Live Vulnerability Intelligence
Threat Database
Search CVEs, inspect descriptions, and open detail pages with AI-assisted technical context.
Threat Entry
Updated 2026-07-24
CVE-2026-39713 - Mailercloud – Integrate webforms and synchronize website contacts Plugin
Missing Authorization vulnerability in mailercloud Mailercloud – Integrate webforms and synchronize website contacts mailercloud-integrate-webforms-synchronize-contacts allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Mailercloud – Integrate webforms and synchronize website contacts: from n/a through
PLUGIN
Mailercloud – Integrate webforms and synchronize website contacts
CVE-2026-39713
Risk Score
Threat Entry
Updated 2026-07-24
CVE-2026-39712 - tagDiv Composer Plugin
Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) vulnerability in tagDiv tagDiv Composer td-composer allows Code Injection.This issue affects tagDiv Composer: from n/a through
PLUGIN
tagDiv Composer
CVE-2026-39712
Risk Score
Threat Entry
Updated 2026-07-24
CVE-2026-39711 - RT-Theme 18 | Extensions
Insertion of Sensitive Information Into Sent Data vulnerability in stmcan RT-Theme 18 | Extensions rt18-extensions allows Retrieve Embedded Sensitive Data.This issue affects RT-Theme 18 | Extensions: from n/a through
THEME
RT-Theme 18 | Extensions
CVE-2026-39711
Risk Score
Threat Entry
Updated 2026-07-24
CVE-2026-39708 - UiCore Elements Plugin
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in uicore UiCore Elements uicore-elements allows Stored XSS.This issue affects UiCore Elements: from n/a through
PLUGIN
UiCore Elements
CVE-2026-39708
Risk Score
Threat Entry
Updated 2026-07-24
CVE-2026-39710 - RT-Theme 18 | Extensions
Cross-Site Request Forgery (CSRF) vulnerability in stmcan RT-Theme 18 | Extensions rt18-extensions allows Cross Site Request Forgery.This issue affects RT-Theme 18 | Extensions: from n/a through
THEME
RT-Theme 18 | Extensions
CVE-2026-39710
Risk Score
Threat Entry
Updated 2026-07-24
CVE-2026-39709 - The Tribal Plugin
Insertion of Sensitive Information Into Sent Data vulnerability in thetechtribe The Tribal the-tech-tribe allows Retrieve Embedded Sensitive Data.This issue affects The Tribal: from n/a through
PLUGIN
The Tribal
CVE-2026-39709
Risk Score
Threat Entry
Updated 2026-07-24
CVE-2026-39707 - Accept PayPal Payments using Contact Form 7 Plugin
Missing Authorization vulnerability in ZealousWeb Accept PayPal Payments using Contact Form 7 contact-form-7-paypal-extension allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Accept PayPal Payments using Contact Form 7: from n/a through
PLUGIN
Accept PayPal Payments using Contact Form 7
CVE-2026-39707
Risk Score
Threat Entry
Updated 2026-07-24
CVE-2026-39706 - Make My Trivia Plugin
Missing Authorization vulnerability in Netro Systems Make My Trivia trivialy allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Make My Trivia: from n/a through
PLUGIN
Make My Trivia
CVE-2026-39706
Risk Score
Threat Entry
Updated 2026-07-24
CVE-2026-39705 - MIPL WC Multisite Sync Plugin
Missing Authorization vulnerability in Mulika Team MIPL WC Multisite Sync mipl-wc-multisite-sync allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects MIPL WC Multisite Sync: from n/a through
PLUGIN
MIPL WC Multisite Sync
CVE-2026-39705
Risk Score
Threat Entry
Updated 2026-07-24
CVE-2026-39704 - Precious Metals Automated Product Pricing – Pro Plugin
Missing Authorization vulnerability in nfusionsolutions Precious Metals Automated Product Pricing – Pro precious-metals-automated-product-pricing-pro allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Precious Metals Automated Product Pricing – Pro: from n/a through
PLUGIN
Precious Metals Automated Product Pricing – Pro
CVE-2026-39704
Risk Score
Threat Entry
Updated 2026-07-24
CVE-2026-39703 - WPBITS Addons For Elementor Page Builder Plugin
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in wpbits WPBITS Addons For Elementor Page Builder wpbits-addons-for-elementor allows Stored XSS.This issue affects WPBITS Addons For Elementor Page Builder: from n/a through
PLUGIN
WPBITS Addons For Elementor Page Builder
CVE-2026-39703
Risk Score
Threat Entry
Updated 2026-07-24
CVE-2026-39702 - Animation Addons for Elementor Plugin
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Wealcoder Animation Addons for Elementor animation-addons-for-elementor allows DOM-Based XSS.This issue affects Animation Addons for Elementor: from n/a through
PLUGIN
Animation Addons for Elementor
CVE-2026-39702
Risk Score
Threat Entry
Updated 2026-07-24
CVE-2026-39696 - Elfsight WhatsApp Chat CC Plugin
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Elfsight Elfsight WhatsApp Chat CC elfsight-whatsapp-chat allows DOM-Based XSS.This issue affects Elfsight WhatsApp Chat CC: from n/a through
PLUGIN
Elfsight WhatsApp Chat CC
CVE-2026-39696
Risk Score
Threat Entry
Updated 2026-07-24
CVE-2026-39701 - ShopWP Plugin
Missing Authorization vulnerability in Andrew ShopWP wpshopify allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects ShopWP: from n/a through
PLUGIN
ShopWP
CVE-2026-39701
Risk Score
Threat Entry
Updated 2026-07-24
CVE-2026-39700 - WowOptin Plugin
Missing Authorization vulnerability in WPXPO WowOptin optin allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WowOptin: from n/a through
PLUGIN
WowOptin
CVE-2026-39700
Risk Score
Threat Entry
Updated 2026-07-24
CVE-2026-39699 - AI Workflow Automation Plugin
Missing Authorization vulnerability in massiveshift AI Workflow Automation ai-workflow-automation-lite allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects AI Workflow Automation: from n/a through
PLUGIN
AI Workflow Automation
CVE-2026-39699
Risk Score
Threat Entry
Updated 2026-07-24
CVE-2026-39698 - The Publisher Desk ads.txt Plugin
Missing Authorization vulnerability in PublisherDesk The Publisher Desk ads.txt the-publisher-desk-ads-txt allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects The Publisher Desk ads.txt: from n/a through
PLUGIN
The Publisher Desk ads.txt
CVE-2026-39698
Risk Score
Threat Entry
Updated 2026-07-24
CVE-2026-39697 - MAIO – The new AI GEO / SEO tool Plugin
Missing Authorization vulnerability in HBSS Technologies MAIO – The new AI GEO / SEO tool maio-the-new-ai-geo-seo-tool allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects MAIO – The new AI GEO / SEO tool: from n/a through
PLUGIN
MAIO – The new AI GEO / SEO tool
CVE-2026-39697
Risk Score
Threat Entry
Updated 2026-07-24
CVE-2026-39692 - tagDiv Composer Plugin
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in tagDiv tagDiv Composer td-composer allows Stored XSS.This issue affects tagDiv Composer: from n/a through
PLUGIN
tagDiv Composer
CVE-2026-39692
Risk Score
Threat Entry
Updated 2026-07-24
CVE-2026-39693 - FSM Custom Featured Image Caption Plugin
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in fesomia FSM Custom Featured Image Caption fsm-custom-featured-image-caption allows DOM-Based XSS.This issue affects FSM Custom Featured Image Caption: from n/a through
PLUGIN
FSM Custom Featured Image Caption
CVE-2026-39693
Risk Score