Threat Database

Threat Entry Updated 2026-09-30

Wp Books Gallery - Security Vulnerability (CVE-2026-96822)

Unauthenticated SQL Injection in Books Gallery

PLUGIN Wp Books Gallery

CVE-2026-96822

CRITICAL CVSS 9.3 2026-09-30

Risk Score

Open Full Technical Breakdown

Threat Entry Updated 2026-09-30

Makecommerce - Security Vulnerability (CVE-2026-96817)

Subscriber Broken Access Control in MakeCommerce for WooCommerce

PLUGIN Makecommerce

CVE-2026-96817

HIGH CVSS 8.2 2026-09-30

Risk Score

Open Full Technical Breakdown

Threat Entry Updated 2026-09-30

Customer Reviews Woocommerce - Security Vulnerability (CVE-2026-96823)

Unauthenticated Arbitrary Content Deletion in Customer Reviews for WooCommerce

PLUGIN Customer Reviews Woocommerce

CVE-2026-96823

HIGH CVSS 7.5 2026-09-30

Risk Score

Open Full Technical Breakdown

Threat Entry Updated 2026-09-30

Wp Express Checkout - Security Vulnerability (CVE-2026-96818)

Unauthenticated Broken Access Control in WP Express Checkout (Accept PayPal Payments)

PLUGIN Wp Express Checkout

CVE-2026-96818

HIGH CVSS 7.5 2026-09-30

Risk Score

Open Full Technical Breakdown

Threat Entry Updated 2026-09-30

Awesome Support - Security Vulnerability (CVE-2026-96820)

Subscriber Cross Site Scripting (XSS) in Awesome Support

PLUGIN Awesome Support

CVE-2026-96820

HIGH CVSS 7.1 2026-09-30

Risk Score

Open Full Technical Breakdown

Threat Entry Updated 2026-09-30

Oik - Security Vulnerability (CVE-2026-96819)

Subscriber Cross Site Scripting (XSS) in oik

PLUGIN Oik

CVE-2026-96819

HIGH CVSS 7.1 2026-09-30

Risk Score

Open Full Technical Breakdown

Threat Entry Updated 2026-09-30

Fluent Boards - Security Vulnerability (CVE-2026-96821)

Subscriber Privilege Escalation in FluentBoards

PLUGIN Fluent Boards

CVE-2026-96821

MEDIUM CVSS 6.3 2026-09-30

Risk Score

Open Full Technical Breakdown

Threat Entry Updated 2026-09-30

Estatik - Security Vulnerability (CVE-2026-96350)

Subscriber Privilege Escalation in Estatik

PLUGIN Estatik

CVE-2026-96350

CRITICAL CVSS 9.8 2026-09-30

Risk Score

Open Full Technical Breakdown

Threat Entry Updated 2026-09-30

Vitepos Lite - Security Vulnerability (CVE-2026-96815)

Custom role Privilege Escalation in Vitepos

PLUGIN Vitepos Lite

CVE-2026-96815

HIGH CVSS 7.2 2026-09-30

Risk Score

Open Full Technical Breakdown

Threat Entry Updated 2026-09-30

Trusted Shops Easy Integration For Woocommerce - Security Vulnerability (CVE-2026-96816)

Unauthenticated Cross Site Scripting (XSS) in Trusted Shops Easy Integration for WooCommerce

PLUGIN Trusted Shops Easy Integration For Woocommerce

CVE-2026-96816

HIGH CVSS 7.1 2026-09-30

Risk Score

Open Full Technical Breakdown

Threat Entry Updated 2026-09-30

Wc Product Table Lite - Security Vulnerability (CVE-2026-96814)

Unauthenticated Cross Site Scripting (XSS) in WooCommerce Product Table Lite

PLUGIN Wc Product Table Lite

CVE-2026-96814

HIGH CVSS 7.1 2026-09-30

Risk Score

Open Full Technical Breakdown

Threat Entry Updated 2026-09-30

Yith Woocommerce Ajax Search - Security Vulnerability (CVE-2026-96352)

Unauthenticated Cross Site Scripting (XSS) in YITH WooCommerce Ajax Search

PLUGIN Yith Woocommerce Ajax Search

CVE-2026-96352

HIGH CVSS 7.1 2026-09-30

Risk Score

Open Full Technical Breakdown

Threat Entry Updated 2026-09-30

Classified Listing - Security Vulnerability (CVE-2026-96351)

Unauthenticated Cross Site Scripting (XSS) in Classified Listing

PLUGIN Classified Listing

CVE-2026-96351

HIGH CVSS 7.1 2026-09-30

Risk Score

Open Full Technical Breakdown

Threat Entry Updated 2026-09-30

Pixfort Core - Security Vulnerability (CVE-2026-96450)

Contributor Cross Site Scripting (XSS) in pixfort Core < 4.3.3 versions.

PLUGIN Pixfort Core

CVE-2026-96450

MEDIUM CVSS 5.4 2026-09-30

Risk Score

Open Full Technical Breakdown

Threat Entry Updated 2026-09-30

Siteskite - Security Vulnerability (CVE-2026-96349)

Unauthenticated Remote Code Execution (RCE) in SiteSkite

PLUGIN Siteskite

CVE-2026-96349

CRITICAL CVSS 10.0 2026-09-30

Risk Score

Open Full Technical Breakdown

Threat Entry Updated 2026-09-30

Erp - Security Vulnerability (CVE-2026-96346)

Author SQL Injection in WP ERP

PLUGIN Erp

CVE-2026-96346

HIGH CVSS 7.6 2026-09-30

Risk Score

Open Full Technical Breakdown

Threat Entry Updated 2026-09-30

Estatik - Security Vulnerability (CVE-2026-96345)

Administrator SQL Injection in Estatik

PLUGIN Estatik

CVE-2026-96345

HIGH CVSS 7.6 2026-09-30

Risk Score

Open Full Technical Breakdown

Threat Entry Updated 2026-09-30

Bookly Responsive Appointment Booking Tool - Security Vulnerability (CVE-2026-96348)

Unauthenticated Broken Access Control in Bookly

PLUGIN Bookly Responsive Appointment Booking Tool

CVE-2026-96348

HIGH CVSS 7.5 2026-09-30

Risk Score

Open Full Technical Breakdown

Threat Entry Updated 2026-09-30

Ecommerce Product Catalog - Security Vulnerability (CVE-2026-96344)

Custom role PHP Object Injection in eCommerce Product Catalog

PLUGIN Ecommerce Product Catalog

CVE-2026-96344

HIGH CVSS 7.2 2026-09-30

Risk Score

Open Full Technical Breakdown

Threat Entry Updated 2026-09-30

Erp - Security Vulnerability (CVE-2026-96343)

Custom role PHP Object Injection in WP ERP

PLUGIN Erp

CVE-2026-96343

HIGH CVSS 7.2 2026-09-30

Risk Score

Open Full Technical Breakdown