Live Vulnerability Intelligence
Threat Database
Search CVEs, inspect descriptions, and open detail pages with AI-assisted technical context.
Threat Entry
Updated 2026-06-17
CVE-2026-4301 - Rate Star Review Plugin
The Rate Star Review Vote - AJAX Reviews, Votes, Star Ratings plugin for WordPress is vulnerable to Missing Authorization in all versions up to and including 1.6.4. The vwrsr_review() AJAX handler lacks both capability checks and nonce verification. The only access control is an is_user_logged_in() check. When the 'form' parameter is set to 'update', the function takes an arbitrary post ID from the user-supplied 'rating_id' GET parameter, sets it as the post ID in the update array, and passes it directly to wp_update_post(). This overwrites the target post's title, content,…
PLUGIN
Rate Star Review
CVE-2026-4301
Risk Score
Threat Entry
Updated 2026-06-17
CVE-2026-39432 - Timetics Plugin
Missing Authorization vulnerability in Arraytics Timetics allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects Timetics: from n/a through 1.0.53.
PLUGIN
Timetics
CVE-2026-39432
Risk Score
Threat Entry
Updated 2026-06-17
CVE-2026-2993 - Ai Copilot Content Generator Plugin
The AI Chatbot & Workflow Automation by AIWU plugin for WordPress is vulnerable to SQL Injection in versions up to, and including, 1.4.17 due to insufficient escaping on user supplied parameters and lack of sufficient preparation on the existing SQL query in the getListForTbl() function. This makes it possible for unauthenticated attackers to append additional SQL queries into already existing queries that can be used to extract sensitive information from the database. NOTE: This issue is partially mitigated by a patch in version 1.4.11 that adds a nonce check for…
PLUGIN
Ai Copilot Content Generator
CVE-2026-2993
Risk Score
Threat Entry
Updated 2026-06-17
CVE-2026-3604 - Wp Seo Structured Data Schema Plugin
The WP SEO Structured Data Schema plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the `_kcseo_ative_tab` parameter in all versions up to, and including, 2.8.1 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.
PLUGIN
Wp Seo Structured Data Schema
CVE-2026-3604
Risk Score
Threat Entry
Updated 2026-06-17
CVE-2026-2300 - Bj Lazy Load Plugin
The BJ Lazy Load plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the `filter_images()` function in all versions up to, and including, 1.0.9. This is due to the use of regex-based HTML processing (`preg_replace`) that does not properly handle HTML attribute boundaries when replacing `src` attributes, allowing crafted content inside a `class` attribute value to be promoted to real DOM attributes after processing. This makes it possible for authenticated attackers, with Contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user…
PLUGIN
Bj Lazy Load
CVE-2026-2300
Risk Score
Threat Entry
Updated 2026-06-17
CVE-2026-6433 - Custom Css Js Php Plugin
The Custom css-js-php WordPress plugin through 2.0.7 does not properly sanitize user input before using it in a SQL query, and the result is passed to eval(), allowing unauthenticated users to execute arbitrary PHP code on the server.
PLUGIN
Custom Css Js Php
CVE-2026-6433
Risk Score
Threat Entry
Updated 2026-07-24
CVE-2026-8198 - Activity Logs, User Activity Tracking, Multisite Activity Log from Logtivity Plugin
The Activity Logs, User Activity Tracking, Multisite Activity Log from Logtivity plugin for WordPress is vulnerable to Authentication Bypass to Information Disclosure in versions up to, and including, 3.3.6. This is due to a logic flaw in the verifyAuthorization method where requests without an Authorization header skip Bearer token validation and fall through to an unconditional return true statement, bypassing all authentication checks. This makes it possible for unauthenticated attackers to access the /wp-json/logtivity/v1/options REST API endpoint and retrieve all plugin configuration options, including the logtivity_site_api_key which can be used…
PLUGIN
Activity Logs, User Activity Tracking, Multisite Activity Log from Logtivity
CVE-2026-8198
Risk Score
Threat Entry
Updated 2026-07-24
CVE-2026-7652 - LatePoint – Calendar Booking Plugin for Appointments and Events
The LatePoint plugin for WordPress is vulnerable to Account Takeover via Weak Password Recovery Mechanism in the unauthenticated guest booking flow in versions up to, and including, 5.5.0 This is due to the save_connected_wordpress_user() function propagating a LatePoint customer's email address to its linked WordPress user account via wp_update_user() without any ownership verification, combined with the guest booking flow's ability to overwrite an existing customer's email through phone-based merge without authentication. This makes it possible for unauthenticated attackers to overwrite the email address of a non-super-admin WordPress user account that…
PLUGIN
LatePoint – Calendar Booking Plugin for Appointments and Events
CVE-2026-7652
Risk Score
Threat Entry
Updated 2026-06-17
CVE-2026-7650 - Export Pdf Tool For Wordpress Plugin
The E2Pdf – Export Pdf Tool for WordPress plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'id' attribute of the `e2pdf-download` shortcode in all versions up to, and including, 1.32.17. This is due to insufficient input sanitization and output escaping on the shortcode attribute. This makes it possible for authenticated attackers, with Contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.
PLUGIN
Export Pdf Tool For Wordpress
CVE-2026-7650
Risk Score
Threat Entry
Updated 2026-06-17
CVE-2026-7475 - Sky Elementor Addons Plugin
The Sky Addons plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the `sky-custom-scripts` custom post type in all versions up to, and including, 3.3.2. This is due to the custom post type being registered with `capability_type => 'post'` and `show_in_rest => true`, combined with insufficient input sanitization on the `sky_script_content` meta field and lack of output escaping when rendering scripts on the frontend. This makes it possible for authenticated attackers, with Author-level access and above, to inject arbitrary web scripts via the REST API that execute on every…
PLUGIN
Sky Elementor Addons
CVE-2026-7475
Risk Score
Threat Entry
Updated 2026-06-17
CVE-2026-5341 - Nmr Strava Activities Plugin
The NMR Strava activities plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's `strava_nmr_connect` shortcode in all versions up to, and including, 1.0.14 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.
PLUGIN
Nmr Strava Activities
CVE-2026-5341
Risk Score
Threat Entry
Updated 2026-06-17
CVE-2026-7330 - Wp Auto Affiliate Links Plugin
The Auto Affiliate Links plugin for WordPress is vulnerable to Stored Cross-Site Scripting in versions up to, and including, 6.8.8 This is due to insufficient input sanitization on the 'url' POST parameter in the aal_url_stats_save_action() function and a complete absence of output escaping in aal_display_clicks(), where the stored value is echoed directly into an anchor element's href attribute and inner text without esc_url(), esc_attr(), or esc_html(). This makes it possible for unauthenticated attackers to inject arbitrary web scripts into the admin statistics page that execute in an administrator's browser when…
PLUGIN
Wp Auto Affiliate Links
CVE-2026-7330
Risk Score
Threat Entry
Updated 2026-06-17
CVE-2026-5127 - Wp User Frontend Plugin
The User Frontend: AI Powered Frontend Posting, User Directory, Profile, Membership & User Registration plugin for WordPress is vulnerable to Deserialization of Untrusted Data in versions up to, and including, 4.3.1 This is due to insufficient input validation and type checking on the wpuf_files parameter during form submission, combined with unconditional deserialization via maybe_unserialize() when displaying post content. This makes it possible for authenticated attackers, with Subscriber-level access and above, to inject arbitrary PHP objects, which can be leveraged to execute arbitrary code, delete arbitrary files, or perform other malicious…
PLUGIN
Wp User Frontend
CVE-2026-5127
Risk Score
Threat Entry
Updated 2026-06-17
CVE-2026-4935 - All In One Automation Platform Plugin
The OttoKit: All-in-One Automation Platform WordPress plugin before 1.1.23 does not properly sanitize user input before using it in a SQL statement, which could allow unauthenticated attackers to perform SQL injection attacks.
PLUGIN
All In One Automation Platform
CVE-2026-4935
Risk Score
Threat Entry
Updated 2026-06-17
CVE-2026-41554 - Bricks Builder Plugin
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Bricks Builder allows Reflected XSS. This issue affects Bricks Builder: from n/a through 1.9.2 to 2.2.
PLUGIN
Bricks Builder
CVE-2026-41554
Risk Score
Threat Entry
Updated 2026-06-17
CVE-2026-27415 - BEAR Plugin
Cross-Site Request Forgery (CSRF) vulnerability in PluginUs.Net BEAR allows Cross Site Request Forgery. This issue affects BEAR: from n/a through 1.1.5.
PLUGIN
BEAR
CVE-2026-27415
Risk Score
Threat Entry
Updated 2026-06-17
CVE-2026-27421 - Elementor Plugin
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WProyal Royal Elementor Addons allows Stored XSS. This issue affects Royal Elementor Addons: from n/a before 1.7.1053.
PLUGIN
Elementor
CVE-2026-27421
Risk Score
Threat Entry
Updated 2026-06-17
CVE-2026-27416 - PDF Poster Plugin
Missing Authorization vulnerability in bPlugins PDF Poster allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects PDF Poster: from n/a through 2.4.1.
PLUGIN
PDF Poster
CVE-2026-27416
Risk Score
Threat Entry
Updated 2026-06-17
CVE-2026-27329 - YITH WooCommerce Wishlist Plugin
Authorization Bypass Through User-Controlled Key vulnerability in YITH YITH WooCommerce Wishlist allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects YITH WooCommerce Wishlist: from n/a through 4.12.0.
PLUGIN
YITH WooCommerce Wishlist
CVE-2026-27329
Risk Score
Threat Entry
Updated 2026-06-17
CVE-2026-25468 - Elementor Plugin
Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in weDevs Happy Addons for Elementor allows Retrieve Embedded Sensitive Data. This issue affects Happy Addons for Elementor: from n/a through 3.20.8.
PLUGIN
Elementor
CVE-2026-25468
Risk Score