Threat Entry Updated 2026-06-17

CVE-2026-54807 - WordPress component

Unauthenticated Privilege Escalation in Registration Form for WooCommerce

UNKNOWN WordPress component

CVE-2026-54807

CRITICAL CVSS 9.8 2026-06-17

Risk Score

Open Full Technical Breakdown

Threat Entry Updated 2026-06-17

CVE-2026-54806 - WordPress component

Unauthenticated PHP Object Injection in WP Activity Log

UNKNOWN WordPress component

CVE-2026-54806

CRITICAL CVSS 9.8 2026-06-17

Risk Score

Open Full Technical Breakdown

Threat Entry Updated 2026-06-17

CVE-2026-54803 - WordPress component

Subscriber Privilege Escalation in SMS Alert Order Notifications

UNKNOWN WordPress component

CVE-2026-54803

CRITICAL CVSS 9.8 2026-06-17

Risk Score

Open Full Technical Breakdown

Threat Entry Updated 2026-06-17

CVE-2026-54811 - WordPress component

Unauthenticated SQL Injection in WP eMember < v10.9.4 versions.

UNKNOWN WordPress component

CVE-2026-54811

CRITICAL CVSS 9.3 2026-06-17

Risk Score

Open Full Technical Breakdown

Threat Entry Updated 2026-06-17

CVE-2026-54194 - WordPress component

Contributor PHP Object Injection in Fusion Builder

UNKNOWN WordPress component

CVE-2026-54194

CRITICAL CVSS 9.8 2026-06-17

Risk Score

Open Full Technical Breakdown

Threat Entry Updated 2026-06-17

CVE-2026-54187 - WordPress component

Unauthenticated SQL Injection in JetEngine

UNKNOWN WordPress component

CVE-2026-54187

CRITICAL CVSS 9.3 2026-06-17

Risk Score

Open Full Technical Breakdown

Threat Entry Updated 2026-06-17

CVE-2026-52706 - WordPress component

Unauthenticated PHP Object Injection in JetEngine

UNKNOWN WordPress component

CVE-2026-52706

CRITICAL CVSS 9.8 2026-06-17

Risk Score

Open Full Technical Breakdown

Threat Entry Updated 2026-06-17

CVE-2026-54186 - WordPress component

Unauthenticated SQL Injection in JobSearch

UNKNOWN WordPress component

CVE-2026-54186

CRITICAL CVSS 9.3 2026-06-17

Risk Score

Open Full Technical Breakdown

Threat Entry Updated 2026-06-17

CVE-2026-52705 - WordPress component

Unauthenticated Arbitrary File Upload in SigmaForms Pro – AI Generated Forms

UNKNOWN WordPress component

CVE-2026-52705

CRITICAL CVSS 9.0 2026-06-17

Risk Score

Open Full Technical Breakdown

Threat Entry Updated 2026-06-17

CVE-2026-49767 - WordPress component

Unauthenticated Broken Authentication in wpForo Forum

UNKNOWN WordPress component

CVE-2026-49767

CRITICAL CVSS 9.8 2026-06-17

Risk Score

Open Full Technical Breakdown

Threat Entry Updated 2026-06-17

CVE-2026-49107 - WordPress component

Unauthenticated PHP Object Injection in Thrive Apprentice < 10.8.10.2 versions.

UNKNOWN WordPress component

CVE-2026-49107

CRITICAL CVSS 9.8 2026-06-17

Risk Score

Open Full Technical Breakdown

Threat Entry Updated 2026-06-17

CVE-2026-49084 - WordPress component

Unauthenticated SQL Injection in JetEngine < 3.8.9.1 versions.

UNKNOWN WordPress component

CVE-2026-49084

CRITICAL CVSS 9.3 2026-06-17

Risk Score

Open Full Technical Breakdown

Threat Entry Updated 2026-06-17

CVE-2026-49080 - WordPress component

Unauthenticated SQL Injection in wpDataTables

UNKNOWN WordPress component

CVE-2026-49080

CRITICAL CVSS 9.3 2026-06-17

Risk Score

Open Full Technical Breakdown

Threat Entry Updated 2026-06-17

CVE-2026-49075 - WordPress component

Contributor PHP Object Injection in JetEngine

UNKNOWN WordPress component

CVE-2026-49075

CRITICAL CVSS 9.8 2026-06-17

Risk Score

Open Full Technical Breakdown

Threat Entry Updated 2026-06-17

CVE-2026-49079 - WordPress component

Unauthenticated SQL Injection in JetSearch

UNKNOWN WordPress component

CVE-2026-49079

CRITICAL CVSS 9.3 2026-06-17

Risk Score

Open Full Technical Breakdown

Threat Entry Updated 2026-06-17

CVE-2026-49076 - WordPress component

Unauthenticated SQL Injection in JetEngine

UNKNOWN WordPress component

CVE-2026-49076

CRITICAL CVSS 9.3 2026-06-17

Risk Score

Open Full Technical Breakdown

Threat Entry Updated 2026-06-17

CVE-2026-49058 - WordPress component

Unauthenticated Privilege Escalation in LoginPress Pro

UNKNOWN WordPress component

CVE-2026-49058

CRITICAL CVSS 9.8 2026-06-17

Risk Score

Open Full Technical Breakdown

Threat Entry Updated 2026-06-17

CVE-2026-48875 - WordPress component

Unauthenticated SQL Injection in JetSmartFilters

UNKNOWN WordPress component

CVE-2026-48875

CRITICAL CVSS 9.3 2026-06-17

Risk Score

Open Full Technical Breakdown

Threat Entry Updated 2026-06-17

CVE-2026-42380 - WordPress component

Unauthenticated PHP Object Injection in AI Lab < 5.4.2 versions.

UNKNOWN WordPress component

CVE-2026-42380

CRITICAL CVSS 9.8 2026-06-17

Risk Score

Open Full Technical Breakdown

Threat Entry Updated 2026-06-17

CVE-2026-40783 - WordPress component

Contributor Remote Code Execution (RCE) in Blocksy Companion Pro

UNKNOWN WordPress component

CVE-2026-40783

CRITICAL CVSS 9.9 2026-06-17

Risk Score

Open Full Technical Breakdown