Live Vulnerability Intelligence
Threat Database
Search CVEs, inspect descriptions, and open detail pages with AI-assisted technical context.
Threat Entry
Updated 2026-07-13
CVE-2026-57383 - JobSearch Plugin
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in eyecix JobSearch wp-jobsearch allows Stored XSS.This issue affects JobSearch: from n/a through
PLUGIN
JobSearch
CVE-2026-57383
Risk Score
Threat Entry
Updated 2026-07-13
CVE-2026-57382 - Simple File List Plugin
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Mitchell Bennis Simple File List simple-file-list allows Reflected XSS.This issue affects Simple File List: from n/a through
PLUGIN
Simple File List
CVE-2026-57382
Risk Score
Threat Entry
Updated 2026-07-13
CVE-2026-57381 - PropertyHive Plugin
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Property Hive PropertyHive propertyhive allows Reflected XSS.This issue affects PropertyHive: from n/a through
PLUGIN
PropertyHive
CVE-2026-57381
Risk Score
Threat Entry
Updated 2026-07-13
CVE-2026-57380 - Extensions for Leaflet Map Plugin
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in hupe13 Extensions for Leaflet Map extensions-leaflet-map allows DOM-Based XSS.This issue affects Extensions for Leaflet Map: from n/a through
PLUGIN
Extensions for Leaflet Map
CVE-2026-57380
Risk Score
Threat Entry
Updated 2026-07-13
CVE-2026-57379 - FormyChat Plugin
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WPPOOL FormyChat social-contact-form allows Stored XSS.This issue affects FormyChat: from n/a through
PLUGIN
FormyChat
CVE-2026-57379
Risk Score
Threat Entry
Updated 2026-07-13
CVE-2026-57371 - WPJAM Basic Plugin
Deserialization of Untrusted Data vulnerability in denishua WPJAM Basic wpjam-basic allows Object Injection.This issue affects WPJAM Basic: from n/a through
PLUGIN
WPJAM Basic
CVE-2026-57371
Risk Score
Threat Entry
Updated 2026-07-13
CVE-2026-57378 - Advanced Forms Plugin
Missing Authorization vulnerability in Phil Kurth Advanced Forms advanced-forms allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Advanced Forms: from n/a through
PLUGIN
Advanced Forms
CVE-2026-57378
Risk Score
Threat Entry
Updated 2026-07-13
CVE-2026-57372 - WPJAM Basic Plugin
Server-Side Request Forgery (SSRF) vulnerability in denishua WPJAM Basic wpjam-basic allows Server Side Request Forgery.This issue affects WPJAM Basic: from n/a through
PLUGIN
WPJAM Basic
CVE-2026-57372
Risk Score
Threat Entry
Updated 2026-07-13
CVE-2026-57376 - Elementor Plugin
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Element Invader ElementInvader Addons for Elementor elementinvader-addons-for-elementor allows DOM-Based XSS.This issue affects ElementInvader Addons for Elementor: from n/a through
PLUGIN
Elementor
CVE-2026-57376
Risk Score
Threat Entry
Updated 2026-07-13
CVE-2026-57369 - Themify Builder Plugin
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in themifyme Themify Builder themify-builder allows Reflected XSS.This issue affects Themify Builder: from n/a through
PLUGIN
Themify Builder
CVE-2026-57369
Risk Score
Threat Entry
Updated 2026-07-13
CVE-2026-57368 - Jobmonster Plugin
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in NooTheme Jobmonster noo-jobmonster allows Reflected XSS.This issue affects Jobmonster: from n/a through
PLUGIN
Jobmonster
CVE-2026-57368
Risk Score
Threat Entry
Updated 2026-07-13
CVE-2026-57377 - WowAddons Plugin
Missing Authorization vulnerability in WPXPO WowAddons product-addons allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WowAddons: from n/a through
PLUGIN
WowAddons
CVE-2026-57377
Risk Score
Threat Entry
Updated 2026-07-13
CVE-2026-57375 - MStore API Plugin
Missing Authorization vulnerability in FluxBuilder MStore API mstore-api allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects MStore API: from n/a through
PLUGIN
MStore API
CVE-2026-57375
Risk Score
Threat Entry
Updated 2026-07-13
CVE-2026-57363 - ChatBot Plugin
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in QuantumCloud ChatBot chatbot allows Stored XSS.This issue affects ChatBot: from n/a through
PLUGIN
ChatBot
CVE-2026-57363
Risk Score
Threat Entry
Updated 2026-07-13
CVE-2026-57365 - reCAPTCHA (v2 & v3) for Asgaros Forum Plugin
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Hitesh Chandwani reCAPTCHA (v2 & v3) for Asgaros Forum recaptcha-for-asgaros-forum allows DOM-Based XSS.This issue affects reCAPTCHA (v2 & v3) for Asgaros Forum: from n/a through
PLUGIN
reCAPTCHA (v2 & v3) for Asgaros Forum
CVE-2026-57365
Risk Score
Threat Entry
Updated 2026-07-13
CVE-2026-57364 - Better Payment – Instant Payments, Donations, Fundraising with Subscriptions & More Plugin
Improper Validation of Specified Quantity in Input vulnerability in WPDeveloper Better Payment – Instant Payments, Donations, Fundraising with Subscriptions & More better-payment allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects Better Payment – Instant Payments, Donations, Fundraising with Subscriptions & More: from n/a through
PLUGIN
Better Payment – Instant Payments, Donations, Fundraising with Subscriptions & More
CVE-2026-57364
Risk Score
Threat Entry
Updated 2026-07-13
CVE-2026-12582 - Library Management System Plugin
The Library Management System WordPress plugin before 3.5.8 does not sanitize and escape a user-supplied parameter before using it in a SQL statement, allowing unauthenticated attackers to perform SQL injection and extract arbitrary data from the database, including user password hashes.
PLUGIN
Library Management System
CVE-2026-12582
Risk Score
Threat Entry
Updated 2026-07-13
CVE-2026-12396 - Wp Job Portal Plugin
The WP Job Portal WordPress plugin before 2.5.5 does not perform capability or ownership checks before allowing job moderation actions, allowing authenticated users with a subscriber-level (self-registerable) account to approve, feature, or reject arbitrary jobs, including those owned by other users.
PLUGIN
Wp Job Portal
CVE-2026-12396
Risk Score
Threat Entry
Updated 2026-07-13
CVE-2026-12397 - Wp Job Portal Plugin
The WP Job Portal WordPress plugin before 2.5.5 does not verify ownership when returning an employer's contact email for a given job, allowing authenticated users with a subscriber-level (self-registerable) account to read other employers' private account email addresses by enumerating job identifiers.
PLUGIN
Wp Job Portal
CVE-2026-12397
Risk Score
Threat Entry
Updated 2026-07-13
CVE-2026-11964 - Before 5 Plugin
The User Registration & Membership WordPress plugin before 5.2.2 does not verify the authenticity of incoming payment-provider webhook notifications before acting on them, allowing unauthenticated attackers to forge a payment-approved event and activate a paid membership subscription without completing a real payment.
PLUGIN
Before 5
CVE-2026-11964
Risk Score