Threat Database (40,783)

Threat Entry Updated 2026-09-30

Ewww Image Optimizer - Security Vulnerability (CVE-2026-97067)

Contributor Cross Site Scripting (XSS) in EWWW Image Optimizer

PLUGIN Ewww Image Optimizer

CVE-2026-97067

MEDIUM CVSS 6.5 2026-09-30

Risk Score

Open Full Technical Breakdown

Threat Entry Updated 2026-09-30

Sprout Invoices - Security Vulnerability (CVE-2026-97078)

Unauthenticated Insecure Direct Object References (IDOR) in Client Invoicing by Sprout Invoices

PLUGIN Sprout Invoices

CVE-2026-97078

MEDIUM CVSS 5.3 2026-09-30

Risk Score

Open Full Technical Breakdown

Threat Entry Updated 2026-09-30

Give - Security Vulnerability (CVE-2026-97066)

Unauthenticated Insecure Direct Object References (IDOR) in GiveWP

PLUGIN Give

CVE-2026-97066

MEDIUM CVSS 5.3 2026-09-30

Risk Score

Open Full Technical Breakdown

Threat Entry Updated 2026-09-30

Webba Booking Lite - Security Vulnerability (CVE-2026-97079)

Subscriber Insecure Direct Object References (IDOR) in Webba Booking

PLUGIN Webba Booking Lite

CVE-2026-97079

MEDIUM CVSS 4.3 2026-09-30

Risk Score

Open Full Technical Breakdown

Threat Entry Updated 2026-09-30

Omnisend - Security Vulnerability (CVE-2026-97074)

Subscriber Insecure Direct Object References (IDOR) in Newsletters, Email Marketing, SMS and Popups by Omnisend

PLUGIN Omnisend

CVE-2026-97074

MEDIUM CVSS 4.3 2026-09-30

Risk Score

Open Full Technical Breakdown

Threat Entry Updated 2026-09-30

Wc Blacklist Manager - Security Vulnerability (CVE-2026-96838)

Unauthenticated Cross Site Request Forgery (CSRF) in Blacklist Manager – WooCommerce Anti-Fraud, Blacklist & Checkout Verification

PLUGIN Wc Blacklist Manager

CVE-2026-96838

HIGH CVSS 8.8 2026-09-30

Risk Score

Open Full Technical Breakdown

Threat Entry Updated 2026-09-30

Cartflows - Security Vulnerability (CVE-2026-96837)

Contributor Remote Code Execution (RCE) in CartFlows

PLUGIN Cartflows

CVE-2026-96837

HIGH CVSS 8.8 2026-09-30

Risk Score

Open Full Technical Breakdown

Threat Entry Updated 2026-09-30

Ultimate Addons For Contact Form 7 - Security Vulnerability (CVE-2026-96833)

Editor PHP Object Injection in Ultimate Addons for Contact Form 7

PLUGIN Ultimate Addons For Contact Form 7

CVE-2026-96833

HIGH CVSS 7.2 2026-09-30

Risk Score

Open Full Technical Breakdown

Threat Entry Updated 2026-09-30

Content Egg - Security Vulnerability (CVE-2026-96832)

Shop manager PHP Object Injection in Content Egg

PLUGIN Content Egg

CVE-2026-96832

HIGH CVSS 7.2 2026-09-30

Risk Score

Open Full Technical Breakdown

Threat Entry Updated 2026-09-30

Happyforms - Security Vulnerability (CVE-2026-97065)

Unauthenticated Cross Site Scripting (XSS) in Happyforms

PLUGIN Happyforms

CVE-2026-97065

HIGH CVSS 7.1 2026-09-30

Risk Score

Open Full Technical Breakdown

Threat Entry Updated 2026-09-30

Wp Parsidate - Security Vulnerability (CVE-2026-96836)

Unauthenticated Cross Site Scripting (XSS) in Parsi Date

PLUGIN Wp Parsidate

CVE-2026-96836

HIGH CVSS 7.1 2026-09-30

Risk Score

Open Full Technical Breakdown

Threat Entry Updated 2026-09-30

King Addons - Security Vulnerability (CVE-2026-96835)

Contributor Cross Site Scripting (XSS) in King Addons for Elementor

PLUGIN King Addons

CVE-2026-96835

MEDIUM CVSS 6.5 2026-09-30

Risk Score

Open Full Technical Breakdown

Threat Entry Updated 2026-11-12

Give - Security Vulnerability (CVE-2026-96834)

Missing Authorization vulnerability in Liquid Web / StellarWP GiveWP give allows Retrieve Embedded Sensitive Data.This issue affects GiveWP: from n/a through 4.16.9.

PLUGIN Give

CVE-2026-96834

MEDIUM CVSS 6.5 2026-09-30

Risk Score

Open Full Technical Breakdown

Threat Entry Updated 2026-09-30

Themify Builder - Security Vulnerability (CVE-2026-96831)

Contributor PHP Object Injection in Themify Builder

PLUGIN Themify Builder

CVE-2026-96831

HIGH CVSS 8.8 2026-09-30

Risk Score

Open Full Technical Breakdown

Threat Entry Updated 2026-09-30

Woo Product Category Discount - Security Vulnerability (CVE-2026-96828)

Administrator SQL Injection in Category Discount Woocommerce

PLUGIN Woo Product Category Discount

CVE-2026-96828

HIGH CVSS 7.6 2026-09-30

Risk Score

Open Full Technical Breakdown

Threat Entry Updated 2026-09-30

Admin Notices Manager - Security Vulnerability (CVE-2026-96827)

Administrator SQL Injection in Admin Notices Manager

PLUGIN Admin Notices Manager

CVE-2026-96827

HIGH CVSS 7.6 2026-09-30

Risk Score

Open Full Technical Breakdown

Threat Entry Updated 2026-09-30

Give - Security Vulnerability (CVE-2026-96830)

Unauthenticated Cross Site Scripting (XSS) in GiveWP

PLUGIN Give

CVE-2026-96830

HIGH CVSS 7.1 2026-09-30

Risk Score

Open Full Technical Breakdown

Threat Entry Updated 2026-09-30

Template Kit - Import - Security Vulnerability (CVE-2026-96824)

Editor Arbitrary File Deletion in Template Kit – Import

PLUGIN Template Kit - Import

CVE-2026-96824

MEDIUM CVSS 6.8 2026-09-30

Risk Score

Open Full Technical Breakdown

Threat Entry Updated 2026-09-30

The Plus Addons For Elementor Page Builder - Security Vulnerability (CVE-2026-96829)

Contributor Cross Site Scripting (XSS) in The Plus Addons for Elementor Page Builder Lite

PLUGIN The Plus Addons For Elementor Page Builder

CVE-2026-96829

MEDIUM CVSS 6.5 2026-09-30

Risk Score

Open Full Technical Breakdown

Threat Entry Updated 2026-09-30

All In One Wp Security And Firewall - Security Vulnerability (CVE-2026-96825)

Subscriber Bypass Vulnerability in All In One WP Security & Firewall

PLUGIN All In One Wp Security And Firewall

CVE-2026-96825

MEDIUM CVSS 4.2 2026-09-30

Risk Score

Open Full Technical Breakdown