Live Vulnerability Intelligence
Threat Database
Search CVEs, inspect descriptions, and open detail pages with AI-assisted technical context.
Threat Entry
Updated 2026-11-07
Js Support Ticket - Security Vulnerability (CVE-2026-119513)
Missing Authorization vulnerability in Ahmad JS Help Desk js-support-ticket allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects JS Help Desk: from n/a through 5.0.3.
PLUGIN
Js Support Ticket
CVE-2026-119513
Risk Score
Threat Entry
Updated 2026-11-07
Radius Booking - Security Vulnerability (CVE-2026-119508)
Missing Authorization vulnerability in Mamunur Rashid Radius Booking — Booking Calendar for Appointments & Services radius-booking allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Radius Booking — Booking Calendar for Appointments & Services: from n/a through 1.0.20.
PLUGIN
Radius Booking
CVE-2026-119508
Risk Score
Threat Entry
Updated 2026-11-07
Dropshipping Xml For Woocommerce - Security Vulnerability (CVE-2026-119525)
Missing Authorization vulnerability in WP Desk Dropshipping XML for WooCommerce dropshipping-xml-for-woocommerce allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Dropshipping XML for WooCommerce: from n/a through 1.7.4.
PLUGIN
Dropshipping Xml For Woocommerce
CVE-2026-119525
Risk Score
Threat Entry
Updated 2026-11-07
Bdthemes Element Pack Lite - Security Vulnerability (CVE-2026-119501)
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in BdThemes Element Pack Elementor Addons bdthemes-element-pack-lite allows Stored XSS.This issue affects Element Pack Elementor Addons: from n/a through 10.0.2.
PLUGIN
Bdthemes Element Pack Lite
CVE-2026-119501
Risk Score
Threat Entry
Updated 2026-11-09
Media Library Assistant - Security Vulnerability (CVE-2026-119496)
Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) vulnerability in David Lingren Media LIbrary Assistant media-library-assistant allows Code Injection.This issue affects Media LIbrary Assistant: from n/a through 3.43.
PLUGIN
Media Library Assistant
CVE-2026-119496
Risk Score
Threat Entry
Updated 2026-11-09
Bnfw - Security Vulnerability (CVE-2026-119490)
Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) vulnerability in Made with Fuel Ltd. Better Notifications for WP bnfw allows Code Injection.This issue affects Better Notifications for WP: from n/a through 1.10.1.
PLUGIN
Bnfw
CVE-2026-119490
Risk Score
Threat Entry
Updated 2026-11-07
Ditty News Ticker - Security Vulnerability (CVE-2026-119492)
Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) vulnerability in Metaphor Creations, LLC Ditty ditty-news-ticker allows Code Injection.This issue affects Ditty: from n/a through 3.1.71.
PLUGIN
Ditty News Ticker
CVE-2026-119492
Risk Score
Threat Entry
Updated 2026-11-07
Masterstudy Lms Learning Management System - Security Vulnerability (CVE-2026-119478)
Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) vulnerability in StylemixThemes MasterStudy LMS masterstudy-lms-learning-management-system allows Code Injection.This issue affects MasterStudy LMS: from n/a through 3.7.56.
PLUGIN
Masterstudy Lms Learning Management System
CVE-2026-119478
Risk Score
Threat Entry
Updated 2026-11-08
wpForo Forum - Security Vulnerability (CVE-2026-95870)
The wpForo Forum plugin for WordPress is vulnerable to generic SQL Injection via the 'data' parameter in all versions up to, and including, 3.2.1 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it possible for unauthenticated attackers to append additional SQL queries into already existing queries that can be used to extract sensitive information from the database. Exploitation requires that a searchable topic form field of type checkbox, or a select/autocomplete field with isMultiChoice enabled, is registered…
PLUGIN
wpForo Forum
CVE-2026-95870
Risk Score
Threat Entry
Updated 2026-11-09
Wc Multivendor Membership - Security Vulnerability (CVE-2026-61990)
Missing Authorization vulnerability in WC Lovers WCFM Membership wc-multivendor-membership allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WCFM Membership: from n/a through 2.12.0.
PLUGIN
Wc Multivendor Membership
CVE-2026-61990
Risk Score
Threat Entry
Updated 2026-11-07
Powerpress - Security Vulnerability (CVE-2026-121762)
Cross-Site Request Forgery (CSRF) vulnerability in Blubrry Podcasting PowerPress Podcasting powerpress allows Cross Site Request Forgery.This issue affects PowerPress Podcasting: from n/a through 11.18.0.
PLUGIN
Powerpress
CVE-2026-121762
Risk Score
Threat Entry
Updated 2026-11-07
The Events Calendar - Security Vulnerability (CVE-2026-123464)
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Liquid Web / StellarWP The Events Calendar the-events-calendar allows Stored XSS.This issue affects The Events Calendar: from n/a through 6.18.3.
PLUGIN
The Events Calendar
CVE-2026-123464
Risk Score
Threat Entry
Updated 2026-11-07
Powerpress - Security Vulnerability (CVE-2026-121766)
Missing Authorization vulnerability in Blubrry Podcasting PowerPress Podcasting powerpress allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects PowerPress Podcasting: from n/a through 11.18.0.
PLUGIN
Powerpress
CVE-2026-121766
Risk Score
Threat Entry
Updated 2026-11-09
The Events Calendar - Security Vulnerability (CVE-2026-123469)
Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) vulnerability in Liquid Web / StellarWP The Events Calendar the-events-calendar allows Code Injection.This issue affects The Events Calendar: from n/a through 6.18.3.
PLUGIN
The Events Calendar
CVE-2026-123469
Risk Score
Threat Entry
Updated 2026-11-07
Premium Blocks For Gutenberg - Security Vulnerability (CVE-2026-123466)
Missing Authorization vulnerability in LeapWorx Premium Blocks – Gutenberg Blocks for WordPress premium-blocks-for-gutenberg allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Premium Blocks – Gutenberg Blocks for WordPress: from n/a through 2.3.18.
PLUGIN
Premium Blocks For Gutenberg
CVE-2026-123466
Risk Score
Threat Entry
Updated 2026-11-07
Mycred - Security Vulnerability (CVE-2026-122668)
Missing Authorization vulnerability in myCred myCred mycred allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects myCred: from n/a through 4.0.2.
PLUGIN
Mycred
CVE-2026-122668
Risk Score
Threat Entry
Updated 2026-11-07
Elementor - Security Vulnerability (CVE-2026-120850)
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Elementor Elementor Website Builder elementor allows Stored XSS.This issue affects Elementor Website Builder: from n/a through 4.3.5.
PLUGIN
Elementor
CVE-2026-120850
Risk Score
Threat Entry
Updated 2026-11-07
Cartflows - Security Vulnerability (CVE-2026-120853)
Missing Authorization vulnerability in Brainstorm Force CartFlows cartflows allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects CartFlows: from n/a through 3.3.0.
PLUGIN
Cartflows
CVE-2026-120853
Risk Score
Threat Entry
Updated 2026-11-09
Cartflows - Security Vulnerability (CVE-2026-120852)
Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) vulnerability in Brainstorm Force CartFlows cartflows allows Code Injection.This issue affects CartFlows: from n/a through 3.3.0.
PLUGIN
Cartflows
CVE-2026-120852
Risk Score
Threat Entry
Updated 2026-11-07
Sureforms - Security Vulnerability (CVE-2026-120842)
Missing Authorization vulnerability in Brainstorm Force SureForms sureforms allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects SureForms: from n/a through 2.13.0.
PLUGIN
Sureforms
CVE-2026-120842
Risk Score