Live Vulnerability Intelligence
Threat Database
Search CVEs, inspect descriptions, and open detail pages with AI-assisted technical context.
Threat Entry
Updated 2026-09-23
WP Recipe Maker - Security Vulnerability (CVE-2026-86603)
The WP Recipe Maker WordPress plugin before 10.8.2 does not have any authorisation check in one of its AJAX actions, allowing any authenticated user, such as a subscriber, to retrieve the IDs and titles of other users' unpublished lists.
PLUGIN
WP Recipe Maker
CVE-2026-86603
Risk Score
Threat Entry
Updated 2026-09-23
WP Recipe Maker - Security Vulnerability (CVE-2026-86602)
The WP Recipe Maker WordPress plugin before 10.8.2 does not perform any capability check in one of its AJAX actions, allowing any authenticated user, such as a subscriber, to read the full content of unpublished recipes.
PLUGIN
WP Recipe Maker
CVE-2026-86602
Risk Score
Threat Entry
Updated 2026-09-23
Events Calendar - Security Vulnerability (CVE-2026-84743)
The Events Calendar WordPress plugin before 6.17.5 does not perform a per-object capability check on one family of its REST write routes, allowing users with a low-privilege role such as contributor to modify, unpublish, trash and take ownership of records belonging to other users, including administrators.
PLUGIN
Events Calendar
CVE-2026-84743
Risk Score
Threat Entry
Updated 2026-09-23
Events Calendar - Security Vulnerability (CVE-2026-84742)
The Events Calendar WordPress plugin before 6.17.5 does not check the capability required to publish content before creating or updating it through its REST API, allowing users with a role that cannot normally publish, such as contributor, to publish content directly and bypass editorial review.
PLUGIN
Events Calendar
CVE-2026-84742
Risk Score
Threat Entry
Updated 2026-09-24
WP OAuth Server - Security Vulnerability (CVE-2026-82843)
The WP OAuth Server ( Login with WordPress ) WordPress plugin before 6.4.0 does not bind the OpenID Connect identity assertion it issues to the authorization grant being exchanged, returning instead the assertion belonging to whichever user authenticated most recently, which allows users with the Subscriber role and above to obtain a validly signed identity assertion for another user, including an administrator, and authenticate as them at any application that uses the site for single sign-on.
PLUGIN
WP OAuth Server
CVE-2026-82843
Risk Score
Threat Entry
Updated 2026-09-23
Payment Plugins for PayPal WooCommerce - Security Vulnerability (CVE-2026-80342)
The Payment Plugins for PayPal WooCommerce WordPress plugin before 2.0.27 does not verify that a PayPal order supplied in a payment request belongs to the WooCommerce order being paid unless that PayPal order has already been completed, allowing unauthenticated attackers to have another buyer's approved but uncaptured payment captured against an order of their own.
PLUGIN
Payment Plugins for PayPal WooCommerce
CVE-2026-80342
Risk Score
Threat Entry
Updated 2026-09-23
Directorist - Security Vulnerability (CVE-2026-84026)
The Directorist: AI-Powered Business Directory, Listings & Classified Ads WordPress plugin before 8.9.5 does not restrict access to a REST endpoint that returns user records, allowing unauthenticated attackers to read registered users' private contact details.
PLUGIN
Directorist
CVE-2026-84026
Risk Score
Threat Entry
Updated 2026-09-23
Email Subscribers & Newsletters - Security Vulnerability (CVE-2026-83555)
The Email Subscribers & Newsletters WordPress plugin before 5.9.35 does not verify the per-subscriber management token before changing a subscriber's subscription status, allowing unauthenticated users to force-unsubscribe or force-confirm an arbitrary subscriber whose email address they know.
PLUGIN
Email Subscribers & Newsletters
CVE-2026-83555
Risk Score
Threat Entry
Updated 2026-09-23
Directorist - Security Vulnerability (CVE-2026-84046)
The Directorist: AI-Powered Business Directory, Listings & Classified Ads WordPress plugin before 8.9.5 does not validate a user-supplied URL before fetching it server-side, allowing users with the subscriber role and above to make the server issue requests to internal addresses.
PLUGIN
Directorist
CVE-2026-84046
Risk Score
Threat Entry
Updated 2026-09-23
MasterStudy LMS - Security Vulnerability (CVE-2026-81338)
The MasterStudy LMS WordPress Plugin WordPress plugin before 3.7.50 does not properly sanitise and restrict HTML in user-submitted content before storing it and rendering it to other users, allowing users with subscriber-level accounts and above to perform stored HTML injection, such as embedding iframes, that can be leveraged for phishing and content spoofing against other users viewing the content.
PLUGIN
MasterStudy LMS
CVE-2026-81338
Risk Score
Threat Entry
Updated 2026-09-23
Directorist - Security Vulnerability (CVE-2026-84027)
The Directorist: AI-Powered Business Directory, Listings & Classified Ads WordPress plugin before 8.9.5 does not check user capabilities when creating orders through its REST API, allowing users with the subscriber role and above to create paid order and payment records with arbitrary amounts and attribute them to other users.
PLUGIN
Directorist
CVE-2026-84027
Risk Score
Threat Entry
Updated 2026-09-23
MasterStudy LMS - Security Vulnerability (CVE-2026-81339)
The MasterStudy LMS WordPress Plugin WordPress plugin before 3.7.50 does not perform a per-object ownership check when returning a quiz attempt result, allowing any authenticated user with a minimal (subscriber) role to read other students' quiz grades, pass/fail status and attempt timestamps by referencing an attempt identifier belonging to another user.
PLUGIN
MasterStudy LMS
CVE-2026-81339
Risk Score
Threat Entry
Updated 2026-09-23
YAHMAN Add-ons - Security Vulnerability (CVE-2026-75799)
The YAHMAN Add-ons WordPress plugin before 0.9.31 does not validate the type of the remote files it caches in a publicly accessible directory, allowing unauthenticated attackers to write arbitrary PHP files on the server and achieve RCE when the relevant feature is enabled.
PLUGIN
YAHMAN Add-ons
CVE-2026-75799
Risk Score
Threat Entry
Updated 2026-09-23
Better Payment - Security Vulnerability (CVE-2026-77765)
The Better Payment WordPress plugin before 2.3.4 does not validate the submitted payment amount server-side against the merchant's configured fixed price before building the gateway charge, allowing unauthenticated users to pay an arbitrary reduced amount for a fixed-price item.
PLUGIN
Better Payment
CVE-2026-77765
Risk Score
Threat Entry
Updated 2026-09-23
Directorist - Security Vulnerability (CVE-2026-77766)
The Directorist: AI-Powered Business Directory, Listings & Classified Ads WordPress plugin before 8.9.5 does not scope one of its REST collection endpoints to the requesting user, allowing users with a subscriber-level account to read every customer's order and payment records. Versions 8.8.1 to 8.9 are not affected. The endpoint was scoped correctly in 8.8.1 and the unscoped behaviour was reintroduced in 8.9.1.
PLUGIN
Directorist
CVE-2026-77766
Risk Score
Threat Entry
Updated 2026-09-23
Zportals - Security Vulnerability (CVE-2026-18365)
The zportals WordPress plugin before 6.4.2 does not perform any capability or nonce check on one of its AJAX actions, allowing users with a subscriber-level account to disclose the display name and email address of every registered user, including administrators.
PLUGIN
Zportals
CVE-2026-18365
Risk Score
Threat Entry
Updated 2026-09-23
lity or nonce check on several of its AJAX actions, allowing users with a subscriber-level account to modify the zportals - Security Vulnerability (CVE-2026-18364)
The zportals WordPress plugin before 6.4.2 does not perform any capability or nonce check on several of its AJAX actions, allowing users with a subscriber-level account to modify the zportals WordPress plugin before 6.4.2's stored integration settings.
PLUGIN
lity or nonce check on several of its AJAX actions, allowing users with a subscriber-level account to modify the zportals
CVE-2026-18364
Risk Score
Threat Entry
Updated 2026-09-23
Divi Dash - Security Vulnerability (CVE-2026-14321)
The divi-dash WordPress plugin before 1.0.7 does not validate the source of the client IP address it uses for rate limiting and banning, allowing unauthenticated attackers to spoof arbitrary IP addresses in order to bypass rate limiting, ban chosen addresses from the feature, and grow a stored option without bound, resulting in denial of service.
PLUGIN
Divi Dash
CVE-2026-14321
Risk Score
Threat Entry
Updated 2026-09-23
Newsletters - Security Vulnerability (CVE-2026-16264)
The Newsletters WordPress plugin before 4.18.1 does not perform an ownership check on some of its subscriber management actions, and issues a management session to unauthenticated visitors on request, allowing attackers to read any subscriber's personal data and overwrite any subscriber's record including their email address.
PLUGIN
Newsletters
CVE-2026-16264
Risk Score
Threat Entry
Updated 2026-09-22
Marketking Multivendor Marketplace For Woocommerce - Security Vulnerability (CVE-2026-93344)
MarketKing plugin for WordPress before 2.1.72 contains a missing authorization vulnerability in the marketking_get_page_content AJAX action that allows authenticated attackers with subscriber-level access or higher to access arbitrary vendor administrator panel pages by supplying an arbitrary vendor user ID. Attackers can bypass authorization controls by submitting a target vendor ID in the request to access payout pages, financial reports, and vendor dashboard content belonging to any vendor in the marketplace.
PLUGIN
Marketking Multivendor Marketplace For Woocommerce
CVE-2026-93344
Risk Score