Calgary, Alberta, Canada
sales@hackhalt.com
Free Download Free Download Free Download
Explore Pricing Explore Pricing Explore Pricing

Blog

"Prevention is cheaper than a breach"

Live Vulnerability Intelligence

Threat Database

Search CVEs, inspect descriptions, and open detail pages with AI-assisted technical context.

Total18,002
Critical1,249
High4,286
Medium12,246
Reset
Showing 241-260 of 18002 records
Threat Entry Updated 2026-07-13

CVE-2026-57406 - FundEngine Plugin

Missing Authorization vulnerability in Roxnor FundEngine wp-fundraising-donation allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects FundEngine: from n/a through

PLUGIN FundEngine

CVE-2026-57406

MEDIUM CVSS 6.5 2026-07-13
Open Full Technical Breakdown
Threat Entry Updated 2026-07-13

CVE-2026-57404 - Booking and Rental Manager Plugin

Missing Authorization vulnerability in magepeopleteam Booking and Rental Manager booking-and-rental-manager-for-woocommerce allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Booking and Rental Manager: from n/a through

PLUGIN Booking and Rental Manager

CVE-2026-57404

MEDIUM CVSS 6.5 2026-07-13
Open Full Technical Breakdown
Threat Entry Updated 2026-07-13

CVE-2026-57401 - SureDash Plugin

Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Brainstorm Force SureDash suredash allows Path Traversal.This issue affects SureDash: from n/a through

PLUGIN SureDash

CVE-2026-57401

CRITICAL CVSS 9.9 2026-07-13
Open Full Technical Breakdown
Threat Entry Updated 2026-07-13

CVE-2026-57403 - GD Security Headers Plugin

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Milan Petrovic GD Security Headers gd-security-headers allows Reflected XSS.This issue affects GD Security Headers: from n/a through

PLUGIN GD Security Headers

CVE-2026-57403

HIGH CVSS 7.1 2026-07-13
Open Full Technical Breakdown
Threat Entry Updated 2026-07-13

CVE-2026-57399 - Proxy & VPN Blocker Plugin

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Proxy & VPN Blocker Proxy & VPN Blocker proxy-vpn-blocker allows Stored XSS.This issue affects Proxy & VPN Blocker: from n/a through

PLUGIN Proxy & VPN Blocker

CVE-2026-57399

HIGH CVSS 7.1 2026-07-13
Open Full Technical Breakdown
Threat Entry Updated 2026-07-13

CVE-2026-57398 - Real Estate Manager Pro Plugin

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WebCodingPlace Real Estate Manager Pro real-estate-manager-pro allows Reflected XSS.This issue affects Real Estate Manager Pro: from n/a through

PLUGIN Real Estate Manager Pro

CVE-2026-57398

HIGH CVSS 7.1 2026-07-13
Open Full Technical Breakdown
Threat Entry Updated 2026-07-13

CVE-2026-57396 - Free Gifts for WooCommerce Plugin

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Flintop Free Gifts for WooCommerce free-gifts-for-woocommerce allows Stored XSS.This issue affects Free Gifts for WooCommerce: from n/a through

PLUGIN Free Gifts for WooCommerce

CVE-2026-57396

HIGH CVSS 7.1 2026-07-13
Open Full Technical Breakdown
Threat Entry Updated 2026-07-13

CVE-2026-57402 - Flexible Refund and Return Order for WooCommerce Plugin

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in wpdesk Flexible Refund and Return Order for WooCommerce flexible-refund-and-return-order-for-woocommerce allows Stored XSS.This issue affects Flexible Refund and Return Order for WooCommerce: from n/a through

PLUGIN Flexible Refund and Return Order for WooCommerce

CVE-2026-57402

MEDIUM CVSS 6.5 2026-07-13
Open Full Technical Breakdown
Threat Entry Updated 2026-07-13

CVE-2026-57400 - Event Tickets Manager for WooCommerce Plugin

Missing Authorization vulnerability in WP Swings Event Tickets Manager for WooCommerce event-tickets-manager-for-woocommerce allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Event Tickets Manager for WooCommerce: from n/a through

PLUGIN Event Tickets Manager for WooCommerce

CVE-2026-57400

MEDIUM CVSS 6.5 2026-07-13
Open Full Technical Breakdown
Threat Entry Updated 2026-07-13

CVE-2026-57395 - Tourfic Plugin

Missing Authorization vulnerability in Themefic Tourfic tourfic allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Tourfic: from n/a through

PLUGIN Tourfic

CVE-2026-57395

MEDIUM CVSS 6.5 2026-07-13
Open Full Technical Breakdown
Threat Entry Updated 2026-07-13

CVE-2026-57389 - Groundhogg Plugin

Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Adrian Tobey Groundhogg groundhogg allows Path Traversal.This issue affects Groundhogg: from n/a through

PLUGIN Groundhogg

CVE-2026-57389

HIGH CVSS 8.6 2026-07-13
Open Full Technical Breakdown
Threat Entry Updated 2026-07-13

CVE-2026-57394 - Newsletters Plugin

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Tribulant Software Newsletters newsletters-lite allows Reflected XSS.This issue affects Newsletters: from n/a through

PLUGIN Newsletters

CVE-2026-57394

HIGH CVSS 7.1 2026-07-13
Open Full Technical Breakdown
Threat Entry Updated 2026-07-13

CVE-2026-57388 - Hydra Booking Plugin

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Themefic Hydra Booking hydra-booking allows Stored XSS.This issue affects Hydra Booking: from n/a through

PLUGIN Hydra Booking

CVE-2026-57388

HIGH CVSS 7.1 2026-07-13
Open Full Technical Breakdown
Threat Entry Updated 2026-07-13

CVE-2026-57393 - WooCommerce PDF Invoice Builder Plugin

Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in EDGARROJAS WooCommerce PDF Invoice Builder woo-pdf-invoice-builder allows Retrieve Embedded Sensitive Data.This issue affects WooCommerce PDF Invoice Builder: from n/a through

PLUGIN WooCommerce PDF Invoice Builder

CVE-2026-57393

MEDIUM CVSS 6.5 2026-07-13
Open Full Technical Breakdown
Threat Entry Updated 2026-07-13

CVE-2026-57392 - Tourfic Plugin

Missing Authorization vulnerability in Themefic Tourfic tourfic allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Tourfic: from n/a through

PLUGIN Tourfic

CVE-2026-57392

MEDIUM CVSS 6.5 2026-07-13
Open Full Technical Breakdown
Threat Entry Updated 2026-07-13

CVE-2026-57391 - Loops & Logic Plugin

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Tangible Loops & Logic tangible-loops-and-logic allows Stored XSS.This issue affects Loops & Logic: from n/a through

PLUGIN Loops & Logic

CVE-2026-57391

MEDIUM CVSS 6.5 2026-07-13
Open Full Technical Breakdown
Threat Entry Updated 2026-07-13

CVE-2026-57390 - Extra Product Options Builder for WooCommerce Plugin

Missing Authorization vulnerability in EDGARROJAS Extra Product Options Builder for WooCommerce additional-product-fields-for-woocommerce allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Extra Product Options Builder for WooCommerce: from n/a through

PLUGIN Extra Product Options Builder for WooCommerce

CVE-2026-57390

MEDIUM CVSS 6.5 2026-07-13
Open Full Technical Breakdown
Threat Entry Updated 2026-07-13

CVE-2026-57386 - aBlocks Plugin

Incorrect Privilege Assignment vulnerability in Kodezen LLC aBlocks ablocks allows Privilege Escalation.This issue affects aBlocks: from n/a through < 2.9.1.

PLUGIN aBlocks

CVE-2026-57386

HIGH CVSS 8.8 2026-07-13
Open Full Technical Breakdown
Threat Entry Updated 2026-07-13

CVE-2026-57385 - Vitepos Plugin

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in appsbd Vitepos vitepos-lite allows Blind SQL Injection.This issue affects Vitepos: from n/a through

PLUGIN Vitepos

CVE-2026-57385

HIGH CVSS 8.5 2026-07-13
Open Full Technical Breakdown
Threat Entry Updated 2026-07-13

CVE-2026-57387 - Picu Plugin

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in picu picu picu allows Stored XSS.This issue affects picu: from n/a through

PLUGIN Picu

CVE-2026-57387

HIGH CVSS 7.1 2026-07-13
Open Full Technical Breakdown
Scroll to top