Live Vulnerability Intelligence
Threat Database
Search CVEs, inspect descriptions, and open detail pages with AI-assisted technical context.
Threat Entry
Updated 2026-09-03
Learnpress - Security Vulnerability (CVE-2026-82024)
LearnPress WordPress Plugin before 4.4.6 contains a stored cross-site scripting vulnerability that allows authenticated attackers with the Instructor role to inject persistent malicious payloads by submitting unsanitized input into quiz question answer title fields. Attackers can store arbitrary JavaScript through the answer title parameter, which is rendered through an unescaped HTML sink to execute in the browsers of any user who views the affected quiz question, including students, other instructors, and administrators.
PLUGIN
Learnpress
CVE-2026-82024
Risk Score
Threat Entry
Updated 2026-09-03
Ultimate Maps by Supsystic - Security Vulnerability (CVE-2026-85309)
Missing Authorization vulnerability in Supsystic Ultimate Maps by Supsystic allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects Ultimate Maps by Supsystic: from n/a through 1.5.3.
PLUGIN
Ultimate Maps by Supsystic
CVE-2026-85309
Risk Score
Threat Entry
Updated 2026-09-03
SureForms - Security Vulnerability (CVE-2026-85308)
Authorization Bypass Through User-Controlled Key vulnerability in Brainstorm Force SureForms allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects SureForms: from n/a through 2.12.5.
PLUGIN
SureForms
CVE-2026-85308
Risk Score
Threat Entry
Updated 2026-09-04
MountDev AI MCP Connector for WordPress - Security Vulnerability (CVE-2026-85306)
Missing Authorization vulnerability in Cascadia Web Services MountDev AI MCP Connector for WordPress allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects MountDev AI MCP Connector for WordPress: from n/a through 1.6.5.
PLUGIN
MountDev AI MCP Connector for WordPress
CVE-2026-85306
Risk Score
Threat Entry
Updated 2026-09-03
Booking and Rental Manager - Security Vulnerability (CVE-2026-85303)
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Magepeople inc. Booking and Rental Manager allows Stored XSS. This issue affects Booking and Rental Manager: from n/a through 2.7.7.
PLUGIN
Booking and Rental Manager
CVE-2026-85303
Risk Score
Threat Entry
Updated 2026-09-03
Elementor - Security Vulnerability (CVE-2026-85302)
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WPKoi WordPress Themes WPKoi Templates for Elementor allows DOM-Based XSS. This issue affects WPKoi Templates for Elementor: from n/a through 3.7.2.
PLUGIN
Elementor
CVE-2026-85302
Risk Score
Threat Entry
Updated 2026-09-03
SEOPress - Security Vulnerability (CVE-2026-85305)
Server-Side Request Forgery (SSRF) vulnerability in SEOPress allows Server Side Request Forgery. This issue affects SEOPress: from n/a through 10.1.
PLUGIN
SEOPress
CVE-2026-85305
Risk Score
Threat Entry
Updated 2026-09-03
KP Agent Ready - Security Vulnerability (CVE-2026-85307)
Insertion of Sensitive Information Into Sent Data vulnerability in Kevin Pirnie KP Agent Ready allows Retrieve Embedded Sensitive Data. This issue affects KP Agent Ready: from n/a before 1.2.08.
PLUGIN
KP Agent Ready
CVE-2026-85307
Risk Score
Threat Entry
Updated 2026-09-03
Elementor - Security Vulnerability (CVE-2026-85304)
Missing Authorization vulnerability in Unlimited Elements Unlimited Elements For Elementor (Free Widgets, Addons, Templates) allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects Unlimited Elements For Elementor (Free Widgets, Addons, Templates): from n/a through 2.0.17.
PLUGIN
Elementor
CVE-2026-85304
Risk Score
Threat Entry
Updated 2026-09-03
WordPress component - Security Vulnerability (CVE-2026-84849)
Unauthenticated Bypass Vulnerability in Pre-Orders for WooCommerce
UNKNOWN
WordPress component
CVE-2026-84849
Risk Score
Threat Entry
Updated 2026-09-03
WordPress component - Security Vulnerability (CVE-2026-84769)
Unauthenticated Insecure Direct Object References (IDOR) in Business Directory
UNKNOWN
WordPress component
CVE-2026-84769
Risk Score
Threat Entry
Updated 2026-09-03
WP Statistics - Security Vulnerability (CVE-2026-84774)
Unauthenticated Cross Site Scripting (XSS) in WP Statistics
PLUGIN
WP Statistics
CVE-2026-84774
Risk Score
Threat Entry
Updated 2026-09-03
WordPress component - Security Vulnerability (CVE-2026-84766)
Unauthenticated Bypass Vulnerability in FluentBooking Pro
UNKNOWN
WordPress component
CVE-2026-84766
Risk Score
Threat Entry
Updated 2026-09-04
WordPress component - Security Vulnerability (CVE-2026-84767)
Unauthenticated Bypass Vulnerability in BookIt
UNKNOWN
WordPress component
CVE-2026-84767
Risk Score
Threat Entry
Updated 2026-09-03
WordPress component - Security Vulnerability (CVE-2026-84762)
Unauthenticated Bypass Vulnerability in WP EasyPay
UNKNOWN
WordPress component
CVE-2026-84762
Risk Score
Threat Entry
Updated 2026-09-03
Business Directory - Security Vulnerability (CVE-2026-84758)
Unauthenticated Broken Access Control in Business Directory
PLUGIN
Business Directory
CVE-2026-84758
Risk Score
Threat Entry
Updated 2026-09-03
Mail Mint - Security Vulnerability (CVE-2026-84755)
Unauthenticated Broken Access Control in Mail Mint
PLUGIN
Mail Mint
CVE-2026-84755
Risk Score
Threat Entry
Updated 2026-09-04
WPFunnels - Security Vulnerability (CVE-2026-84754)
Unauthenticated Broken Access Control in WPFunnels
PLUGIN
WPFunnels
CVE-2026-84754
Risk Score
Threat Entry
Updated 2026-09-03
Timetics - Security Vulnerability (CVE-2026-84215)
Unauthenticated Broken Access Control in Timetics
PLUGIN
Timetics
CVE-2026-84215
Risk Score
Threat Entry
Updated 2026-09-04
Product Variations Swatches for WooCommerce - Security Vulnerability (CVE-2026-81282)
Subscriber Cross Site Scripting (XSS) in Product Variations Swatches for WooCommerce
THEME
Product Variations Swatches for WooCommerce
CVE-2026-81282
Risk Score