sales@hackhalt.com
Free Download

Live Vulnerability Intelligence

Threat Database

Search CVEs, inspect descriptions, and open detail pages with AI-assisted technical context.

Total40,784
Critical3,170
High11,981
Medium25,054
Reset
Showing 2801-2820 of 40784 records
Threat Entry Updated 2026-09-18

King Addons for Elementor - Security Vulnerability (CVE-2026-84904)

The King Addons for Elementor WordPress plugin before 51.1.81 does not perform per-object authorization checks on a group of image-optimization actions, gating them only on a coarse capability that lower-privileged users also hold and never confirming ownership of the targeted object, allowing authenticated users with author-level access and above to disclose absolute file paths for, overwrite the bytes of, and site-wide re-reference media belonging to other users, including administrators.

PLUGIN King Addons for Elementor

CVE-2026-84904

LOW CVSS 3.8 2026-09-18
Open Full Technical Breakdown
Threat Entry Updated 2026-09-18

MasterStudy LMS - Security Vulnerability (CVE-2026-81340)

The MasterStudy LMS WordPress Plugin WordPress plugin before 3.7.50 does not perform per-object ownership or capability checks when updating orders through its REST API, allowing users with the Instructor role to modify any order on the site, granting free course enrolment, revoking other users' paid enrolments, and tampering with order notes.

PLUGIN MasterStudy LMS

CVE-2026-81340

LOW CVSS 3.8 2026-09-18
Open Full Technical Breakdown
Threat Entry Updated 2026-09-18

King Addons for Elementor - Security Vulnerability (CVE-2026-84903)

The King Addons for Elementor WordPress plugin before 51.1.81 does not perform any capability, post-status, or password check before rendering the content of a user-supplied post, allowing users with Contributor-level access and above to read the content of private, draft, pending, and password-protected posts they are not authorized to access.

PLUGIN King Addons for Elementor

CVE-2026-84903

LOW CVSS 2.7 2026-09-18
Open Full Technical Breakdown
Threat Entry Updated 2026-09-18

Shortpixel Image Optimiser - Security Vulnerability (CVE-2026-17086)

The ShortPixel Image Optimizer – Optimize Images, Convert WebP & AVIF plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 6.5.5 via deserialization of untrusted input . This makes it possible for authenticated attackers, with author-level access and above, to inject a PHP Object. No known POP chain is present in the vulnerable software, which means this vulnerability has no impact unless another plugin or theme containing a POP chain is installed on the site. If a POP chain is present via an…

PLUGIN Shortpixel Image Optimiser

CVE-2026-17086

HIGH CVSS 8.8 2026-09-18
Open Full Technical Breakdown
Threat Entry Updated 2026-09-18

Rt Mega Menu - Security Vulnerability (CVE-2026-15650)

The RT Mega Menu – Mega Menu Builder for Elementor & Gutenberg plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'pointer_menu_item' Block Attribute in all versions up to, and including, 1.5.2 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. The payload bypasses wp_kses_post filtering applied to post content on save because it contains no HTML tags and survives intact…

PLUGIN Rt Mega Menu

CVE-2026-15650

MEDIUM CVSS 6.4 2026-09-18
Open Full Technical Breakdown
Threat Entry Updated 2026-10-14

Rt Mega Menu - Security Vulnerability (CVE-2026-14855)

The RT Mega Menu plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'css[left]' parameter in all versions up to, and including, 1.5.1 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Subscriber-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.

PLUGIN Rt Mega Menu

CVE-2026-14855

MEDIUM CVSS 6.4 2026-09-18
Open Full Technical Breakdown
Threat Entry Updated 2026-09-18

Element Pack Addons for Elementor – Elementor Widgets, Elementor Templates, Elementor Addons - Security Vulnerability (CVE-2026-92991)

The Biggop Library is vulnerable to Cross-Site Scripting via the ‘display_id’ parameter from the Sigmative API in various versions due to insufficient output escaping. This makes it possible for attackers who can compromise the Sigmative API server to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.

THEME Element Pack Addons for Elementor – Elementor Widgets, Elementor Templates, Elementor Addons

CVE-2026-92991

MEDIUM CVSS 5.4 2026-09-18
Open Full Technical Breakdown
Threat Entry Updated 2026-09-19

Brizy – Page Builder - Security Vulnerability (CVE-2026-2585)

The Brizy – Page Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘rootAttributes’ parameter in all versions up to, and including, 2.8.14 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.

THEME Brizy – Page Builder

CVE-2026-2585

MEDIUM CVSS 6.4 2026-09-18
Open Full Technical Breakdown
Threat Entry Updated 2026-09-19

Appointment Booking Plugin – LatePoint | Calendar & Scheduling for WordPress - Security Vulnerability (CVE-2026-18441)

The Appointment Booking Plugin – LatePoint | Calendar & Scheduling for WordPress plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 5.6.9 via the set_customer_object due to missing validation on a user controlled key. This makes it possible for unauthenticated attackers to enumerate arbitrary customer records and disclose personally identifiable information - including first name, last name, email address, and phone number - by iterating the customer[id] parameter. This issue is exploitable only when the site is configured with customer authentication disabled…

PLUGIN Appointment Booking Plugin – LatePoint | Calendar & Scheduling for WordPress

CVE-2026-18441

MEDIUM CVSS 4.3 2026-09-18
Open Full Technical Breakdown
Threat Entry Updated 2026-09-18

Motors – Car Dealership & Classified Listings Plugin - Security Vulnerability (CVE-2026-16750)

The Motors – Car Dealership & Classified Listings Plugin plugin for WordPress is vulnerable to unauthorized access of data due to missing authorization checks in mvl_ajax_dealer_load_cars() function in all versions up to, and including, 1.4.120. This makes it possible for unauthenticated attackers to retrieve draft, pending, private, and future car listings belonging to arbitrary users.

PLUGIN Motors – Car Dealership & Classified Listings Plugin

CVE-2026-16750

MEDIUM CVSS 5.3 2026-09-17
Open Full Technical Breakdown
Threat Entry Updated 2026-09-18

Booking for Appointments and Events Calendar – Amelia - Security Vulnerability (CVE-2026-14311)

The Booking for Appointments and Events Calendar – Amelia plugin for WordPress is vulnerable to unauthorized access and modification of data due to a missing ownership verification on /users/customers/ endpoint in all versions up to, and including, 2.4.4. This makes it possible for authenticated attackers, with wpamelia-provider role, to view and modify arbitrary customers, including password reset. Takeover of WordPress user accounts, with the roles up to Editor, is also possible if that user had made an Amelia booking. This vulnerability affects only the Premium version of the plugin, where…

PLUGIN Booking for Appointments and Events Calendar – Amelia

CVE-2026-14311

MEDIUM CVSS 5.4 2026-09-17
Open Full Technical Breakdown
Threat Entry Updated 2026-09-18

Booking for Appointments and Events Calendar – Amelia - Security Vulnerability (CVE-2026-16582)

The Booking for Appointments and Events Calendar – Amelia plugin for WordPress is vulnerable to unauthorized modification of data in all versions up to, and including, 2.4.5. This is due to the plugin accepting a client-supplied package-redemption identifier as proof of payment without validating it. This makes it possible for unauthenticated attackers to create approved appointment bookings without completing payment

PLUGIN Booking for Appointments and Events Calendar – Amelia

CVE-2026-16582

MEDIUM CVSS 5.3 2026-09-17
Open Full Technical Breakdown
Threat Entry Updated 2026-09-24

Faust.js is a headless WordPress toolkit - Security Vulnerability (CVE-2026-54239)

Faust.js is a headless WordPress toolkit. Prior to 1.8.11, the FaustWP WordPress plugin authenticates only the ciphertext in its token envelope and excludes the 16-byte initialization vector from the HMAC in WPE\FaustWP\Auth\encrypt() and WPE\FaustWP\Auth\decrypt() in plugins/faustwp/includes/auth/functions.php. A logged-in non-administrator who obtains an authorization code from GET /generate can modify the unauthenticated initialization vector so that CBC decryption changes the token type and user identifier while the HMAC remains valid. This can produce an access token for an Administrator and permit full WordPress REST API access, administrator-account creation, plugin installation, and…

PLUGIN Faust.js is a headless WordPress toolkit

CVE-2026-54239

HIGH CVSS 8.8 2026-09-17
Open Full Technical Breakdown

WordPress security that blocks attacks before they land.

sales@hackhalt.com

Product

Resources

Company

© Hack Halt Inc. All rights reserved.