Calgary, Alberta, Canada
sales@hackhalt.com
Free Download Free Download Free Download
Explore Pricing Explore Pricing Explore Pricing

Blog

"Prevention is cheaper than a breach"

Live Vulnerability Intelligence

Threat Database

Search CVEs, inspect descriptions, and open detail pages with AI-assisted technical context.

Total12,246
Critical0
High0
Medium12,246
Reset
Showing 261-280 of 12246 records
Threat Entry Updated 2026-07-06

CVE-2026-8892 - Cm Business Directory Plugin

The CM Business Directory – Optimise and showcase local business plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Business Address Meta Fields in all versions up to, and including, 1.5.7 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. Because the malicious payload is stored in post meta rather than post_content, WordPress's unfiltered_html capability restriction does not apply, meaning contributors…

PLUGIN Cm Business Directory

CVE-2026-8892

MEDIUM CVSS 6.4 2026-07-03
Open Full Technical Breakdown
Threat Entry Updated 2026-07-06

CVE-2026-8489 - Ultimate Member Plugin

The Ultimate Member – User Profile, Registration, Login, Member Directory, Content Restriction & Membership Plugin plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'about_me' parameter in all versions up to, and including, 2.11.4 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with subscriber-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.

PLUGIN Ultimate Member

CVE-2026-8489

MEDIUM CVSS 6.4 2026-07-03
Open Full Technical Breakdown
Threat Entry Updated 2026-07-06

CVE-2026-9180 - Motopress Appointment Booking Plugin

The MotoPress Appointment Booking plugin for WordPress is vulnerable to Authorization Bypass Through User-Controlled Key in all versions up to, and including, 2.4.4. This is due to the `POST /motopress/appointment/v1/bookings` REST endpoint being registered with `'permission_callback' => '__return_true'`, allowing unauthenticated access, while the `createBooking` handler in `BookingsRestController.php` accepts an attacker-supplied `payment_details.booking_id` value and loads the referenced booking via `findById()` without verifying that the caller owns or has any rights to that booking. This makes it possible for unauthenticated attackers to overwrite the customer name, email address, phone number, and `customer_id`…

PLUGIN Motopress Appointment Booking

CVE-2026-9180

MEDIUM CVSS 5.3 2026-07-03
Open Full Technical Breakdown
Threat Entry Updated 2026-07-06

CVE-2026-12557 - Ninja Forms - File Uploads Plugin

The Ninja Forms - File Uploads plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 3.3.29. This is due to the plugin not properly verifying that a user is authorized to perform an action. This makes it possible for unauthenticated attackers to read all plugin debug log entries stored in the wp_nf3_log table or permanently delete all rows from that table.

PLUGIN Ninja Forms - File Uploads

CVE-2026-12557

MEDIUM CVSS 5.3 2026-07-03
Open Full Technical Breakdown
Threat Entry Updated 2026-07-06

CVE-2026-11397 - Wp Import Export Lite Plugin

The WP Import Export Lite plugin for WordPress is vulnerable to Server-Side Request Forgery in all versions up to and including 3.9.30 via the wpie_import_upload_file_from_url AJAX action. The plugin's URL downloader first calls wp_safe_remote_get() (which correctly blocks private/reserved IP ranges), but when that call returns a WP_Error — the exact outcome for any blocked internal host — the Download::download_file() method falls back to GuzzleHttp\Client::request() with the original attacker-supplied URL and no SSRF protection (and with TLS verification disabled). This makes it possible for authenticated attackers, with administrator-level access and above,…

PLUGIN Wp Import Export Lite

CVE-2026-11397

MEDIUM CVSS 5.5 2026-07-03
Open Full Technical Breakdown
Threat Entry Updated 2026-07-06

CVE-2026-12734 - weDocs: AI Powered Knowledge Base, Docs, Documentation, Wiki & AI Chatbot Plugin

The weDocs: AI Powered Knowledge Base, Docs, Documentation, Wiki & AI Chatbot plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'connectorWidth' Block Attribute in all versions up to, and including, 2.3.0 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.

PLUGIN weDocs: AI Powered Knowledge Base, Docs, Documentation, Wiki & AI Chatbot

CVE-2026-12734

MEDIUM CVSS 6.4 2026-07-03
Open Full Technical Breakdown
Threat Entry Updated 2026-07-07

CVE-2026-12731 - weDocs: AI Powered Knowledge Base, Docs, Documentation, Wiki & AI Chatbot Plugin

The weDocs: AI Powered Knowledge Base, Docs, Documentation, Wiki & AI Chatbot plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'sectionTitleTag' and 'articleTitleTag' Block Attributes in all versions up to, and including, 2.3.0 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.

PLUGIN weDocs: AI Powered Knowledge Base, Docs, Documentation, Wiki & AI Chatbot

CVE-2026-12731

MEDIUM CVSS 6.4 2026-07-03
Open Full Technical Breakdown
Threat Entry Updated 2026-07-06

CVE-2026-12920 - Gdpr Cookie Consent Plugin

The Cookie Banner for GDPR / CCPA – WPLP Cookie Consent plugin for WordPress is vulnerable to generic SQL Injection via the 's' parameter in all versions up to, and including, 4.3.5 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it possible for authenticated attackers, with administrator-level access and above, to append additional SQL queries into already existing queries that can be used to extract sensitive information from the database.

PLUGIN Gdpr Cookie Consent

CVE-2026-12920

MEDIUM CVSS 4.9 2026-07-03
Open Full Technical Breakdown
Threat Entry Updated 2026-07-06

CVE-2026-12729 - Wedocs Plugin

The weDocs: AI Powered Knowledge Base, Docs, Documentation, Wiki & AI Chatbot plugin for WordPress is vulnerable to Missing Authorization in versions up to and including 2.3.0. This is due to a missing capability check on the do_migration() function registered as the wedocs_migrate_betterdocs_to_wedocs AJAX action, which performs no nonce verification via check_ajax_referer() and no capability check via current_user_can() before executing sensitive operations. This makes it possible for authenticated attackers, with Subscriber-level access and above, to trigger a full BetterDocs-to-weDocs data migration, creating and modifying 'docs' custom post type entries with…

PLUGIN Wedocs

CVE-2026-12729

MEDIUM CVSS 4.3 2026-07-03
Open Full Technical Breakdown
Threat Entry Updated 2026-07-02

CVE-2026-57760 - Sendcloud Shipping Plugin

Missing Authorization vulnerability in Sendcloud Sendcloud Shipping allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects Sendcloud Shipping: from n/a through 1.0.29.

PLUGIN Sendcloud Shipping

CVE-2026-57760

MEDIUM CVSS 5.3 2026-07-02
Open Full Technical Breakdown
Scroll to top