Threat Entry Updated 2026-06-17

CVE-2026-42655 - WordPress component

Unauthenticated Bypass Vulnerability in Best Payments Plugin for WP

UNKNOWN WordPress component

CVE-2026-42655

MEDIUM CVSS 5.9 2026-06-15

Risk Score

Open Full Technical Breakdown

Threat Entry Updated 2026-06-17

CVE-2026-42657 - WordPress component

Unauthenticated Other Vulnerability Type in Contest Gallery

UNKNOWN WordPress component

CVE-2026-42657

MEDIUM CVSS 5.3 2026-06-15

Risk Score

Open Full Technical Breakdown

Threat Entry Updated 2026-06-17

CVE-2026-42640 - WordPress component

Unauthenticated Broken Access Control in Classified Listing

UNKNOWN WordPress component

CVE-2026-42640

MEDIUM CVSS 6.5 2026-06-15

Risk Score

Open Full Technical Breakdown

Threat Entry Updated 2026-06-17

CVE-2026-42651 - WordPress component

Subscriber Broken Access Control in Classified Listing

UNKNOWN WordPress component

CVE-2026-42651

MEDIUM CVSS 6.3 2026-06-15

Risk Score

Open Full Technical Breakdown

Threat Entry Updated 2026-06-17

CVE-2026-42378 - WordPress component

Subscriber Broken Authentication in WP Full Stripe Free

UNKNOWN WordPress component

CVE-2026-42378

MEDIUM CVSS 6.5 2026-06-15

Risk Score

Open Full Technical Breakdown

Threat Entry Updated 2026-06-17

CVE-2026-41556 - WordPress component

Subscriber Cross Site Scripting (XSS) in ProfilePress

UNKNOWN WordPress component

CVE-2026-41556

MEDIUM CVSS 6.5 2026-06-15

Risk Score

Open Full Technical Breakdown

Threat Entry Updated 2026-06-17

CVE-2026-40796 - WordPress component

Subscriber Sensitive Data Exposure in WPPizza

UNKNOWN WordPress component

CVE-2026-40796

MEDIUM CVSS 6.5 2026-06-15

Risk Score

Open Full Technical Breakdown

Threat Entry Updated 2026-06-17

CVE-2026-40799 - WordPress component

Unauthenticated Broken Authentication in Simple Cloudflare Turnstile

UNKNOWN WordPress component

CVE-2026-40799

MEDIUM CVSS 5.3 2026-06-15

Risk Score

Open Full Technical Breakdown

Threat Entry Updated 2026-06-17

CVE-2026-40795 - WordPress component

Subscriber Broken Access Control in Amelia

UNKNOWN WordPress component

CVE-2026-40795

MEDIUM CVSS 6.5 2026-06-15

Risk Score

Open Full Technical Breakdown

Threat Entry Updated 2026-06-17

CVE-2026-40794 - WordPress component

Subscriber Broken Access Control in myCred

UNKNOWN WordPress component

CVE-2026-40794

MEDIUM CVSS 6.5 2026-06-15

Risk Score

Open Full Technical Breakdown

Threat Entry Updated 2026-06-17

CVE-2026-40793 - WordPress component

Subscriber Broken Access Control in Groundhogg < 4.4.1 versions.

UNKNOWN WordPress component

CVE-2026-40793

MEDIUM CVSS 6.5 2026-06-15

Risk Score

Open Full Technical Breakdown

Threat Entry Updated 2026-06-17

CVE-2026-40790 - WordPress component

Subscriber Sensitive Data Exposure in WP SMS

UNKNOWN WordPress component

CVE-2026-40790

MEDIUM CVSS 6.5 2026-06-15

Risk Score

Open Full Technical Breakdown

Threat Entry Updated 2026-06-17

CVE-2026-40792 - WordPress component

Subscriber Insecure Direct Object References (IDOR) in KiviCare

UNKNOWN WordPress component

CVE-2026-40792

MEDIUM CVSS 6.3 2026-06-15

Risk Score

Open Full Technical Breakdown

Threat Entry Updated 2026-06-17

CVE-2026-40782 - WordPress component

Unauthenticated Broken Access Control in WPAdverts

UNKNOWN WordPress component

CVE-2026-40782

MEDIUM CVSS 6.5 2026-06-15

Risk Score

Open Full Technical Breakdown

Threat Entry Updated 2026-06-17

CVE-2026-40773 - WordPress Core

Subscriber Broken Access Control in rtMedia for WordPress, BuddyPress and bbPress

CORE WordPress Core

CVE-2026-40773

MEDIUM CVSS 6.5 2026-06-15

Risk Score

Open Full Technical Breakdown

Threat Entry Updated 2026-06-17

CVE-2026-40743 - WordPress component

Unauthenticated Broken Access Control in Tutor LMS

UNKNOWN WordPress component

CVE-2026-40743

MEDIUM CVSS 6.5 2026-06-15

Risk Score

Open Full Technical Breakdown

Threat Entry Updated 2026-06-17

CVE-2026-39594 - WPForms Plugin

Subscriber Broken Access Control in Ultra Addons for WPForms

PLUGIN WPForms

CVE-2026-39594

MEDIUM CVSS 6.4 2026-06-15

Risk Score

Open Full Technical Breakdown

Threat Entry Updated 2026-06-17

CVE-2026-39584 - WordPress component

Subscriber Broken Access Control in RepairBuddy

UNKNOWN WordPress component

CVE-2026-39584

MEDIUM CVSS 6.5 2026-06-15

Risk Score

Open Full Technical Breakdown

Threat Entry Updated 2026-06-17

CVE-2026-39540 - WordPress component

Subscriber Cross Site Scripting (XSS) in Shipment Tracker for Woocommerce

UNKNOWN WordPress component

CVE-2026-39540

MEDIUM CVSS 6.5 2026-06-15

Risk Score

Open Full Technical Breakdown

Threat Entry Updated 2026-06-17

CVE-2026-39525 - WordPress component

Unauthenticated Broken Access Control in Booking Activities

UNKNOWN WordPress component

CVE-2026-39525

MEDIUM CVSS 6.5 2026-06-15

Risk Score

Open Full Technical Breakdown