Live Vulnerability Intelligence
Threat Database
Search CVEs, inspect descriptions, and open detail pages with AI-assisted technical context.
Threat Entry
Updated 2026-07-13
CVE-2026-57697 - ProfileGrid Plugin
Authentication Bypass Using an Alternate Path or Channel vulnerability in Metagauss ProfileGrid profilegrid-user-profiles-groups-and-communities allows Password Recovery Exploitation.This issue affects ProfileGrid : from n/a through
PLUGIN
ProfileGrid
CVE-2026-57697
Risk Score
Threat Entry
Updated 2026-07-13
CVE-2026-57708 - Contact Form Entries Plugin
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in CRM Perks Contact Form Entries contact-form-entries allows Reflected XSS.This issue affects Contact Form Entries: from n/a through
PLUGIN
Contact Form Entries
CVE-2026-57708
Risk Score
Threat Entry
Updated 2026-07-13
CVE-2026-57706 - Dokan Plugin
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Dokan, Inc. Dokan dokan-lite allows Reflected XSS.This issue affects Dokan: from n/a through
PLUGIN
Dokan
CVE-2026-57706
Risk Score
Threat Entry
Updated 2026-07-13
CVE-2026-57695 - Document Gallery Plugin
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Dan Rossiter Document Gallery document-gallery allows Reflected XSS.This issue affects Document Gallery: from n/a through
PLUGIN
Document Gallery
CVE-2026-57695
Risk Score
Threat Entry
Updated 2026-07-13
CVE-2026-57668 - NEX-Forms Plugin
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Basix NEX-Forms nex-forms-express-wp-form-builder allows Stored XSS.This issue affects NEX-Forms: from n/a through
PLUGIN
NEX-Forms
CVE-2026-57668
Risk Score
Threat Entry
Updated 2026-07-13
CVE-2026-57423 - Contact Form 7 Plugin
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Kofi Mokome Message Filter for Contact Form 7 cf7-message-filter allows Reflected XSS.This issue affects Message Filter for Contact Form 7: from n/a through
PLUGIN
Contact Form 7
CVE-2026-57423
Risk Score
Threat Entry
Updated 2026-07-13
CVE-2026-57422 - Bopo – WooCommerce Product Bundle Builder Plugin
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in VillaTheme Bopo – WooCommerce Product Bundle Builder bopo-woo-product-bundle-builder allows Reflected XSS.This issue affects Bopo – WooCommerce Product Bundle Builder: from n/a through
PLUGIN
Bopo – WooCommerce Product Bundle Builder
CVE-2026-57422
Risk Score
Threat Entry
Updated 2026-07-13
CVE-2026-57421 - CRM Perks Forms Plugin
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in CRM Perks CRM Perks Forms crm-perks-forms allows Reflected XSS.This issue affects CRM Perks Forms: from n/a through
PLUGIN
CRM Perks Forms
CVE-2026-57421
Risk Score
Threat Entry
Updated 2026-07-13
CVE-2026-57417 - Cart Lift Plugin
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in RexTheme Cart Lift cart-lift allows Stored XSS.This issue affects Cart Lift: from n/a through
PLUGIN
Cart Lift
CVE-2026-57417
Risk Score
Threat Entry
Updated 2026-07-13
CVE-2026-57416 - SiteGround Email Marketing Plugin
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in SiteGround SiteGround Email Marketing siteground-email-marketing allows Stored XSS.This issue affects SiteGround Email Marketing: from n/a through
PLUGIN
SiteGround Email Marketing
CVE-2026-57416
Risk Score
Threat Entry
Updated 2026-07-13
CVE-2026-57415 - Gift Vouchers Plugin
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Codemenschen Gift Vouchers gift-voucher allows Stored XSS.This issue affects Gift Vouchers: from n/a through
PLUGIN
Gift Vouchers
CVE-2026-57415
Risk Score
Threat Entry
Updated 2026-07-13
CVE-2026-57410 - MailerPress Plugin
Incorrect Privilege Assignment vulnerability in MailerPress Team MailerPress mailerpress allows Privilege Escalation.This issue affects MailerPress: from n/a through
PLUGIN
MailerPress
CVE-2026-57410
Risk Score
Threat Entry
Updated 2026-07-13
CVE-2026-57407 - PDF Generator for WordPress Plugin
Server-Side Request Forgery (SSRF) vulnerability in WP Swings PDF Generator for WordPress pdf-generator-for-wp allows Server Side Request Forgery.This issue affects PDF Generator for WordPress: from n/a through
PLUGIN
PDF Generator for WordPress
CVE-2026-57407
Risk Score
Threat Entry
Updated 2026-07-13
CVE-2026-57411 - Contact Form 7 Plugin
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Aman CF7 Views – Complete Entry Management for Contact Form 7 cf7-views allows DOM-Based XSS.This issue affects CF7 Views – Complete Entry Management for Contact Form 7: from n/a through
PLUGIN
Contact Form 7
CVE-2026-57411
Risk Score
Threat Entry
Updated 2026-07-13
CVE-2026-57409 - Active Products Tables for WooCommerce Plugin
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in RealMag777 Active Products Tables for WooCommerce profit-products-tables-for-woocommerce allows DOM-Based XSS.This issue affects Active Products Tables for WooCommerce: from n/a through
PLUGIN
Active Products Tables for WooCommerce
CVE-2026-57409
Risk Score
Threat Entry
Updated 2026-07-13
CVE-2026-57405 - Open Shop Plugin
Missing Authorization vulnerability in themehunk Open Shop open-shop allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Open Shop: from n/a through
PLUGIN
Open Shop
CVE-2026-57405
Risk Score
Threat Entry
Updated 2026-07-13
CVE-2026-57403 - GD Security Headers Plugin
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Milan Petrovic GD Security Headers gd-security-headers allows Reflected XSS.This issue affects GD Security Headers: from n/a through
PLUGIN
GD Security Headers
CVE-2026-57403
Risk Score
Threat Entry
Updated 2026-07-13
CVE-2026-57399 - Proxy & VPN Blocker Plugin
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Proxy & VPN Blocker Proxy & VPN Blocker proxy-vpn-blocker allows Stored XSS.This issue affects Proxy & VPN Blocker: from n/a through
PLUGIN
Proxy & VPN Blocker
CVE-2026-57399
Risk Score
Threat Entry
Updated 2026-07-13
CVE-2026-57398 - Real Estate Manager Pro Plugin
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WebCodingPlace Real Estate Manager Pro real-estate-manager-pro allows Reflected XSS.This issue affects Real Estate Manager Pro: from n/a through
PLUGIN
Real Estate Manager Pro
CVE-2026-57398
Risk Score
Threat Entry
Updated 2026-07-13
CVE-2026-57396 - Free Gifts for WooCommerce Plugin
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Flintop Free Gifts for WooCommerce free-gifts-for-woocommerce allows Stored XSS.This issue affects Free Gifts for WooCommerce: from n/a through
PLUGIN
Free Gifts for WooCommerce
CVE-2026-57396
Risk Score