Threat Database (40,784)

Threat Entry Updated 2026-09-30

Erp - Security Vulnerability (CVE-2026-96343)

Custom role PHP Object Injection in WP ERP

PLUGIN Erp

CVE-2026-96343

HIGH CVSS 7.2 2026-09-30

Risk Score

Open Full Technical Breakdown

Threat Entry Updated 2026-09-30

Bookly Responsive Appointment Booking Tool - Security Vulnerability (CVE-2026-96347)

Subscriber Insecure Direct Object References (IDOR) in Bookly

PLUGIN Bookly Responsive Appointment Booking Tool

CVE-2026-96347

MEDIUM CVSS 6.5 2026-09-30

Risk Score

Open Full Technical Breakdown

Threat Entry Updated 2026-09-30

Profile Builder - Security Vulnerability (CVE-2026-96338)

Subscriber Cross Site Scripting (XSS) in Profile Builder

PLUGIN Profile Builder

CVE-2026-96338

MEDIUM CVSS 6.5 2026-09-30

Risk Score

Open Full Technical Breakdown

Threat Entry Updated 2026-09-30

Conversational Forms - Security Vulnerability (CVE-2026-95531)

Subscriber PHP Object Injection in Conversational Forms for ChatBot

PLUGIN Conversational Forms

CVE-2026-95531

HIGH CVSS 8.8 2026-09-30

Risk Score

Open Full Technical Breakdown

Threat Entry Updated 2026-09-30

Migrator Plugin - Security Vulnerability (CVE-2026-95587)

Unauthenticated Broken Access Control in Hostinger Migrator

PLUGIN Migrator Plugin

CVE-2026-95587

HIGH CVSS 7.5 2026-09-30

Risk Score

Open Full Technical Breakdown

Threat Entry Updated 2026-09-30

Designsetgo - Security Vulnerability (CVE-2026-94683)

Contributor PHP Object Injection in DesignSetGo

PLUGIN Designsetgo

CVE-2026-94683

HIGH CVSS 8.8 2026-09-30

Risk Score

Open Full Technical Breakdown

Threat Entry Updated 2026-09-30

Go Live Update Urls - Security Vulnerability (CVE-2026-94678)

Contributor PHP Object Injection in Go Live Update Urls

PLUGIN Go Live Update Urls

CVE-2026-94678

HIGH CVSS 8.8 2026-09-30

Risk Score

Open Full Technical Breakdown

Threat Entry Updated 2026-09-30

Kadence Woocommerce Email Designer - Security Vulnerability (CVE-2026-94677)

Shop manager PHP Object Injection in Kadence WooCommerce Email Designer

PLUGIN Kadence Woocommerce Email Designer

CVE-2026-94677

HIGH CVSS 7.2 2026-09-30

Risk Score

Open Full Technical Breakdown

Threat Entry Updated 2026-09-30

Formgent - Security Vulnerability (CVE-2026-94499)

Subscriber Broken Access Control in FormGent

PLUGIN Formgent

CVE-2026-94499

HIGH CVSS 7.1 2026-09-30

Risk Score

Open Full Technical Breakdown

Threat Entry Updated 2026-09-30

Woocommerce Google Adwords Conversion Tracking Tag - Security Vulnerability (CVE-2026-94674)

Contributor Cross Site Scripting (XSS) in Pixel Manager for WooCommerce

PLUGIN Woocommerce Google Adwords Conversion Tracking Tag

CVE-2026-94674

MEDIUM CVSS 6.5 2026-09-30

Risk Score

Open Full Technical Breakdown

Threat Entry Updated 2026-09-30

Wp Store Locator - Security Vulnerability (CVE-2026-94681)

Unauthenticated Denial of Service Attack in WP Store Locator < 3.0.0 versions.

PLUGIN Wp Store Locator

CVE-2026-94681

MEDIUM CVSS 5.9 2026-09-30

Risk Score

Open Full Technical Breakdown

Threat Entry Updated 2026-09-30

Simply Schedule Appointments - Security Vulnerability (CVE-2026-94673)

Unauthenticated Insecure Direct Object References (IDOR) in Simply Schedule Appointments

PLUGIN Simply Schedule Appointments

CVE-2026-94673

MEDIUM CVSS 5.3 2026-09-30

Risk Score

Open Full Technical Breakdown

Threat Entry Updated 2026-09-30

Safe Svg - Security Vulnerability (CVE-2026-94672)

Contributor Insecure Direct Object References (IDOR) in Safe SVG

PLUGIN Safe Svg

CVE-2026-94672

MEDIUM CVSS 4.3 2026-09-30

Risk Score

Open Full Technical Breakdown

Threat Entry Updated 2026-09-30

Acymailing - Security Vulnerability (CVE-2026-94389)

Unauthenticated Remote Code Execution (RCE) in AcyMailing SMTP Newsletter

PLUGIN Acymailing

CVE-2026-94389

CRITICAL CVSS 9.0 2026-09-30

Risk Score

Open Full Technical Breakdown

Threat Entry Updated 2026-09-30

Gamipress - Security Vulnerability (CVE-2026-94177)

Unauthenticated SQL Injection in GamiPress

PLUGIN Gamipress

CVE-2026-94177

HIGH CVSS 8.5 2026-09-30

Risk Score

Open Full Technical Breakdown

Threat Entry Updated 2026-09-30

Import Users From Csv With Meta - Security Vulnerability (CVE-2026-94178)

Subscriber Privilege Escalation in Import and export users and customers

PLUGIN Import Users From Csv With Meta

CVE-2026-94178

HIGH CVSS 7.5 2026-09-30

Risk Score

Open Full Technical Breakdown

Threat Entry Updated 2026-09-30

Nextgen Gallery - Security Vulnerability (CVE-2026-94123)

Unauthenticated Arbitrary File Download in NextGEN Gallery

PLUGIN Nextgen Gallery

CVE-2026-94123

HIGH CVSS 7.5 2026-09-30

Risk Score

Open Full Technical Breakdown

Threat Entry Updated 2026-09-30

Business Directory Plugin - Security Vulnerability (CVE-2026-94173)

Contributor Insecure Direct Object References (IDOR) in Business Directory

PLUGIN Business Directory Plugin

CVE-2026-94173

MEDIUM CVSS 5.4 2026-09-30

Risk Score

Open Full Technical Breakdown

Threat Entry Updated 2026-09-30

Tenweb Speed Optimizer - Security Vulnerability (CVE-2026-94121)

Contributor PHP Object Injection in 10Web Booster – Website speed optimization, Cache & Page Speed optimizer

PLUGIN Tenweb Speed Optimizer

CVE-2026-94121

HIGH CVSS 8.8 2026-09-30

Risk Score

Open Full Technical Breakdown

Threat Entry Updated 2026-09-30

Easy Pricing Tables - Security Vulnerability (CVE-2026-94115)

Contributor SQL Injection in Easy Pricing Tables

PLUGIN Easy Pricing Tables

CVE-2026-94115

HIGH CVSS 8.5 2026-09-30

Risk Score

Open Full Technical Breakdown