Live Vulnerability Intelligence
Threat Database
Search CVEs, inspect descriptions, and open detail pages with AI-assisted technical context.
Threat Entry
Updated 2026-06-17
CVE-2026-40749 - WordPress component
Subscriber Arbitrary File Upload in Charity Zone
UNKNOWN
WordPress component
CVE-2026-40749
Risk Score
Threat Entry
Updated 2026-06-17
CVE-2026-40748 - WordPress component
Subscriber Arbitrary File Upload in Kids Gift Shop
UNKNOWN
WordPress component
CVE-2026-40748
Risk Score
Threat Entry
Updated 2026-06-17
CVE-2026-40747 - WordPress component
Subscriber Arbitrary File Upload in Ecommerce Zone
UNKNOWN
WordPress component
CVE-2026-40747
Risk Score
Threat Entry
Updated 2026-06-17
CVE-2026-40746 - WordPress component
Subscriber Arbitrary File Upload in Restaurant Zone
UNKNOWN
WordPress component
CVE-2026-40746
Risk Score
Threat Entry
Updated 2026-06-17
CVE-2026-40725 - WordPress component
Unauthenticated PHP Object Injection in WooCommerce Product Filters < 2.0.6 versions.
UNKNOWN
WordPress component
CVE-2026-40725
Risk Score
Threat Entry
Updated 2026-06-17
CVE-2026-39589 - WordPress component
Subscriber Arbitrary File Upload in Webenvo
UNKNOWN
WordPress component
CVE-2026-39589
Risk Score
Threat Entry
Updated 2026-06-17
CVE-2026-39596 - WordPress component
Unauthenticated SQL Injection in Blocksy Companion Pro < 2.1.29 versions.
UNKNOWN
WordPress component
CVE-2026-39596
Risk Score
Threat Entry
Updated 2026-06-17
CVE-2026-39529 - WordPress component
Unauthenticated PHP Object Injection in Elementra
UNKNOWN
WordPress component
CVE-2026-39529
Risk Score
Threat Entry
Updated 2026-06-17
CVE-2026-39438 - WordPress component
Unauthenticated SQL Injection in ListingPro
UNKNOWN
WordPress component
CVE-2026-39438
Risk Score
Threat Entry
Updated 2026-06-17
CVE-2026-27429 - WordPress component
Unauthenticated PHP Object Injection in Nifty
UNKNOWN
WordPress component
CVE-2026-27429
Risk Score
Threat Entry
Updated 2026-06-17
CVE-2026-27041 - Elementor Plugin
Contributor Arbitrary File Upload in Unlimited Elements for Elementor (Premium)
PLUGIN
Elementor
CVE-2026-27041
Risk Score
Threat Entry
Updated 2026-06-17
CVE-2026-27395 - WordPress component
Unauthenticated Privilege Escalation in Support Board < 3.8.9 versions.
UNKNOWN
WordPress component
CVE-2026-27395
Risk Score
Threat Entry
Updated 2026-06-17
CVE-2026-25470 - Custom Post Types Plugin
Improper Control of Generation of Code ('Code Injection') vulnerability in ACPT ACPT (Pro) - Custom Post Types Plugin for WordPress allows Remote Code Inclusion. This issue affects ACPT (Pro) - Custom Post Types Plugin for WordPress: from n/a through 2.0.47.
PLUGIN
Custom Post Types
CVE-2026-25470
Risk Score
Threat Entry
Updated 2026-06-17
CVE-2026-25446 - WordPress component
Subscriber Arbitrary File Upload in WishList Member X
UNKNOWN
WordPress component
CVE-2026-25446
Risk Score
Threat Entry
Updated 2026-06-17
CVE-2026-24611 - WordPress component
Unauthenticated Broken Access Control in MetForm Pro
UNKNOWN
WordPress component
CVE-2026-24611
Risk Score
Threat Entry
Updated 2026-06-17
CVE-2026-22340 - WordPress component
Unauthenticated SQL Injection in WPJobster
UNKNOWN
WordPress component
CVE-2026-22340
Risk Score
Threat Entry
Updated 2026-06-17
CVE-2026-22332 - WordPress component
Unauthenticated SQL Injection in Tutor LMS Pro
UNKNOWN
WordPress component
CVE-2026-22332
Risk Score
Threat Entry
Updated 2026-06-17
CVE-2026-22327 - WordPress component
Subscriber Arbitrary File Upload in Restaurt
UNKNOWN
WordPress component
CVE-2026-22327
Risk Score
Threat Entry
Updated 2026-06-17
CVE-2026-40750 - Kids Online Store Plugin
Unrestricted Upload of File with Dangerous Type vulnerability in themagnifico52 Kids Online Store allows Upload a Web Shell to a Web Server. This issue affects Kids Online Store: from n/a through 0.8.9.
PLUGIN
Kids Online Store
CVE-2026-40750
Risk Score
Threat Entry
Updated 2026-06-17
CVE-2026-52715 - WordPress Core
Unauthenticated SQL Injection in GEO my WordPress
CORE
WordPress Core
CVE-2026-52715
Risk Score