Live Vulnerability Intelligence
Threat Database
Search CVEs, inspect descriptions, and open detail pages with AI-assisted technical context.
Threat Entry
Updated 2026-10-12
Multiple Pages Generator By Porthas - Security Vulnerability (CVE-2026-97302)
Unauthenticated Sensitive Data Exposure in MPG
PLUGIN
Multiple Pages Generator By Porthas
CVE-2026-97302
Risk Score
Threat Entry
Updated 2026-09-30
Media Library Assistant - Security Vulnerability (CVE-2026-97293)
Contributor SQL Injection in Media LIbrary Assistant
PLUGIN
Media Library Assistant
CVE-2026-97293
Risk Score
Threat Entry
Updated 2026-10-09
Quiz And Survey Master - Security Vulnerability (CVE-2026-97289)
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in ExpressTech Quiz And Survey Master quiz-master-next allows DOM-Based XSS.This issue affects Quiz And Survey Master: from n/a through 11.2.6.
PLUGIN
Quiz And Survey Master
CVE-2026-97289
Risk Score
Threat Entry
Updated 2026-10-23
Extensions For Elementor Form - Security Vulnerability (CVE-2026-97301)
Contributor Cross Site Scripting (XSS) in Cool Formkit Lite
PLUGIN
Extensions For Elementor Form
CVE-2026-97301
Risk Score
Threat Entry
Updated 2026-09-30
King Addons - Security Vulnerability (CVE-2026-97298)
Contributor Cross Site Scripting (XSS) in King Addons for Elementor
PLUGIN
King Addons
CVE-2026-97298
Risk Score
Threat Entry
Updated 2026-09-30
Yith Woocommerce Tab Manager - Security Vulnerability (CVE-2026-97292)
Author Cross Site Scripting (XSS) in YITH WooCommerce Tab Manager
PLUGIN
Yith Woocommerce Tab Manager
CVE-2026-97292
Risk Score
Threat Entry
Updated 2026-09-30
Oauth2 Provider - Security Vulnerability (CVE-2026-97288)
Contributor Cross Site Scripting (XSS) in OAuth Server
PLUGIN
Oauth2 Provider
CVE-2026-97288
Risk Score
Threat Entry
Updated 2026-09-30
Rzp Woocommerce - Security Vulnerability (CVE-2026-97299)
Unauthenticated Cross Site Request Forgery (CSRF) in Razorpay Payment Links for WooCommerce
PLUGIN
Rzp Woocommerce
CVE-2026-97299
Risk Score
Threat Entry
Updated 2026-09-30
Miniorange Login With Eve Online Google Facebook - Security Vulnerability (CVE-2026-97274)
Unauthenticated Bypass Vulnerability in OAuth Single Sign On – SSO (OAuth Client)
PLUGIN
Miniorange Login With Eve Online Google Facebook
CVE-2026-97274
Risk Score
Threat Entry
Updated 2026-10-15
Event Tickets - Security Vulnerability (CVE-2026-97287)
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Liquid Web / StellarWP Event Tickets event-tickets allows Blind SQL Injection. This issue affects Event Tickets: from n/a through 5.29.5.
PLUGIN
Event Tickets
CVE-2026-97287
Risk Score
Threat Entry
Updated 2026-09-30
Woo Permalink Manager - Security Vulnerability (CVE-2026-97272)
Unauthenticated Cross Site Scripting (XSS) in Premmerce Permalink Manager for WooCommerce
PLUGIN
Woo Permalink Manager
CVE-2026-97272
Risk Score
Threat Entry
Updated 2026-09-30
Wpfunnels - Security Vulnerability (CVE-2026-97271)
Unauthenticated Cross Site Scripting (XSS) in WPFunnels
PLUGIN
Wpfunnels
CVE-2026-97271
Risk Score
Threat Entry
Updated 2026-10-02
Strong Testimonials - Security Vulnerability (CVE-2026-97286)
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WP Chill Strong Testimonials strong-testimonials allows Stored XSS.This issue affects Strong Testimonials: from n/a through 3.3.11.
PLUGIN
Strong Testimonials
CVE-2026-97286
Risk Score
Threat Entry
Updated 2026-09-30
Polylang - Security Vulnerability (CVE-2026-97279)
Contributor Cross Site Scripting (XSS) in Polylang
PLUGIN
Polylang
CVE-2026-97279
Risk Score
Threat Entry
Updated 2026-09-30
The Events Calendar - Security Vulnerability (CVE-2026-97285)
Contributor Broken Access Control in The Events Calendar
PLUGIN
The Events Calendar
CVE-2026-97285
Risk Score
Threat Entry
Updated 2026-09-30
Review Schema - Security Vulnerability (CVE-2026-97282)
Unauthenticated Insecure Direct Object References (IDOR) in Review Schema
PLUGIN
Review Schema
CVE-2026-97282
Risk Score
Threat Entry
Updated 2026-09-30
Layerslider - Security Vulnerability (CVE-2026-97253)
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Kreatura LayerSlider allows Reflected XSS. This issue affects LayerSlider: from n/a through 8.4.0.
PLUGIN
Layerslider
CVE-2026-97253
Risk Score
Threat Entry
Updated 2026-09-30
Geo Mashup - Security Vulnerability (CVE-2026-97250)
Unauthenticated Cross Site Scripting (XSS) in Geo Mashup
PLUGIN
Geo Mashup
CVE-2026-97250
Risk Score
Threat Entry
Updated 2026-09-30
Cmb2 - Security Vulnerability (CVE-2026-97270)
Subscriber Cross Site Scripting (XSS) in CMB2
PLUGIN
Cmb2
CVE-2026-97270
Risk Score
Threat Entry
Updated 2026-09-30
Virtue Toolkit - Security Vulnerability (CVE-2026-97266)
Contributor Cross Site Scripting (XSS) in Virtue/Ascend/Pinnacle Toolkit
PLUGIN
Virtue Toolkit
CVE-2026-97266
Risk Score