Live Vulnerability Intelligence
Threat Database
Search CVEs, inspect descriptions, and open detail pages with AI-assisted technical context.
Threat Entry
Updated 2026-10-06
Real Cookie Banner - Security Vulnerability (CVE-2026-92977)
The Real Cookie Banner: GDPR & ePrivacy Cookie Consent plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Comment in all versions up to, and including, 5.3.5 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. Malicious script payloads placed in the title attribute of an anchor tag survive WordPress's comment kses filter at save time, as the payload is only promoted to executable HTML attributes…
PLUGIN
Real Cookie Banner
CVE-2026-92977
Risk Score
Threat Entry
Updated 2026-10-06
Ewww Image Optimizer - Security Vulnerability (CVE-2026-92826)
The EWWW Image Optimizer plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via REQUEST_URI Parameter Key in all versions up to, and including, 8.7.7 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that execute if they can successfully trick a user into performing an action such as clicking on a link. Successful exploitation requires that the enable_help option is active, as the vulnerable HelpScout Beacon script block is only emitted when that setting is enabled.
PLUGIN
Ewww Image Optimizer
CVE-2026-92826
Risk Score
Threat Entry
Updated 2026-10-06
Embedpress - Security Vulnerability (CVE-2026-92727)
The EmbedPress – PDF Embedder, 3D PDF FlipBook, Google Reviews, YouTube Videos, Upload & Embed PDF documents plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'slidesShow' Block Attribute in all versions up to, and including, 4.6.6 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. The slidesShow block attribute is interpolated into an unquoted data-carousel-options HTML attribute, allowing a payload…
PLUGIN
Embedpress
CVE-2026-92727
Risk Score
Threat Entry
Updated 2026-10-06
Wp User Avatar - Security Vulnerability (CVE-2026-92551)
The Paid Membership Plugin, Ecommerce, User Registration Form, Login Form, User Profile & Restrict Content – ProfilePress plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via ppress_billing_address Filename Parameter in all versions up to, and including, 4.17.4 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that execute if they can successfully trick a user into performing an action such as clicking on a link. The vulnerability is exploitable via any page hosting the ProfilePress Tabbed…
PLUGIN
Wp User Avatar
CVE-2026-92551
Risk Score
Threat Entry
Updated 2026-10-06
Learnpress - Security Vulnerability (CVE-2026-92538)
The LearnPress – WordPress LMS Plugin for Create and Sell Online Courses plugin for WordPress is vulnerable to Reflected DOM-Based Cross-Site Scripting via the 'orderby' parameter in all versions up to, and including, 4.4.7 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that execute if they can successfully trick a user into performing an action such as clicking on a link.
PLUGIN
Learnpress
CVE-2026-92538
Risk Score
Threat Entry
Updated 2026-10-06
Wp User Avatar - Security Vulnerability (CVE-2026-92536)
The Paid Membership Plugin, Ecommerce, User Registration Form, Login Form, User Profile & Restrict Content – ProfilePress plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 4.17.4 via the get_user_profile_structure. This makes it possible for authenticated attackers, with subscriber-level access and above, to extract other users' email addresses, login names, and registration dates via the Member Directory's per-row user rebinding when attacker-controlled base64 payloads in the [pp-custom-html] shortcode invoke [profile-email], [profile-username], and [profile-date-registered]. When the WordPress users_can_register option is enabled, unauthenticated attackers can…
PLUGIN
Wp User Avatar
CVE-2026-92536
Risk Score
Threat Entry
Updated 2026-10-06
Ultimate Member - Security Vulnerability (CVE-2026-93428)
The Ultimate Member – User Profile, Registration, Login, Member Directory, Content Restriction & Membership Plugin plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 2.13.1 This is due to the plugin not properly verifying that a user is authorized to perform an action. This makes it possible for unauthenticated attackers to view privacy-restricted member profile field values — including fields explicitly configured as owner-only, members-only, or role-restricted — by querying the publicly accessible wp_ajax_nopriv_um_get_members endpoint. The nonce required by the endpoint ('um-frontend-nonce') is emitted…
PLUGIN
Ultimate Member
CVE-2026-93428
Risk Score
Threat Entry
Updated 2026-10-06
Ultimate Member - Security Vulnerability (CVE-2026-96270)
The Ultimate Member – User Profile, Registration, Login, Member Directory, Content Restriction & Membership Plugin plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'form_id' parameter in all versions up to, and including, 2.13.1 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. The injected payload is stored in the registering user's 'submitted' usermeta via update_user_meta() and is only triggered when an administrator opens the…
PLUGIN
Ultimate Member
CVE-2026-96270
Risk Score
Threat Entry
Updated 2026-10-06
Beaver Builder Lite Version - Security Vulnerability (CVE-2026-95865)
The Beaver Builder Page Builder – Drag and Drop Website Builder plugin for WordPress is vulnerable to blind SQL Injection via 'fields[][value]' Parameter in all versions up to, and including, 2.11.0.5 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it possible for authenticated attackers, with contributor-level access and above, to append additional SQL queries into already existing queries that can be used to extract sensitive information from the database. The vulnerable get_autosuggest_values AJAX endpoint is reachable by…
PLUGIN
Beaver Builder Lite Version
CVE-2026-95865
Risk Score
Threat Entry
Updated 2026-10-06
Supportcandy - Security Vulnerability (CVE-2026-94539)
The SupportCandy – AI Customer Support Ticket System & Live Chatbot Agent plugin for WordPress is vulnerable to time-based SQL Injection via the 'sort_by' parameter in all versions up to, and including, 3.5.3 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it possible for authenticated attackers, with custom-level access and above, to append additional SQL queries into already existing queries that can be used to extract sensitive information from the database. Exploitation requires the authenticated attacker to…
PLUGIN
Supportcandy
CVE-2026-94539
Risk Score
Threat Entry
Updated 2026-10-06
Supportcandy - Security Vulnerability (CVE-2026-94378)
The SupportCandy – AI Customer Support Ticket System & Live Chatbot Agent plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'name' parameter in all versions up to, and including, 3.5.3 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with subscriber-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. This exploit chain requires the 'Register user if not exists' setting to be disabled, which is its default configuration.
PLUGIN
Supportcandy
CVE-2026-94378
Risk Score
Threat Entry
Updated 2026-10-06
Add Search To Menu - Security Vulnerability (CVE-2026-92243)
The Ivory Search – WordPress Search Plugin plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 's' parameter in all versions up to, and including, 5.5.18 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. Exploitation requires that the targeted search form has the 'Highlight Search Terms' option enabled by an administrator, and that the malicious search query returns at least one post result.
PLUGIN
Add Search To Menu
CVE-2026-92243
Risk Score
Threat Entry
Updated 2026-10-06
Jeg Elementor Kit - Security Vulnerability (CVE-2026-100180)
The Jeg Kit for Elementor – Powerful Addons for Elementor, Widgets & Templates for WordPress plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Comment in all versions up to, and including, 3.2.19 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. Immediate persistence without moderator approval is possible when the attacker submits from an email address with at least one previously approved comment, though the…
PLUGIN
Jeg Elementor Kit
CVE-2026-100180
Risk Score
Threat Entry
Updated 2026-10-06
Wallstreet - Security Vulnerability (CVE-2026-39718)
Cross-Site Request Forgery (CSRF) vulnerability in Webriti Wallstreet wallstreet allows Cross Site Request Forgery.This issue affects Wallstreet: from n/a through 2.8.6.
THEME
Wallstreet
CVE-2026-39718
Risk Score
Threat Entry
Updated 2026-10-06
One SEO WordPress - Security Vulnerability (CVE-2026-19856)
The All in One SEO WordPress plugin before 5.0.2.1 does not correctly determine which shortcodes are present in content derived from user input before deciding which ones to strip, allowing unauthenticated users to execute arbitrary shortcodes registered on the site. On sites upgraded from older versions the protection is disabled outright, making the issue reachable without any crafted input.
PLUGIN
One SEO WordPress
CVE-2026-19856
Risk Score
Threat Entry
Updated 2026-10-09
Learnpress - Security Vulnerability (CVE-2026-39717)
Missing Authorization vulnerability in ThimPress LearnPress learnpress allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects LearnPress: from n/a through 4.4.10.
PLUGIN
Learnpress
CVE-2026-39717
Risk Score
Threat Entry
Updated 2026-10-02
Websamurai - Security Vulnerability (CVE-2026-39439)
Missing Authorization vulnerability in Kiera Howe WebSamurai websamurai allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WebSamurai: from n/a through 1.0.7.
PLUGIN
Websamurai
CVE-2026-39439
Risk Score
Threat Entry
Updated 2026-10-03
Airano Mcp Bridge - Security Vulnerability (CVE-2026-32585)
Missing Authorization vulnerability in airano Airano MCP Bridge airano-mcp-bridge allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Airano MCP Bridge: from n/a through 2.11.0.
PLUGIN
Airano Mcp Bridge
CVE-2026-32585
Risk Score
Threat Entry
Updated 2026-10-02
Organize Series - Security Vulnerability (CVE-2026-39444)
Authorization Bypass Through User-Controlled Key vulnerability in PublishPress PublishPress Series organize-series allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects PublishPress Series: from n/a through 3.1.3.
PLUGIN
Organize Series
CVE-2026-39444
Risk Score
Threat Entry
Updated 2026-10-02
Smart One Click Setup - Security Vulnerability (CVE-2026-32584)
Insertion of Sensitive Information Into Sent Data vulnerability in Chiranjit Hazarika Smart One Click Setup – Complete Demo Import & Export smart-one-click-setup allows Retrieve Embedded Sensitive Data.This issue affects Smart One Click Setup – Complete Demo Import & Export: from n/a through 1.4.3.
PLUGIN
Smart One Click Setup
CVE-2026-32584
Risk Score