Threat Entry Updated 2026-07-13

CVE-2026-57771 - GD Rating System Plugin

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Milan Petrovic GD Rating System gd-rating-system allows Blind SQL Injection.This issue affects GD Rating System: from n/a through

PLUGIN GD Rating System

CVE-2026-57771

HIGH CVSS 8.5 2026-07-13

Risk Score

Open Full Technical Breakdown

Threat Entry Updated 2026-07-13

CVE-2026-57773 - Advanced Shipment Tracking for WooCommerce Plugin

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Zorem Advanced Shipment Tracking for WooCommerce woo-advanced-shipment-tracking allows Blind SQL Injection.This issue affects Advanced Shipment Tracking for WooCommerce: from n/a through

PLUGIN Advanced Shipment Tracking for WooCommerce

CVE-2026-57773

HIGH CVSS 7.6 2026-07-13

Risk Score

Open Full Technical Breakdown

Threat Entry Updated 2026-07-13

CVE-2026-57768 - Houzez Login Register Plugin

Incorrect Privilege Assignment vulnerability in favethemes Houzez Login Register houzez-login-register allows Privilege Escalation.This issue affects Houzez Login Register: from n/a through

PLUGIN Houzez Login Register

CVE-2026-57768

HIGH CVSS 8.2 2026-07-13

Risk Score

Open Full Technical Breakdown

Threat Entry Updated 2026-07-13

CVE-2026-57743 - RT-Theme 18 | Extensions

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in stmcan RT-Theme 18 | Extensions rt18-extensions allows PHP Local File Inclusion.This issue affects RT-Theme 18 | Extensions: from n/a through

THEME RT-Theme 18 | Extensions

CVE-2026-57743

HIGH CVSS 8.1 2026-07-13

Risk Score

Open Full Technical Breakdown

Threat Entry Updated 2026-07-13

CVE-2026-57745 - RT-Theme 18 | Extensions

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in stmcan RT-Theme 18 | Extensions rt18-extensions allows Reflected XSS.This issue affects RT-Theme 18 | Extensions: from n/a through

THEME RT-Theme 18 | Extensions

CVE-2026-57745

HIGH CVSS 7.1 2026-07-13

Risk Score

Open Full Technical Breakdown

Threat Entry Updated 2026-07-13

CVE-2026-57741 - AcyMailing SMTP Newsletter Plugin

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in AcyMailing Newsletter Team AcyMailing SMTP Newsletter acymailing allows Stored XSS.This issue affects AcyMailing SMTP Newsletter: from n/a through

PLUGIN AcyMailing SMTP Newsletter

CVE-2026-57741

HIGH CVSS 7.1 2026-07-13

Risk Score

Open Full Technical Breakdown

Threat Entry Updated 2026-07-13

CVE-2026-57740 - AcyMailing SMTP Newsletter Plugin

Missing Authorization vulnerability in AcyMailing Newsletter Team AcyMailing SMTP Newsletter acymailing allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects AcyMailing SMTP Newsletter: from n/a through

PLUGIN AcyMailing SMTP Newsletter

CVE-2026-57740

HIGH CVSS 7.1 2026-07-13

Risk Score

Open Full Technical Breakdown

Threat Entry Updated 2026-07-13

CVE-2026-57729 - Flatsome Plugin

Missing Authorization vulnerability in UX-themes Flatsome flatsome allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Flatsome: from n/a through

PLUGIN Flatsome

CVE-2026-57729

HIGH CVSS 7.5 2026-07-13

Risk Score

Open Full Technical Breakdown

Threat Entry Updated 2026-07-13

CVE-2026-57727 - Kirki Plugin

Missing Authorization vulnerability in Themeum Kirki kirki allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Kirki: from n/a through

PLUGIN Kirki

CVE-2026-57727

HIGH CVSS 7.5 2026-07-13

Risk Score

Open Full Technical Breakdown

Threat Entry Updated 2026-07-13

CVE-2026-57734 - tagDiv Composer Plugin

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in tagDiv tagDiv Composer td-composer allows Reflected XSS.This issue affects tagDiv Composer: from n/a through

PLUGIN tagDiv Composer

CVE-2026-57734

HIGH CVSS 7.1 2026-07-13

Risk Score

Open Full Technical Breakdown

Threat Entry Updated 2026-07-13

CVE-2026-57733 - tagDiv Cloud Library Plugin

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in tagDiv tagDiv Cloud Library td-cloud-library allows DOM-Based XSS.This issue affects tagDiv Cloud Library: from n/a through

PLUGIN tagDiv Cloud Library

CVE-2026-57733

HIGH CVSS 7.1 2026-07-13

Risk Score

Open Full Technical Breakdown

Threat Entry Updated 2026-07-13

CVE-2026-57732 - tagDiv Opt-In Builder Plugin

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in tagDiv tagDiv Opt-In Builder td-subscription allows DOM-Based XSS.This issue affects tagDiv Opt-In Builder: from n/a through

PLUGIN tagDiv Opt-In Builder

CVE-2026-57732

HIGH CVSS 7.1 2026-07-13

Risk Score

Open Full Technical Breakdown

Threat Entry Updated 2026-07-13

CVE-2026-57728 - Flatsome Plugin

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in UX-themes Flatsome flatsome allows Reflected XSS.This issue affects Flatsome: from n/a through

PLUGIN Flatsome

CVE-2026-57728

HIGH CVSS 7.1 2026-07-13

Risk Score

Open Full Technical Breakdown

Threat Entry Updated 2026-07-13

CVE-2026-57725 - Kirki Plugin

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Themeum Kirki kirki allows Stored XSS.This issue affects Kirki: from n/a through

PLUGIN Kirki

CVE-2026-57725

HIGH CVSS 7.1 2026-07-13

Risk Score

Open Full Technical Breakdown

Threat Entry Updated 2026-07-13

CVE-2026-57713 - Events Manager Plugin

Deserialization of Untrusted Data vulnerability in Marcus (aka @msykes) Events Manager events-manager allows Object Injection.This issue affects Events Manager: from n/a through

PLUGIN Events Manager

CVE-2026-57713

HIGH CVSS 8.8 2026-07-13

Risk Score

Open Full Technical Breakdown

Threat Entry Updated 2026-07-13

CVE-2026-57709 - Membership For WooCommerce Plugin

Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in WP Swings Membership For WooCommerce membership-for-woocommerce allows Path Traversal.This issue affects Membership For WooCommerce: from n/a through

PLUGIN Membership For WooCommerce

CVE-2026-57709

HIGH CVSS 8.6 2026-07-13

Risk Score

Open Full Technical Breakdown

Threat Entry Updated 2026-07-13

CVE-2026-57718 - Elementor Plugin

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Unlimited Elements Unlimited Elements For Elementor (Free Widgets, Addons, Templates) unlimited-elements-for-elementor allows Reflected XSS.This issue affects Unlimited Elements For Elementor (Free Widgets, Addons, Templates): from n/a through

PLUGIN Elementor

CVE-2026-57718

HIGH CVSS 7.1 2026-07-13

Risk Score

Open Full Technical Breakdown

Threat Entry Updated 2026-07-13

CVE-2026-57715 - Fluent CRM Plugin

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WPManageNinja Fluent CRM fluent-crm allows Reflected XSS.This issue affects Fluent CRM: from n/a through

PLUGIN Fluent CRM

CVE-2026-57715

HIGH CVSS 7.1 2026-07-13

Risk Score

Open Full Technical Breakdown

Threat Entry Updated 2026-07-13

CVE-2026-57712 - WPZOOM Portfolio Plugin

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WPZOOM WPZOOM Portfolio wpzoom-portfolio allows Reflected XSS.This issue affects WPZOOM Portfolio: from n/a through

PLUGIN WPZOOM Portfolio

CVE-2026-57712

HIGH CVSS 7.1 2026-07-13

Risk Score

Open Full Technical Breakdown

Threat Entry Updated 2026-07-13

CVE-2026-57705 - Event Tickets Plugin

Missing Authorization vulnerability in Nexcess Event Tickets event-tickets allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Event Tickets: from n/a through

PLUGIN Event Tickets

CVE-2026-57705

HIGH CVSS 7.5 2026-07-13

Risk Score

Open Full Technical Breakdown