Threat Database (40,783)

Threat Entry Updated 2026-09-30

Visualcomposer - Security Vulnerability (CVE-2026-97262)

Contributor Cross Site Scripting (XSS) in Visual Composer Website Builder

PLUGIN Visualcomposer

CVE-2026-97262

MEDIUM CVSS 6.5 2026-09-30

Risk Score

Open Full Technical Breakdown

Threat Entry Updated 2026-09-30

Woo Notification - Security Vulnerability (CVE-2026-97261)

Unauthenticated Sensitive Data Exposure in Notivo

PLUGIN Woo Notification

CVE-2026-97261

MEDIUM CVSS 5.3 2026-09-30

Risk Score

Open Full Technical Breakdown

Threat Entry Updated 2026-09-30

Prevent File Access - Security Vulnerability (CVE-2026-97267)

Subscriber Broken Access Control in Prevent files / folders access

PLUGIN Prevent File Access

CVE-2026-97267

MEDIUM CVSS 4.3 2026-09-30

Risk Score

Open Full Technical Breakdown

Threat Entry Updated 2026-09-30

Booking Activities - Security Vulnerability (CVE-2026-97248)

Unauthenticated PHP Object Injection in Booking Activities

PLUGIN Booking Activities

CVE-2026-97248

CRITICAL CVSS 9.8 2026-09-30

Risk Score

Open Full Technical Breakdown

Threat Entry Updated 2026-09-30

Creatorlms - Security Vulnerability (CVE-2026-97244)

Contributor Path Traversal in Creator LMS

PLUGIN Creatorlms

CVE-2026-97244

HIGH CVSS 7.5 2026-09-30

Risk Score

Open Full Technical Breakdown

Threat Entry Updated 2026-09-30

Surecart - Security Vulnerability (CVE-2026-97245)

Shop Worker Privilege Escalation in SureCart

PLUGIN Surecart

CVE-2026-97245

HIGH CVSS 7.2 2026-09-30

Risk Score

Open Full Technical Breakdown

Threat Entry Updated 2026-09-30

Webo Mcp - Security Vulnerability (CVE-2026-97242)

Author Arbitrary File Deletion in WEBO MCP

PLUGIN Webo Mcp

CVE-2026-97242

MEDIUM CVSS 6.8 2026-09-30

Risk Score

Open Full Technical Breakdown

Threat Entry Updated 2026-09-30

Blocksy Companion - Security Vulnerability (CVE-2026-97247)

Unauthenticated Broken Access Control in Blocksy Companion

PLUGIN Blocksy Companion

CVE-2026-97247

MEDIUM CVSS 6.5 2026-09-30

Risk Score

Open Full Technical Breakdown

Threat Entry Updated 2026-09-30

Allable Connector - Security Vulnerability (CVE-2026-97243)

Subscriber Broken Access Control in AllAble Connector

PLUGIN Allable Connector

CVE-2026-97243

MEDIUM CVSS 5.4 2026-09-30

Risk Score

Open Full Technical Breakdown

Threat Entry Updated 2026-09-30

Paid Member Subscriptions - Security Vulnerability (CVE-2026-97249)

Unauthenticated Bypass Vulnerability in Paid Member Subscriptions

PLUGIN Paid Member Subscriptions

CVE-2026-97249

MEDIUM CVSS 5.3 2026-09-30

Risk Score

Open Full Technical Breakdown

Threat Entry Updated 2026-10-20

Shortpixel Image Optimiser - Security Vulnerability (CVE-2026-97246)

Deserialization of Untrusted Data vulnerability in ShortPixel ShortPixel Image Optimizer shortpixel-image-optimiser allows Object Injection.This issue affects ShortPixel Image Optimizer: from n/a through 6.5.5.

PLUGIN Shortpixel Image Optimiser

CVE-2026-97246

MEDIUM CVSS 4.9 2026-09-30

Risk Score

Open Full Technical Breakdown

Threat Entry Updated 2026-09-30

Backupease - Security Vulnerability (CVE-2026-97241)

Unauthenticated Sensitive Data Exposure in BackupEase

PLUGIN Backupease

CVE-2026-97241

HIGH CVSS 7.5 2026-09-30

Risk Score

Open Full Technical Breakdown

Threat Entry Updated 2026-09-30

Stifli Backup Tools - Security Vulnerability (CVE-2026-97240)

Unauthenticated Sensitive Data Exposure in StifLi Backup Tools

PLUGIN Stifli Backup Tools

CVE-2026-97240

HIGH CVSS 7.5 2026-09-30

Risk Score

Open Full Technical Breakdown

Threat Entry Updated 2026-10-22

Jet Engine - Security Vulnerability (CVE-2026-97237)

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Crocoblock JetEngine jet-engine allows DOM-Based XSS.This issue affects JetEngine: from n/a through 3.8.14.3.

PLUGIN Jet Engine

CVE-2026-97237

HIGH CVSS 7.1 2026-09-30

Risk Score

Open Full Technical Breakdown

Threat Entry Updated 2026-09-30

WordPress component - Security Vulnerability (CVE-2026-97235)

Unauthenticated Cross Site Scripting (XSS) in ThemeREX Addons < 2.45.0 versions.

UNKNOWN WordPress component

CVE-2026-97235

HIGH CVSS 7.1 2026-09-30

Risk Score

Open Full Technical Breakdown

Threat Entry Updated 2026-09-30

Mcp Content Manager Lite - Security Vulnerability (CVE-2026-97239)

Subscriber Broken Access Control in MCP Content Manager Lite

PLUGIN Mcp Content Manager Lite

CVE-2026-97239

MEDIUM CVSS 6.5 2026-09-30

Risk Score

Open Full Technical Breakdown

Threat Entry Updated 2026-09-30

WordPress component - Security Vulnerability (CVE-2026-97236)

Subscriber Cross Site Scripting (XSS) in ThemeREX Addons < 2.45.0 versions.

UNKNOWN WordPress component

CVE-2026-97236

MEDIUM CVSS 6.5 2026-09-30

Risk Score

Open Full Technical Breakdown

Threat Entry Updated 2026-09-30

Jet Engine - Security Vulnerability (CVE-2026-97238)

Subscriber Cross Site Scripting (XSS) in JetEngine

PLUGIN Jet Engine

CVE-2026-97238

MEDIUM CVSS 5.5 2026-09-30

Risk Score

Open Full Technical Breakdown

Threat Entry Updated 2026-09-30

Wp Migration Duplicator - Security Vulnerability (CVE-2026-97197)

Unauthenticated Broken Access Control in WordPress Backup & Migration

PLUGIN Wp Migration Duplicator

CVE-2026-97197

HIGH CVSS 7.5 2026-09-30

Risk Score

Open Full Technical Breakdown

Threat Entry Updated 2026-09-30

Ad Inserter - Security Vulnerability (CVE-2026-97077)

Unauthenticated Cross Site Scripting (XSS) in Ad Inserter

PLUGIN Ad Inserter

CVE-2026-97077

HIGH CVSS 7.1 2026-09-30

Risk Score

Open Full Technical Breakdown