Live Vulnerability Intelligence
Threat Database
Search CVEs, inspect descriptions, and open detail pages with AI-assisted technical context.
Threat Entry
Updated 2026-07-13
CVE-2026-57365 - reCAPTCHA (v2 & v3) for Asgaros Forum Plugin
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Hitesh Chandwani reCAPTCHA (v2 & v3) for Asgaros Forum recaptcha-for-asgaros-forum allows DOM-Based XSS.This issue affects reCAPTCHA (v2 & v3) for Asgaros Forum: from n/a through
PLUGIN
reCAPTCHA (v2 & v3) for Asgaros Forum
CVE-2026-57365
Risk Score
Threat Entry
Updated 2026-07-13
CVE-2026-57364 - Better Payment – Instant Payments, Donations, Fundraising with Subscriptions & More Plugin
Improper Validation of Specified Quantity in Input vulnerability in WPDeveloper Better Payment – Instant Payments, Donations, Fundraising with Subscriptions & More better-payment allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects Better Payment – Instant Payments, Donations, Fundraising with Subscriptions & More: from n/a through
PLUGIN
Better Payment – Instant Payments, Donations, Fundraising with Subscriptions & More
CVE-2026-57364
Risk Score
Threat Entry
Updated 2026-07-13
CVE-2026-12396 - Wp Job Portal Plugin
The WP Job Portal WordPress plugin before 2.5.5 does not perform capability or ownership checks before allowing job moderation actions, allowing authenticated users with a subscriber-level (self-registerable) account to approve, feature, or reject arbitrary jobs, including those owned by other users.
PLUGIN
Wp Job Portal
CVE-2026-12396
Risk Score
Threat Entry
Updated 2026-07-13
CVE-2026-12397 - Wp Job Portal Plugin
The WP Job Portal WordPress plugin before 2.5.5 does not verify ownership when returning an employer's contact email for a given job, allowing authenticated users with a subscriber-level (self-registerable) account to read other employers' private account email addresses by enumerating job identifiers.
PLUGIN
Wp Job Portal
CVE-2026-12397
Risk Score
Threat Entry
Updated 2026-07-13
CVE-2026-12274 - Tutor Lms Plugin
The Tutor LMS WordPress plugin before 3.9.13 does not verify that the requesting user is allowed to edit a target post before overwriting it in one of its content-builder save handlers, authorizing the request only against an unrelated identifier, allowing authenticated users with instructor-level access to overwrite and take over any post or page on the site, including those owned by administrators.
PLUGIN
Tutor Lms
CVE-2026-12274
Risk Score
Threat Entry
Updated 2026-07-13
CVE-2026-12271 - Tutor Lms Plugin
The Tutor LMS WordPress plugin before 3.9.13 does not verify ownership of the targeted quiz attempt before writing to it, allowing authenticated users with subscriber-level access and above to modify and force-complete other students' quiz attempts, overwriting their recorded marks and pass/fail result.
PLUGIN
Tutor Lms
CVE-2026-12271
Risk Score
Threat Entry
Updated 2026-07-13
CVE-2026-12081 - Elementor Forms Plugin
The Database for Contact Form 7, WPforms, Elementor forms WordPress plugin before 1.5.2 does not restrict the PHP classes allowed when unserializing an attacker-supplied form-field value, allowing unauthenticated users to inject arbitrary PHP objects that are instantiated when an administrator views the stored entry. This is an incomplete fix of CVE-2025-7384 and CVE-2026-2599, whose deserialization paths were hardened while the entry-editor file-field path was missed.
PLUGIN
Elementor Forms
CVE-2026-12081
Risk Score
Threat Entry
Updated 2026-07-13
CVE-2026-12273 - Tutor Lms Plugin
The Tutor LMS WordPress plugin before 3.9.13 does not perform any authorization or post-target validation before creating a comment in one of its handlers, and stores the comment pre-approved, allowing authenticated users with subscriber-level access and above to post auto-approved comments containing arbitrary HTML and links on any content across the site, bypassing the comment moderation queue.
PLUGIN
Tutor Lms
CVE-2026-12273
Risk Score
Threat Entry
Updated 2026-07-13
CVE-2026-10551 - Breeze Cache Plugin
The Breeze Cache WordPress plugin before 2.5.6 is vulnerable to unauthenticated Stored Cross-Site Scripting (XSS) due to a predictable replacement hash used during the HTML minification process and abusing a regular expression. This allows an attacker to inject arbitrary HTML attributes in the final HTML output by anticipating the placeholder format.
PLUGIN
Breeze Cache
CVE-2026-10551
Risk Score
Threat Entry
Updated 2026-07-13
CVE-2026-15010 - Bbp Style Pack Plugin
The bbp Style Pack plugin for WordPress is vulnerable to Stored Cross-Site Scripting in versions up to, and including, 6.4.5 via the Topic Form Additional Fields feature. This is due to insufficient input sanitization in bsp_topic_fields_form_save() (which writes $_POST['bsp_topic_fields_label{n}'] directly to post meta via update_post_meta() with no filtering) and missing output escaping in bsp_topic_content_append_topic_fields() (which concatenates the stored meta value into an HTML and echoes it via apply_filters/echo without esc_html()). This makes it possible for authenticated attackers, with Subscriber-level access and above (who have bbPress topic-creation privileges), to inject arbitrary…
PLUGIN
Bbp Style Pack
CVE-2026-15010
Risk Score
Threat Entry
Updated 2026-07-14
CVE-2026-1382 - Fresh Podcaster Plugin
The fresh Podcaster plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'freshpodcaster' shortcode in all versions up to, and including, 1.0.7 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.
PLUGIN
Fresh Podcaster
CVE-2026-1382
Risk Score
Threat Entry
Updated 2026-07-15
CVE-2026-9017 - Nex Forms Express Wp Form Builder Plugin
The NEX-Forms – Ultimate Forms Plugin for WordPress plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 9.2.2. This is due to the plugin not properly verifying that a user is authorized to perform an action. This makes it possible for unauthenticated attackers to overwrite the saved_admin_email, saved_user_email, and saved_user_email_address fields of arbitrary form entries belonging to other users, and cause the site to dispatch attacker-controlled email content to attacker-chosen recipient addresses.
PLUGIN
Nex Forms Express Wp Form Builder
CVE-2026-9017
Risk Score
Threat Entry
Updated 2026-07-13
CVE-2026-6801 - Context Blog Theme
The Context Blog theme for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 1.3.5 via the context_blog_modal_popup. This makes it possible for unauthenticated attackers to extract the content of password-protected posts.
THEME
Context Blog
CVE-2026-6801
Risk Score
Threat Entry
Updated 2026-07-13
CVE-2026-12126 - Wc Multivendor Marketplace Plugin
The WCFM Marketplace – Multivendor Marketplace for WooCommerce plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Attachment 'post_title' in all versions up to, and including, 3.7.3 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Vendor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. An attacker can plant the payload by uploading a media attachment with a crafted title via the WordPress REST API (/wp-json/wp/v2/media), without ever invoking the…
PLUGIN
Wc Multivendor Marketplace
CVE-2026-12126
Risk Score
Threat Entry
Updated 2026-07-13
CVE-2026-12994 - Wc Frontend Manager Plugin
The WCFM – Frontend Manager for WooCommerce plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 6.7.27. This is due to the plugin not properly verifying that a user is authorized to perform an action. This makes it possible for unauthenticated attackers to inject arbitrary reply content into any store inquiry, overwrite the main inquiry record in wp_wcfm_enquiries, and trigger unsolicited notification emails to customers and vendors. Unlike sibling controller branches (wcfm-enquiry and wcfm-enquiry-manage), the wcfm-my-account-enquiry-manage branch performs no is_user_logged_in() or current_user_can() check, and…
PLUGIN
Wc Frontend Manager
CVE-2026-12994
Risk Score
Threat Entry
Updated 2026-07-14
CVE-2026-11901 - Wp Hotel Booking Plugin
The WP Hotel Booking plugin for WordPress is vulnerable to Insufficient Verification of Data Authenticity in all versions up to, and including, 2.3.1. This is due to the `web_hook_process_paypal_standard()` IPN handler selecting its PayPal validation endpoint from the attacker-controlled `$_REQUEST['test_ipn']` parameter, force-upgrading any `pending` transaction to `completed` when `test_ipn=1`, and omitting post-verification checks on `receiver_email`, `mc_currency`, and `txn_id` uniqueness after receiving a `VERIFIED` response from PayPal. This makes it possible for unauthenticated attackers to mark arbitrary hotel bookings as fully paid without submitting genuine payment to the merchant — either…
PLUGIN
Wp Hotel Booking
CVE-2026-11901
Risk Score
Threat Entry
Updated 2026-07-15
CVE-2026-11898 - White Label Cms Plugin
The White Label CMS plugin for WordPress is vulnerable to Stored Cross-Site Scripting via admin settings in all versions up to, and including, 2.7.12 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with administrator-level permissions and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. This only affects multi-site installations and installations where unfiltered_html has been disabled.
PLUGIN
White Label Cms
CVE-2026-11898
Risk Score
Threat Entry
Updated 2026-07-13
CVE-2026-11591 - Widgets For Google Reviews Plugin
The Widgets for Google Reviews plugin for WordPress is vulnerable to Stored Cross-Site Scripting via admin settings in all versions up to, and including, 13.3 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with editor-level permissions and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. This only affects multi-site installations and installations where unfiltered_html has been disabled.
PLUGIN
Widgets For Google Reviews
CVE-2026-11591
Risk Score
Threat Entry
Updated 2026-07-13
CVE-2026-12738 - WP Easy Pay – Payment and Donation form Builder for Square Plugin
The WP Easy Pay – Payment and Donation form Builder for Square plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 4.5.0. This is due to the plugin not properly verifying that a user is authorized to perform an action. This makes it possible for authenticated attackers, with subscriber-level access and above, to set the status of arbitrary posts and pages to 'draft', effectively unpublishing arbitrary site content.
PLUGIN
WP Easy Pay – Payment and Donation form Builder for Square
CVE-2026-12738
Risk Score
Threat Entry
Updated 2026-07-13
CVE-2026-12103 - Wallet For Woocommerce Plugin
The Wallet for WooCommerce plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 1.6.4. This is due to the plugin not properly verifying that a user is authorized to perform an action. This makes it possible for authenticated attackers, with subscriber-level access and above, to enumerate the login name, email address, and user ID of all WordPress accounts — including administrators — by submitting arbitrary search terms to the AJAX handler. The required 'search-user' nonce is localized into the wallet_param object on the standard…
PLUGIN
Wallet For Woocommerce
CVE-2026-12103
Risk Score