Threat Entry Updated 2026-07-13

CVE-2026-57421 - CRM Perks Forms Plugin

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in CRM Perks CRM Perks Forms crm-perks-forms allows Reflected XSS.This issue affects CRM Perks Forms: from n/a through

PLUGIN CRM Perks Forms

CVE-2026-57421

HIGH CVSS 7.1 2026-07-13

Risk Score

Open Full Technical Breakdown

Threat Entry Updated 2026-07-13

CVE-2026-57694 - Tutor LMS Plugin

Authorization Bypass Through User-Controlled Key vulnerability in Themeum Tutor LMS tutor allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Tutor LMS: from n/a through

PLUGIN Tutor LMS

CVE-2026-57694

MEDIUM CVSS 6.5 2026-07-13

Risk Score

Open Full Technical Breakdown

Threat Entry Updated 2026-07-13

CVE-2026-57693 - Ad Inserter Plugin

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Spacetime Ad Inserter ad-inserter allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Ad Inserter: from n/a through

PLUGIN Ad Inserter

CVE-2026-57693

MEDIUM CVSS 6.5 2026-07-13

Risk Score

Open Full Technical Breakdown

Threat Entry Updated 2026-07-13

CVE-2026-57424 - Razorpay Payment Links for WooCommerce Plugin

Missing Authorization vulnerability in knitpay Razorpay Payment Links for WooCommerce rzp-woocommerce allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Razorpay Payment Links for WooCommerce: from n/a through

PLUGIN Razorpay Payment Links for WooCommerce

CVE-2026-57424

MEDIUM CVSS 6.5 2026-07-13

Risk Score

Open Full Technical Breakdown

Threat Entry Updated 2026-07-13

CVE-2026-57691 - Anti-Malware Security and Brute-Force Firewall Plugin

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Eli Anti-Malware Security and Brute-Force Firewall gotmls allows Reflected XSS.This issue affects Anti-Malware Security and Brute-Force Firewall: from n/a through

PLUGIN Anti-Malware Security and Brute-Force Firewall

CVE-2026-57691

MEDIUM CVSS 5.8 2026-07-13

Risk Score

Open Full Technical Breakdown

Threat Entry Updated 2026-07-13

CVE-2026-57417 - Cart Lift Plugin

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in RexTheme Cart Lift cart-lift allows Stored XSS.This issue affects Cart Lift: from n/a through

PLUGIN Cart Lift

CVE-2026-57417

HIGH CVSS 7.1 2026-07-13

Risk Score

Open Full Technical Breakdown

Threat Entry Updated 2026-07-13

CVE-2026-57416 - SiteGround Email Marketing Plugin

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in SiteGround SiteGround Email Marketing siteground-email-marketing allows Stored XSS.This issue affects SiteGround Email Marketing: from n/a through

PLUGIN SiteGround Email Marketing

CVE-2026-57416

HIGH CVSS 7.1 2026-07-13

Risk Score

Open Full Technical Breakdown

Threat Entry Updated 2026-07-13

CVE-2026-57415 - Gift Vouchers Plugin

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Codemenschen Gift Vouchers gift-voucher allows Stored XSS.This issue affects Gift Vouchers: from n/a through

PLUGIN Gift Vouchers

CVE-2026-57415

HIGH CVSS 7.1 2026-07-13

Risk Score

Open Full Technical Breakdown

Threat Entry Updated 2026-07-13

CVE-2026-57420 - Author Box WP Lens Plugin

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Netrr Author Box WP Lens author-box-for-divi allows Stored XSS.This issue affects Author Box WP Lens: from n/a through

PLUGIN Author Box WP Lens

CVE-2026-57420

MEDIUM CVSS 6.5 2026-07-13

Risk Score

Open Full Technical Breakdown

Threat Entry Updated 2026-07-13

CVE-2026-57419 - Stock Locations for WooCommerce Plugin

Missing Authorization vulnerability in Fahad Mahmood Stock Locations for WooCommerce stock-locations-for-woocommerce allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Stock Locations for WooCommerce: from n/a through

PLUGIN Stock Locations for WooCommerce

CVE-2026-57419

MEDIUM CVSS 6.5 2026-07-13

Risk Score

Open Full Technical Breakdown

Threat Entry Updated 2026-07-13

CVE-2026-57418 - Client Invoicing by Sprout Invoices Plugin

Missing Authorization vulnerability in BoldGrid Client Invoicing by Sprout Invoices sprout-invoices allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Client Invoicing by Sprout Invoices: from n/a through

PLUGIN Client Invoicing by Sprout Invoices

CVE-2026-57418

MEDIUM CVSS 6.5 2026-07-13

Risk Score

Open Full Technical Breakdown

Threat Entry Updated 2026-07-13

CVE-2026-57414 - ChatBot for eCommerce – WoowBot Plugin

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in QuantumCloud ChatBot for eCommerce – WoowBot woowbot-woocommerce-chatbot allows Stored XSS.This issue affects ChatBot for eCommerce – WoowBot: from n/a through

PLUGIN ChatBot for eCommerce – WoowBot

CVE-2026-57414

MEDIUM CVSS 6.5 2026-07-13

Risk Score

Open Full Technical Breakdown

Threat Entry Updated 2026-07-13

CVE-2026-57413 - Instant Image Generator Plugin

Server-Side Request Forgery (SSRF) vulnerability in bdthemes Instant Image Generator ai-image allows Server Side Request Forgery.This issue affects Instant Image Generator: from n/a through

PLUGIN Instant Image Generator

CVE-2026-57413

MEDIUM CVSS 6.4 2026-07-13

Risk Score

Open Full Technical Breakdown

Threat Entry Updated 2026-07-13

CVE-2026-57410 - MailerPress Plugin

Incorrect Privilege Assignment vulnerability in MailerPress Team MailerPress mailerpress allows Privilege Escalation.This issue affects MailerPress: from n/a through

PLUGIN MailerPress

CVE-2026-57410

HIGH CVSS 8.8 2026-07-13

Risk Score

Open Full Technical Breakdown

Threat Entry Updated 2026-07-13

CVE-2026-57407 - PDF Generator for WordPress Plugin

Server-Side Request Forgery (SSRF) vulnerability in WP Swings PDF Generator for WordPress pdf-generator-for-wp allows Server Side Request Forgery.This issue affects PDF Generator for WordPress: from n/a through

PLUGIN PDF Generator for WordPress

CVE-2026-57407

HIGH CVSS 7.2 2026-07-13

Risk Score

Open Full Technical Breakdown

Threat Entry Updated 2026-07-13

CVE-2026-57411 - Contact Form 7 Plugin

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Aman CF7 Views – Complete Entry Management for Contact Form 7 cf7-views allows DOM-Based XSS.This issue affects CF7 Views – Complete Entry Management for Contact Form 7: from n/a through

PLUGIN Contact Form 7

CVE-2026-57411

HIGH CVSS 7.1 2026-07-13

Risk Score

Open Full Technical Breakdown

Threat Entry Updated 2026-07-13

CVE-2026-57409 - Active Products Tables for WooCommerce Plugin

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in RealMag777 Active Products Tables for WooCommerce profit-products-tables-for-woocommerce allows DOM-Based XSS.This issue affects Active Products Tables for WooCommerce: from n/a through

PLUGIN Active Products Tables for WooCommerce

CVE-2026-57409

HIGH CVSS 7.1 2026-07-13

Risk Score

Open Full Technical Breakdown

Threat Entry Updated 2026-07-13

CVE-2026-57405 - Open Shop Plugin

Missing Authorization vulnerability in themehunk Open Shop open-shop allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Open Shop: from n/a through

PLUGIN Open Shop

CVE-2026-57405

HIGH CVSS 7.1 2026-07-13

Risk Score

Open Full Technical Breakdown

Threat Entry Updated 2026-07-13

CVE-2026-57412 - Gift Vouchers Plugin

Missing Authorization vulnerability in Codemenschen Gift Vouchers gift-voucher allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Gift Vouchers: from n/a through

PLUGIN Gift Vouchers

CVE-2026-57412

MEDIUM CVSS 6.5 2026-07-13

Risk Score

Open Full Technical Breakdown

Threat Entry Updated 2026-07-13

CVE-2026-57408 - Peach Payments Gateway Plugin

Missing Authorization vulnerability in peachpayments Peach Payments Gateway wc-peach-payments-gateway allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Peach Payments Gateway: from n/a through

PLUGIN Peach Payments Gateway

CVE-2026-57408

MEDIUM CVSS 6.5 2026-07-13

Risk Score

Open Full Technical Breakdown