Live Vulnerability Intelligence
Threat Database
Search CVEs, inspect descriptions, and open detail pages with AI-assisted technical context.
Threat Entry
Updated 2026-10-01
Wedevs Project Manager - Security Vulnerability (CVE-2026-97281)
Subscriber Broken Access Control in WP Project Manager
PLUGIN
Wedevs Project Manager
CVE-2026-97281
Risk Score
Threat Entry
Updated 2026-10-01
Premmerce Woocommerce Wishlist - Security Vulnerability (CVE-2026-97268)
Unauthenticated Cross Site Scripting (XSS) in Premmerce Wishlist for WooCommerce
PLUGIN
Premmerce Woocommerce Wishlist
CVE-2026-97268
Risk Score
Threat Entry
Updated 2026-10-01
Maxgalleria - Security Vulnerability (CVE-2026-97260)
Unauthenticated Cross Site Scripting (XSS) in MaxGalleria
PLUGIN
Maxgalleria
CVE-2026-97260
Risk Score
Threat Entry
Updated 2026-10-03
Aruba Migration Tool - Security Vulnerability (CVE-2026-97258)
Subscriber Broken Access Control in Aruba Migration Tool
PLUGIN
Aruba Migration Tool
CVE-2026-97258
Risk Score
Threat Entry
Updated 2026-10-01
Bus Ticket Booking With Seat Reservation - Security Vulnerability (CVE-2026-97251)
Unauthenticated Insecure Direct Object References (IDOR) in Bus Ticket Booking with Seat Reservation
PLUGIN
Bus Ticket Booking With Seat Reservation
CVE-2026-97251
Risk Score
Threat Entry
Updated 2026-10-01
Acymailing - Security Vulnerability (CVE-2026-95588)
Unauthenticated Arbitrary File Deletion in AcyMailing SMTP Newsletter
PLUGIN
Acymailing
CVE-2026-95588
Risk Score
Threat Entry
Updated 2026-10-01
Hide Shipping Method For Woocommerce - Security Vulnerability (CVE-2026-94390)
Editor PHP Object Injection in Hide Shipping Method For WooCommerce
PLUGIN
Hide Shipping Method For Woocommerce
CVE-2026-94390
Risk Score
Threat Entry
Updated 2026-10-01
Wp File Upload - Security Vulnerability (CVE-2026-62071)
Unauthenticated SQL Injection in WordPress File Upload
PLUGIN
Wp File Upload
CVE-2026-62071
Risk Score
Threat Entry
Updated 2026-10-03
WP Full Stripe Free - Security Vulnerability (CVE-2026-62073)
Unauthenticated Broken Access Control in WP Full Stripe Free
THEME
WP Full Stripe Free
CVE-2026-62073
Risk Score
Threat Entry
Updated 2026-10-01
Authorizer - Security Vulnerability (CVE-2026-103752)
Unauthenticated Privilege Escalation in Authorizer
PLUGIN
Authorizer
CVE-2026-103752
Risk Score
Threat Entry
Updated 2026-10-01
Hcaptcha For Forms And More - Security Vulnerability (CVE-2026-103347)
Unauthenticated Bypass Vulnerability in hCaptcha for WP
PLUGIN
Hcaptcha For Forms And More
CVE-2026-103347
Risk Score
Threat Entry
Updated 2026-10-01
Bcs Mcp Manager - Security Vulnerability (CVE-2026-103068)
Subscriber Privilege Escalation in ByteCoreStack – MCP Connector for AI Tools
PLUGIN
Bcs Mcp Manager
CVE-2026-103068
Risk Score
Threat Entry
Updated 2026-10-01
Parallax Section - Security Vulnerability (CVE-2026-102378)
Unauthenticated Cross Site Scripting (XSS) in Parallax Section block
PLUGIN
Parallax Section
CVE-2026-102378
Risk Score
Threat Entry
Updated 2026-10-30
Woo Photo Reviews - Security Vulnerability (CVE-2026-100517)
Authorization Bypass Through User-Controlled Key vulnerability in VillaTheme Photo Reviews for WooCommerce woo-photo-reviews allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Photo Reviews for WooCommerce: from n/a through 1.2.30.
PLUGIN
Woo Photo Reviews
CVE-2026-100517
Risk Score
Threat Entry
Updated 2026-10-01
Wp Rest Api Log - Security Vulnerability (CVE-2026-100514)
Unauthenticated Insecure Direct Object References (IDOR) in REST API Log
PLUGIN
Wp Rest Api Log
CVE-2026-100514
Risk Score
Threat Entry
Updated 2026-10-01
Captivatesync Trade - Security Vulnerability (CVE-2026-62060)
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in captivateaudio Captivate Sync captivatesync-trade allows Blind SQL Injection.This issue affects Captivate Sync: from n/a through 3.3.2.
PLUGIN
Captivatesync Trade
CVE-2026-62060
Risk Score
Threat Entry
Updated 2026-10-01
Ultimate Member - Security Vulnerability (CVE-2026-62059)
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Ultimate Member Ultimate Member ultimate-member allows Blind SQL Injection.This issue affects Ultimate Member: from n/a through 2.13.1.
PLUGIN
Ultimate Member
CVE-2026-62059
Risk Score
Threat Entry
Updated 2026-10-01
Tour Booking Manager - Security Vulnerability (CVE-2026-62063)
Missing Authorization vulnerability in Magepeople inc. WpTravelly tour-booking-manager allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WpTravelly: from n/a through 2.3.1.
PLUGIN
Tour Booking Manager
CVE-2026-62063
Risk Score
Threat Entry
Updated 2026-10-01
Profilegrid User Profiles Groups And Communities - Security Vulnerability (CVE-2026-62061)
Authorization Bypass Through User-Controlled Key vulnerability in Metagauss ProfileGrid profilegrid-user-profiles-groups-and-communities allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects ProfileGrid: from n/a through 6.0.0.2.
PLUGIN
Profilegrid User Profiles Groups And Communities
CVE-2026-62061
Risk Score
Threat Entry
Updated 2026-10-01
Pie Register - Security Vulnerability (CVE-2026-103345)
Insertion of Sensitive Information Into Sent Data vulnerability in Shamim Rajani Pie Register pie-register allows Retrieve Embedded Sensitive Data.This issue affects Pie Register: from n/a through 3.8.4.13.
PLUGIN
Pie Register
CVE-2026-103345
Risk Score