Live Vulnerability Intelligence
Threat Database
Search CVEs, inspect descriptions, and open detail pages with AI-assisted technical context.
Threat Entry
Updated 2026-02-09
CVE-2025-15027 - Jay Login Register Plugin
The JAY Login & Register plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 2.6.03. This is due to the plugin allowing a user to update arbitrary user meta through the 'jay_login_register_ajax_create_final_user' function. This makes it possible for unauthenticated attackers to elevate their privileges to that of an administrator.
PLUGIN
Jay Login Register
CVE-2025-15027
Risk Score
Threat Entry
Updated 2026-06-17
CVE-2026-1499 - Wp Duplicate Plugin
The WP Duplicate plugin for WordPress is vulnerable to Missing Authorization leading to Arbitrary File Upload in all versions up to and including 1.1.8. This is due to a missing capability check on the `process_add_site()` AJAX action combined with path traversal in the file upload functionality. This makes it possible for authenticated (subscriber-level) attackers to set the internal `prod_key_random_id` option, which can then be used by an unauthenticated attacker to bypass authentication checks and write arbitrary files to the server via the `handle_upload_single_big_file()` function, ultimately leading to remote code execution.
PLUGIN
Wp Duplicate
CVE-2026-1499
Risk Score
Threat Entry
Updated 2026-02-03
CVE-2025-15030 - User Profile Builder Plugin
The User Profile Builder WordPress plugin before 3.15.2 does not have a proper password reset process, allowing a few unauthenticated requests to reset the password of any user by knowing their username, such as administrator ones, and therefore gain access to their account
PLUGIN
User Profile Builder
CVE-2025-15030
Risk Score
Threat Entry
Updated 2026-06-17
CVE-2026-1056 - Snow Monkey Forms Plugin
The Snow Monkey Forms plugin for WordPress is vulnerable to arbitrary file deletion due to insufficient file path validation in the 'generate_user_dirpath' function in all versions up to, and including, 12.0.3. This makes it possible for unauthenticated attackers to delete arbitrary files on the server, which can easily lead to remote code execution when the right file is deleted (such as wp-config.php).
PLUGIN
Snow Monkey Forms
CVE-2026-1056
Risk Score
Threat Entry
Updated 2026-01-26
CVE-2025-13374 - Kalrav Ai Agent Plugin
The Kalrav AI Agent plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the kalrav_upload_file AJAX action in all versions up to, and including, 2.3.3. This makes it possible for unauthenticated attackers to upload arbitrary files on the affected site's server which may make remote code execution possible.
PLUGIN
Kalrav Ai Agent
CVE-2025-13374
Risk Score
Threat Entry
Updated 2026-06-17
CVE-2026-24531 - Prowess Plugin
Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Select-Themes Prowess prowess allows PHP Local File Inclusion.This issue affects Prowess: from n/a through
PLUGIN
Prowess
CVE-2026-24531
Risk Score
Threat Entry
Updated 2026-06-17
CVE-2026-24371 - BA Book Everything Plugin
Missing Authorization vulnerability in bookingalgorithms BA Book Everything ba-book-everything allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects BA Book Everything: from n/a through
PLUGIN
BA Book Everything
CVE-2026-24371
Risk Score
Threat Entry
Updated 2026-06-17
CVE-2026-24379 - WP Job Portal Plugin
Authorization Bypass Through User-Controlled Key vulnerability in wpjobportal WP Job Portal wp-job-portal allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP Job Portal: from n/a through
PLUGIN
WP Job Portal
CVE-2026-24379
Risk Score
Threat Entry
Updated 2026-06-17
CVE-2026-23978 - Gyan Elements Plugin
Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Softwebmedia Gyan Elements gyan-elements allows PHP Local File Inclusion.This issue affects Gyan Elements: from n/a through
PLUGIN
Gyan Elements
CVE-2026-23978
Risk Score
Threat Entry
Updated 2026-06-17
CVE-2026-23975 - Golo Plugin
Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in uxper Golo golo allows PHP Local File Inclusion.This issue affects Golo: from n/a through < 1.7.5.
PLUGIN
Golo
CVE-2026-23975
Risk Score
Threat Entry
Updated 2026-06-17
CVE-2026-22482 - IMGspider Plugin
Server-Side Request Forgery (SSRF) vulnerability in wbolt.com IMGspider imgspider allows Server Side Request Forgery.This issue affects IMGspider: from n/a through
PLUGIN
IMGspider
CVE-2026-22482
Risk Score
Threat Entry
Updated 2026-06-17
CVE-2026-0920 - La Studio Element Kit For Elementor Plugin
The LA-Studio Element Kit for Elementor plugin for WordPress is vulnerable to Administrative User Creation in all versions up to, and including, 1.5.6.3. This is due to the 'ajax_register_handle' function not restricting what user roles a user can register with. This makes it possible for unauthenticated attackers to supply the 'lakit_bkrole' parameter during registration and gain administrator access to the site.
PLUGIN
La Studio Element Kit For Elementor
CVE-2026-0920
Risk Score
Threat Entry
Updated 2026-01-26
CVE-2025-15521 - Wordpress Lms Plugin For Complete Elearning Solution
The Academy LMS – WordPress LMS Plugin for Complete eLearning Solution plugin for WordPress is vulnerable to privilege escalation via account takeover in all versions up to, and including, 3.5.0. This is due to the plugin not properly validating a user's identity prior to updating their password and relying solely on a publicly-exposed nonce for authorization. This makes it possible for unauthenticated attackers to change arbitrary user's password, including administrators, and gain access to their account.
PLUGIN
Wordpress Lms Plugin For Complete Elearning Solution
CVE-2025-15521
Risk Score
Threat Entry
Updated 2026-01-26
CVE-2025-14533 - Acf Extended Plugin
The Advanced Custom Fields: Extended plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 0.9.2.1. This is due to the 'insert_user' function not restricting the roles with which a user can register. This makes it possible for unauthenticated attackers to supply the 'administrator' role during registration and gain administrator access to the site. Note: The vulnerability can only be exploited if 'role' is mapped to the custom field.
PLUGIN
Acf Extended
CVE-2025-14533
Risk Score
Threat Entry
Updated 2026-01-26
CVE-2025-10484 - Login With Mobile Phone Number For Woocommerce Plugin
The Registration & Login with Mobile Phone Number for WooCommerce plugin for WordPress is vulnerable to Authentication Bypass in all versions up to, and including, 1.3.1. This is due to the plugin not properly verifying a users identity prior to authenticating them via the fma_lwp_set_session_php_fun() function. This makes it possible for unauthenticated attackers to authenticate as any user on the site, including administrators, without a valid password.
PLUGIN
Login With Mobile Phone Number For Woocommerce
CVE-2025-10484
Risk Score
Threat Entry
Updated 2026-01-26
CVE-2025-15403 - Custom Registration Form Builder With Submission Manager Plugin
The RegistrationMagic plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 6.0.7.1. This is due to the 'add_menu' function is accessible via the 'rm_user_exists' AJAX action and allows arbitrary updates to the 'admin_order' setting. This makes it possible for unauthenticated attackers to injecting an empty slug into the order parameter, and manipulate the plugin's menu generation logic, and when the admin menu is subsequently built, the plugin adds 'manage_options' capability for the target role. Note: The vulnerability can only be exploited unauthenticated, but further…
PLUGIN
Custom Registration Form Builder With Submission Manager
CVE-2025-15403
Risk Score
Threat Entry
Updated 2026-06-17
CVE-2026-23800 - Modular DS Plugin
Incorrect Privilege Assignment vulnerability in Modular DS modular-connector allows Privilege Escalation.This issue affects Modular DS: from 2.5.2 before 2.6.0.
PLUGIN
Modular DS
CVE-2026-23800
Risk Score
Threat Entry
Updated 2026-01-26
CVE-2026-23744 - Inspector Plugin
MCPJam inspector is the local-first development platform for MCP servers. Versions 1.4.2 and earlier are vulnerable to remote code execution (RCE) vulnerability, which allows an attacker to send a crafted HTTP request that triggers the installation of an MCP server, leading to RCE. Since MCPJam inspector by default listens on 0.0.0.0 instead of 127.0.0.1, an attacker can trigger the RCE remotely via a simple HTTP request. Version 1.4.3 contains a patch.
PLUGIN
Inspector
CVE-2026-23744
Risk Score
Threat Entry
Updated 2026-01-30
CVE-2026-23722 - WeGIA Plugin
WeGIA is a Web Manager for Charitable Institutions. Prior to 3.6.2, a Reflected Cross-Site Scripting (XSS) vulnerability was discovered in the WeGIA system, specifically within the html/memorando/insere_despacho.php file. The application fails to properly sanitize or encode user-supplied input via the id_memorando GET parameter before reflecting it into the HTML source (likely inside a block or an attribute). This allows unauthenticated attackers to inject arbitrary JavaScript or HTML into the context of the user's browser session. This vulnerability is fixed in 3.6.2.
PLUGIN
WeGIA
CVE-2026-23722
Risk Score
Threat Entry
Updated 2026-02-09
CVE-2026-23523 - Dive Plugin
Dive is an open-source MCP Host Desktop Application that enables integration with function-calling LLMs. Prior to 0.13.0, crafted deeplink can install an attacker-controlled MCP server configuration without sufficient user confirmation and can lead to arbitrary local command execution on the victim’s machine. This vulnerability is fixed in 0.13.0.
PLUGIN
Dive
CVE-2026-23523
Risk Score