Live Vulnerability Intelligence
Threat Database
Search CVEs, inspect descriptions, and open detail pages with AI-assisted technical context.
Threat Entry
Updated 2026-09-26
Marketking Multivendor Marketplace For Woocommerce - Security Vulnerability (CVE-2026-93343)
MarketKing plugin for WordPress before 2.1.72 contains a missing authorization vulnerability in the marketking_admin_vendors_ajax AJAX action that allows authenticated attackers with subscriber-level access or higher to retrieve the complete vendor directory by sending a crafted AJAX request. Attackers can exploit the absence of capability checks in the vendor management action to retrieve internal user IDs, usernames, and email addresses of all registered vendors, exposing personally identifiable information to any logged-in user regardless of role.
PLUGIN
Marketking Multivendor Marketplace For Woocommerce
CVE-2026-93343
Risk Score
Threat Entry
Updated 2026-09-23
Marketking Multivendor Marketplace For Woocommerce - Security Vulnerability (CVE-2026-93342)
MarketKing plugin for WordPress before 2.1.72 contains a missing authorization vulnerability in the marketking_duplicate_product AJAX action that allows authenticated attackers with subscriber-level access or higher to duplicate any vendor's product by supplying an arbitrary product ID. Attackers can bypass ownership verification to copy any vendor's product listings, including private product metadata, and assign the duplicated copy to their own vendor account without the victim's knowledge or consent.
PLUGIN
Marketking Multivendor Marketplace For Woocommerce
CVE-2026-93342
Risk Score
Threat Entry
Updated 2026-09-22
Marketking Multivendor Marketplace For Woocommerce - Security Vulnerability (CVE-2026-93341)
MarketKing plugin for WordPress before 2.1.72 contains a missing authorization vulnerability in the marketking_send_refund AJAX action that allows authenticated attackers with subscriber-level access or higher to create refund requests against any order by supplying an arbitrary order ID. Attackers can submit crafted AJAX requests targeting any order ID to create fraudulent refund requests against orders they did not place, enabling marketplace disruption and unauthorized interference with other users' orders.
PLUGIN
Marketking Multivendor Marketplace For Woocommerce
CVE-2026-93341
Risk Score
Threat Entry
Updated 2026-09-22
Hashbar Wp Notification Bar - Security Vulnerability (CVE-2026-94117)
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in DevItems HashBar – WordPress Notification Bar allows Blind SQL Injection. This issue affects HashBar – WordPress Notification Bar: from n/a through 2.0.3.
PLUGIN
Hashbar Wp Notification Bar
CVE-2026-94117
Risk Score
Threat Entry
Updated 2026-09-22
Wp Travel Engine - Security Vulnerability (CVE-2026-9231)
The WP Travel Engine – Tour Booking Plugin – Tour Operator Software plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 6.8.0 via the wte_get_template function. This makes it possible for authenticated attackers, with contributor-level access and above, to include and execute arbitrary .php files on the server, allowing the execution of any PHP code in those files. This can be used to bypass access controls, obtain sensitive data, or achieve code execution in cases where .php file types can be uploaded and…
PLUGIN
Wp Travel Engine
CVE-2026-9231
Risk Score
Threat Entry
Updated 2026-09-22
Ecab Taxi Booking Manager - Security Vulnerability (CVE-2026-93928)
Authentication Bypass Using an Alternate Path or Channel vulnerability in Magepeople inc. Taxi Booking Manager for WooCommerce allows Authentication Bypass. This issue affects Taxi Booking Manager for WooCommerce: from n/a before 2.0.8.
PLUGIN
Ecab Taxi Booking Manager
CVE-2026-93928
Risk Score
Threat Entry
Updated 2026-09-22
Webappick Product Feed For Woocommerce - Security Vulnerability (CVE-2026-15095)
The Product Feed Manager for WooCommerce – CTX Feed – Support 220+ Shopping & Social Channels plugin for WordPress is vulnerable to Directory Traversal in all versions up to, and including, 6.6.43 via the 'provider' parameter. This makes it possible for authenticated attackers, with shop manager-level access and above, to delete arbitrary files on the server, which can lead to remote code execution when critical files are deleted. Exploitation requires two sequential REST API calls: first to /wp-json/ctxfeed/v1/make_feed/save_feed_config to persist the traversal payload in wp_options, then to /wp-json/ctxfeed/v1/manage_feeds/delete_feed to trigger…
PLUGIN
Webappick Product Feed For Woocommerce
CVE-2026-15095
Risk Score
Threat Entry
Updated 2026-09-22
Wp Crm System - Security Vulnerability (CVE-2026-9004)
The WP-CRM System – Manage Clients and Projects plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 3.4.6 via the 'contact_id' parameter. This makes it possible for authenticated attackers, with contributor-level access and above, to extract full names, email addresses, phone numbers, mobile numbers, fax numbers, and physical address information of arbitrary CRM contact records by enumerating the contact_id parameter.
PLUGIN
Wp Crm System
CVE-2026-9004
Risk Score
Threat Entry
Updated 2026-09-22
Woo Product Bundle - Security Vulnerability (CVE-2026-93836)
The WPC Product Bundles for WooCommerce plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'qty' parameter in all versions up to, and including, 8.6.6 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. The float cast used during quantity validation allows a numeric-prefixed payload such as '1' to pass validation while retaining its malicious HTML, which is then stored verbatim in order item metadata…
PLUGIN
Woo Product Bundle
CVE-2026-93836
Risk Score
Threat Entry
Updated 2026-09-22
Wp Yelp Review Slider - Security Vulnerability (CVE-2026-93778)
The WP Yelp Review Slider plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Yelp Review Text (imported via wpyelp_download_source) in all versions up to, and including, 9.2 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. The malicious payload originates from an anonymous Yelp reviewer on a public platform and requires no WordPress account; it is introduced into the database during the site administrator's ordinary…
PLUGIN
Wp Yelp Review Slider
CVE-2026-93778
Risk Score
Threat Entry
Updated 2026-09-22
Woocommerce Products Filter - Security Vulnerability (CVE-2026-92969)
The HUSKY – Products Filter for WooCommerce Professional plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 1.4.4 via the 'shortcode' parameter parameter. This makes it possible for unauthenticated attackers to include and execute arbitrary .php files on the server, allowing the execution of any PHP code in those files. This can be used to bypass access controls, obtain sensitive data, or achieve code execution in cases where .php file types can be uploaded and included. This vulnerability is exploitable by unauthenticated users…
PLUGIN
Woocommerce Products Filter
CVE-2026-92969
Risk Score
Threat Entry
Updated 2026-09-22
The WP Ultimate Review - Security Vulnerability (CVE-2026-92235)
The The WP Ultimate Review plugin for WordPress is vulnerable to arbitrary shortcode execution in all versions up to, and including, 2.4.2. This is due to the software allowing users to execute an action that does not properly validate a value before running do_shortcode. This makes it possible for authenticated attackers, with subscriber-level access and above, to execute arbitrary shortcodes.
PLUGIN
The WP Ultimate Review
CVE-2026-92235
Risk Score
Threat Entry
Updated 2026-09-23
wpForo Forum - Security Vulnerability (CVE-2026-91092)
The wpForo Forum plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 3.1.5. This is due to the plugin not properly verifying that a user is authorized to perform an action. This makes it possible for authenticated attackers, with subscriber-level access and above, to take over another guest author's forum post and modify its title, body, author name, and stored owner email address. This requires that guest posting and editing are enabled on the forum, and that the attacker knows the target guest author's…
PLUGIN
wpForo Forum
CVE-2026-91092
Risk Score
Threat Entry
Updated 2026-09-22
Image Sizes - Security Vulnerability (CVE-2026-7622)
The ThumbPress plugin for WordPress is vulnerable to unauthorized access in versions up to and including 6.2.1. This is due to missing capability checks and nonce verification in the send_deactivation_survey() function registered via the wp_ajax_pl-plugin-deactivation AJAX action. This makes it possible for authenticated attackers, with Subscriber-level access and above, to deactivate the ThumbPress plugin on the affected site by sending a crafted POST request to admin-ajax.
PLUGIN
Image Sizes
CVE-2026-7622
Risk Score
Threat Entry
Updated 2026-09-22
Wp Table Builder - Security Vulnerability (CVE-2026-6922)
The WP Table Builder – Drag & Drop Table Builder plugin for WordPress is vulnerable to Incorrect Authorization in all versions up to, and including, 2.2.1. This is due to an operator precedence bug in the post-type guard within the trash_table_bulk() and restore_table_bulk() functions that causes the guard to never fire, combined with a permission callback that only verifies plugin role membership without per-post-type or ownership checks. This makes it possible for authenticated attackers, with subscriber-level access and above, to trash or restore any post, page, or custom post type…
PLUGIN
Wp Table Builder
CVE-2026-6922
Risk Score
Threat Entry
Updated 2026-09-22
Hostel - Security Vulnerability (CVE-2026-1645)
The Hostel plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'custom_currency' parameter and the 'locale_url' setting in all versions up to, and including, 1.1.8 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Administrator-level access, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. This only affects multi-site installations and installations where unfiltered_html has been disabled.
PLUGIN
Hostel
CVE-2026-1645
Risk Score
Threat Entry
Updated 2026-09-23
Tutor - Security Vulnerability (CVE-2026-18439)
The Tutor LMS – eLearning and online course solution plugin for WordPress is vulnerable to Insecure Direct Object Reference in versions up to, and including, 4.0.7 via the tutor_quiz_builder_save AJAX action due to missing validation that nested question_id, answer_id, deleted_question_ids[], and deleted_answer_ids[] values in the submitted payload belong to a quiz/topic/course the requester is authorized to manage. The handler only validates the top-level course_id, topic_id, and (when supplied) payload['ID'], but the nested identifiers are passed straight into $wpdb->update/DELETE statements in QuizBuilder::save_questions(), QuizBuilder::save_question_answers(), and QuizBuilder::handle_delete(). This makes it possible for authenticated…
PLUGIN
Tutor
CVE-2026-18439
Risk Score
Threat Entry
Updated 2026-09-22
Rw Elephant Rental Inventory - Security Vulnerability (CVE-2026-4123)
The RW Elephant Rental Inventory plugin for WordPress is vulnerable to Missing Authorization in all versions up to and including 2.3.13. This is due to a missing capability check on the toggle_cache() function which is hooked to the wp_ajax_toggle_cache AJAX action. The function also lacks nonce verification. This makes it possible for authenticated attackers, with Subscriber-level access and above, to toggle the plugin's cache setting on or off by sending a POST request to admin-ajax.
PLUGIN
Rw Elephant Rental Inventory
CVE-2026-4123
Risk Score
Threat Entry
Updated 2026-09-22
Live Composer Page Builder - Security Vulnerability (CVE-2026-16778)
The Live Composer – Free WordPress Website Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'dslc_module_downloads_output' Shortcode Content in all versions up to, and including, 2.1.21 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. The save-time wp_kses_post check is bypassed because the payload is stored as a serialized string containing no HTML tags for kses to tokenize, and…
PLUGIN
Live Composer Page Builder
CVE-2026-16778
Risk Score
Threat Entry
Updated 2026-09-22
Wp User Manager - Security Vulnerability (CVE-2026-18345)
The WP User Manager plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the Connect::complete() function in versions up to, and including, 2.9.18. The function is registered on the admin_init hook (which fires for every authenticated user that reaches /wp-admin/, including Subscribers) and performs no current_user_can() or nonce verification before fetching Stripe credentials from the external WPUM connect service and writing them (publishable key, secret key, gateway mode, and connected Stripe account ID) into the wpum_settings option via wpum_update_option()/update_option(). This makes it…
PLUGIN
Wp User Manager
CVE-2026-18345
Risk Score