote code execution possible.
PLUGIN
Instant Appointment
CVE-2026-15282
Risk Score
Threat Entry
Updated 2026-07-10
CVE-2026-14894 - Super Forms – Drag & Drop Form Builder Plugin
The Super Forms – Drag & Drop Form Builder plugin for WordPress is vulnerable to Arbitrary File Upload in all versions up to, and including, 6.3.313 via the submit_form function. This is due to missing file type validation and the absence of any capability check on the submit_form nopriv AJAX handler, whose only barrier is a session nonce freely obtainable by unauthenticated visitors via a separate nopriv endpoint. This makes it possible for unauthenticated attackers to upload files that may be executable, which makes remote code execution possible. The nonce…
PLUGIN
Super Forms – Drag & Drop Form Builder
CVE-2026-14894
Risk Score
Threat Entry
Updated 2026-07-09
CVE-2026-15158 - Blocksy Companion Plugin
The Blocksy Companion plugin for WordPress is vulnerable to Arbitrary File Upload in all versions up to, and including, 2.1.46 via the save_attachments function. This is due to the Custom Fonts extension registering a wp_check_filetype_and_ext filter that approves any filename containing .woff2 or .ttf as a substring via strpos() rather than validating that those strings appear as the final extension via PATHINFO_EXTENSION — allowing double-extension filenames such as shell.woff2.php to pass MIME validation and be handled as permitted font files. This makes it possible for unauthenticated attackers to upload files…
PLUGIN
Blocksy Companion
CVE-2026-15158
Risk Score
Threat Entry
Updated 2026-07-09
CVE-2026-14245 - Miniorange Otp Verification Plugin
The miniOrange OTP Login, Verification and SMS Notifications plugin for WordPress is vulnerable to Authentication Bypass leading to Administrator Account Takeover in all versions up to, and including, 5.5.1. This is due to the `um_reset_password_process_hook()` function performing no server-side verification that the OTP validation step was completed, and relying solely on a public `form_nonce` nonce that the plugin itself emits to unauthenticated visitors via the `moumprvar` JavaScript object on the Ultimate Member password reset page, while still accepting the attacker-controlled `username_b` parameter to target any WordPress user without role restriction…
PLUGIN
Miniorange Otp Verification
CVE-2026-14245
Risk Score
Threat Entry
Updated 2026-07-08
CVE-2026-58480 - Blocksy Companion Plugin
Blocksy Companion Pro plugin for WordPress before 2.1.47 contains an unauthenticated arbitrary file upload vulnerability that allows attackers to upload executable files by bypassing extension validation in the save_attachments function exposed through the Advanced Reviews feature. Attackers can exploit the Custom Fonts extension's flawed strpos() substring check by uploading double-extension filenames such as shell.woff2.php, causing the validation to pass on the substring match while the web server executes the file as PHP, achieving remote code execution.
PLUGIN
Blocksy Companion
CVE-2026-58480
Risk Score
Threat Entry
Updated 2026-07-08
CVE-2026-12153 - Wp Learn Manager Plugin
The WP Learn Manager plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 1.1.8. This is due to the plugin not properly verifying that a user is authorized to perform an action. This makes it possible for unauthenticated attackers to install and activate arbitrary plugins from the WordPress.org repository on the vulnerable site.
PLUGIN
Wp Learn Manager
CVE-2026-12153
Risk Score
Threat Entry
Updated 2026-07-08
CVE-2026-9701 - Eventer Plugin
The Eventer plugin for WordPress is vulnerable to an insecure password reset mechanism in all versions up to, and including, 4.4.2. The plugin stores a plaintext copy of the password reset key in the `eventer_verification_code` user meta field when a user requests a password reset. The plaintext key stored in `wp_usermeta` can be used with the plugin's custom reset action to set a new password for any user. Combined with another vulnerability such as SQL Injection (CVE-2026-9700), this makes it possible for unauthenticated attackers to extract the plaintext reset key…
PLUGIN
Eventer
CVE-2026-9701
Risk Score
Threat Entry
Updated 2026-07-08
CVE-2026-14487 - Simple Coherent Form Plugin
The Simple Coherent Form plugin for WordPress is vulnerable to arbitrary file deletion due to insufficient file path validation in the removeUploadDir function in all versions up to, and including, 2.4.13. This makes it possible for unauthenticated attackers to delete arbitrary files on the server, which can easily lead to remote code execution when the right file is deleted (such as wp-config.php). The scf_get_id_upload endpoint freely issues a valid scf_upload_file_removal nonce to any unauthenticated visitor, and the removal endpoint's secondary hash check is forgeable offline because it relies on a…
PLUGIN
Simple Coherent Form
CVE-2026-14487
Risk Score
Threat Entry
Updated 2026-07-08
CVE-2026-14345 - WPFunnels – Funnel Builder for WooCommerce with Checkout & One Click Upsell Plugin
The WPFunnels – Funnel Builder for WooCommerce with Checkout & One Click Upsell plugin for WordPress is vulnerable to Remote Code Execution in all versions up to, and including, 3.12.7 via the 'postData' parameter parameter. This is due to unsanitized write of attacker-controlled postData values into a PHP-includeable .log file combined with the use of include_once to render that file in wpfnl_show_log. This makes it possible for unauthenticated attackers to execute code on the server. Exploitation requires that the Log Settings "Enable Logs" toggle is on and that an administrator…
PLUGIN
WPFunnels – Funnel Builder for WooCommerce with Checkout & One Click Upsell
CVE-2026-14345
Risk Score