Live Vulnerability Intelligence
Threat Database
Search CVEs, inspect descriptions, and open detail pages with AI-assisted technical context.
Threat Entry
Updated 2026-10-12
WordPress component - Security Vulnerability (CVE-2026-108981)
ngx_cache_purge before 3.0.4 can allow file deletion via a symlink attack in certain situations where nginx and a served application (e.g., WordPress) run under the same user account. The attacker must be able to create a symlink inside the cache path. Version 3.0.4 fixes this for the case of a symlink created at an arbitrary earlier time, but does not resolve an applicable TOCTOU race condition. (The ngx_cache_purge module follows symlinks while walking the cache directory tree during purge operations. The module relies on nginx's ngx_walk_tree(), which relies on stat()…
UNKNOWN
WordPress component
CVE-2026-108981
Risk Score
Threat Entry
Updated 2026-10-11
Dokan - Security Vulnerability (CVE-2026-107694)
The Dokan: AI Powered WooCommerce Multivendor Marketplace Solution WordPress plugin before 5.2.0 does not verify that the vendor a commission calculation is requested for is the requesting vendor, allowing vendors to disclose the commission rate and fixed fee the marketplace administrator configured for other vendors.
PLUGIN
Dokan
CVE-2026-107694
Risk Score
Threat Entry
Updated 2026-10-11
Squadeno - Security Vulnerability (CVE-2026-107507)
The Squadeno WordPress plugin before 1.12.0 does not enforce its restrictions on every way a sport can be saved, allowing users with the lowest-tier Trainer role to change the section, age group, author, password, comment settings and date of a sport they are assigned to.
PLUGIN
Squadeno
CVE-2026-107507
Risk Score
Threat Entry
Updated 2026-10-11
Envira Gallery - Security Vulnerability (CVE-2026-104684)
The Envira Gallery WordPress plugin before 1.16.2 does not verify that a user is authorized to read a gallery before rendering it, allowing authors to embed and expose other users' non-public gallery metadata to unauthenticated visitors.
PLUGIN
Envira Gallery
CVE-2026-104684
Risk Score
Threat Entry
Updated 2026-10-11
Envira Gallery - Security Vulnerability (CVE-2026-104682)
The Envira Gallery WordPress plugin before 1.16.2 does not correctly check authorization on its gallery-conversion feature, verifying that the requester can edit an arbitrary post they name rather than that they are allowed to create the Envira Gallery WordPress plugin before 1.16.2's own gallery content, allowing users with contributor-level access to create and publish gallery posts that the Envira Gallery WordPress plugin before 1.16.2's settings otherwise withhold from them.
PLUGIN
Envira Gallery
CVE-2026-104682
Risk Score
Threat Entry
Updated 2026-10-11
Envira Gallery - Security Vulnerability (CVE-2026-104681)
The Envira Gallery WordPress plugin before 1.16.2 does not verify that an image identifier added to a gallery refers to a media attachment the caller is permitted to view, allowing any user able to create and edit a gallery (Author and above by default) to disclose the title and excerpt of other users' private, draft, pending and trashed posts that WordPress would otherwise withhold from them.
PLUGIN
Envira Gallery
CVE-2026-104681
Risk Score
Threat Entry
Updated 2026-10-10
Speedycache - Security Vulnerability (CVE-2026-104006)
The SpeedyCache – Cache, Optimization, Performance plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 1.4.2 via the 'comment_author_*, comment_author_email_*' parameter. This makes it possible for unauthenticated attackers to extract the full name and email address of returning commenters pre-filled into comment form input fields and persisted as the site-wide cached page by any unauthenticated attacker requesting the same public URL. The read-side handler in advanced-cache.php correctly skips cached delivery for requests carrying comment_author_* cookies, but this check is absent on the write…
PLUGIN
Speedycache
CVE-2026-104006
Risk Score
Threat Entry
Updated 2026-10-10
Portfolio Filter Gallery - Security Vulnerability (CVE-2026-105977)
The Portfolio Filter Gallery WordPress plugin before 2.2.1 does not perform a per-object authorization check before deleting an attachment, allowing users with the Contributor role and above to permanently delete certain media attachments belonging to other users, including administrators.
PLUGIN
Portfolio Filter Gallery
CVE-2026-105977
Risk Score
Threat Entry
Updated 2026-10-10
Rank Math SEO - Security Vulnerability (CVE-2026-104754)
The Rank Math SEO WordPress plugin before 1.0.280 does not escape a stored redirection source value before outputting it in an administrative list view, allowing users who can manage redirections (Administrators by default) to store JavaScript that executes in the session of any user who later opens that view, including a Super Administrator on multisite.
PLUGIN
Rank Math SEO
CVE-2026-104754
Risk Score
Threat Entry
Updated 2026-10-10
Gpt3 Ai Content Generator - Security Vulnerability (CVE-2026-104742)
The AI Puffer – Chat. Create. Automate. (formerly AI Power) plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 2.4.89. This is due to the plugin not properly verifying that a user is authorized to perform an action. This makes it possible for authenticated attackers, with subscriber-level access and above, to modify global site-wide semantic search settings, including vector provider, embedding provider, embedding model, target ID, number of results, and no-results text stored in aipkit_options, that are otherwise restricted to administrators. Exploitation requires that…
PLUGIN
Gpt3 Ai Content Generator
CVE-2026-104742
Risk Score
Threat Entry
Updated 2026-10-10
Gpt3 Ai Content Generator - Security Vulnerability (CVE-2026-104741)
The AI Puffer – Chat. Create. Automate. (formerly AI Power) plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 2.4.89. This is due to the plugin not properly verifying that a user is authorized to perform an action. This makes it possible for authenticated attackers, with subscriber-level access and above, to modify global plugin indexing and vector-search configuration options (aipkit_training_general_settings and aipkit_indexing_field_settings), including chunking parameters, file upload visibility, and per-CPT field indexing settings, affecting all users of the plugin. This is only exploitable in…
PLUGIN
Gpt3 Ai Content Generator
CVE-2026-104741
Risk Score
Threat Entry
Updated 2026-10-09
Code Snippets - Security Vulnerability (CVE-2026-106095)
The Code Snippets WordPress plugin before 3.10.0 does not perform a capability check on one of its snippet-management actions and derives the network scope of the targeted snippet from the request instead of from the stored record, allowing an administrator of a single subsite on a multisite network to activate, deactivate and reprioritise network-scoped snippets that run across every site in the network.
PLUGIN
Code Snippets
CVE-2026-106095
Risk Score
Threat Entry
Updated 2026-10-08
phone numbers of users who belong to other sites on that network. This affects multisite only, and requires the SMS Alert - Security Vulnerability (CVE-2026-94258)
The SMS Alert WordPress plugin before 4.0.1 does not check that the acting administrator is allowed to manage the selected users before returning their stored billing phone numbers, allowing an administrator of one site on a multisite network to disclose the phone numbers of users who belong to other sites on that network. This affects multisite only, and requires the SMS Alert WordPress plugin before 4.0.1's gateway credentials to be stored on the acting administrator's own site.
PLUGIN
phone numbers of users who belong to other sites on that network. This affects multisite only, and requires the SMS Alert
CVE-2026-94258
Risk Score
Threat Entry
Updated 2026-10-08
Appointment Booking Plugin - Security Vulnerability (CVE-2026-105196)
The Appointment Booking Plugin WordPress plugin before 5.6.9 does not enforce per-record authorization on several of its AI Abilities API actions, allowing an authenticated user holding the LatePoint Agent role, normally restricted to their own records, to read and modify other agents' profile data and read other agents' bookings and associated customer details when the Abilities API feature is enabled.
PLUGIN
Appointment Booking Plugin
CVE-2026-105196
Risk Score
Threat Entry
Updated 2026-10-08
Appointment Booking Plugin - Security Vulnerability (CVE-2026-105197)
The Appointment Booking Plugin WordPress plugin before 5.6.5 does not verify that a backend staff user is authorized to act on the specific record targeted for deletion, allowing an authenticated user with a record-scoped staff role to irreversibly delete any order, customer, or transaction on the site, including records belonging to other staff and outside their assigned scope.
PLUGIN
Appointment Booking Plugin
CVE-2026-105197
Risk Score
Threat Entry
Updated 2026-10-08
Booking Calendar - Security Vulnerability (CVE-2026-105195)
The Booking Calendar WordPress plugin before 11.8.3 does not adequately restrict which options a lower-privileged user can load through one of its settings handlers, allowing users with the Editor role and above to disclose the values of arbitrary WordPress options, including core site configuration.
PLUGIN
Booking Calendar
CVE-2026-105195
Risk Score
Threat Entry
Updated 2026-10-08
Image Photo Gallery Final Tiles Grid - Security Vulnerability (CVE-2026-104645)
The Image Photo Gallery Final Tiles Grid WordPress plugin before 3.6.14 does not properly verify authorization on several of its gallery and image management actions, checking ownership against a different object than the one being acted on, or omitting the check entirely, allowing any authenticated user with contributor-level access or above to clone, modify and reorder galleries and images belonging to other users and to write Image Photo Gallery Final Tiles Grid WordPress plugin before 3.6.14 metadata onto arbitrary posts they do not own.
PLUGIN
Image Photo Gallery Final Tiles Grid
CVE-2026-104645
Risk Score
Threat Entry
Updated 2026-10-07
CP Media Player - Security Vulnerability (CVE-2026-104678)
The CP Media Player WordPress plugin before 1.3.4 does not perform a capability check on its settings-page handler, allowing users with only Contributor-level access to create, modify, duplicate and delete the site-wide media player configurations and change a CP Media Player WordPress plugin before 1.3.4 option that should require administrator access.
PLUGIN
CP Media Player
CVE-2026-104678
Risk Score
Threat Entry
Updated 2026-10-06
Simple Shopping Cart - Security Vulnerability (CVE-2026-104119)
The Simple Shopping Cart WordPress plugin before 5.2.6 does not escape some of its settings field values before outputting them on an admin settings page, allowing high-privilege users such as administrators to perform Stored Cross-Site Scripting attacks, which is notably impactful on multisite installations where administrators do not have the unfiltered_html capability.
PLUGIN
Simple Shopping Cart
CVE-2026-104119
Risk Score
Threat Entry
Updated 2026-10-06
Pie Register - Security Vulnerability (CVE-2026-96962)
The Pie Register WordPress plugin before 3.8.4.14 does not restrict access to an invitation-code report, allowing unauthenticated visitors who know a valid invitation code to obtain the username and email address of every user who registered with that code.
PLUGIN
Pie Register
CVE-2026-96962
Risk Score