Live Vulnerability Intelligence
Threat Database
Search CVEs, inspect descriptions, and open detail pages with AI-assisted technical context.
Threat Entry
Updated 2026-09-22
AVideo - Security Vulnerability (CVE-2026-92579)
In AVideo through 29.0, the autoCSRFGuard() function maintains a hardcoded allowlist of exempt basenames tested without directory context, allowing plugin files matching core filenames to inherit CSRF exemptions. The LoginWordPress plugin file login.json.php inherits an exemption and unconditionally logs out authenticated users on cross-site POST requests before validating credentials.
PLUGIN
AVideo
CVE-2026-92579
Risk Score
Threat Entry
Updated 2026-09-22
WordPress component - Security Vulnerability (CVE-2026-89034)
TCH QRing smart ring model R20_B006 running firmware RT09R20_1.00.00_250318 contains an unauthenticated Bluetooth Low Energy access vulnerability that allows any nearby attacker to connect to the device without pairing, authentication, or user approval by exploiting the exposed Nordic UART Service which enforces no client authentication or command authorization. Attackers within Bluetooth Low Energy range can connect directly to the ring, bypassing the official application and cloud authentication, to read battery levels, activate live heart rate monitoring, and retrieve stored historical heart rate and blood oxygen records.
UNKNOWN
WordPress component
CVE-2026-89034
Risk Score
Threat Entry
Updated 2026-09-24
Blog2social - Security Vulnerability (CVE-2026-89031)
Adenion Blog2Social plugin for WordPress before 9.1.0 allows low-privileged users to modify the scheduled post records of other users. The b2s_calendar_move_post AJAX handler in includes/Ajax/Post.php issues an UPDATE against the b2s_posts table using only the attacker-supplied b2s_id primary key with no blog_user_id ownership constraint, allowing any user with the edit_posts capability to reschedule, suppress, or alter the publication state of any other user's scheduled social media post.
PLUGIN
Blog2social
CVE-2026-89031
Risk Score
Threat Entry
Updated 2026-09-24
Blog2social - Security Vulnerability (CVE-2026-89030)
Adenion Blog2Social plugin for WordPress before 9.1.0 exposes the email addresses of all registered WordPress users to low-privileged accounts. The b2s_search_user AJAX handler in includes/Ajax/Get.php invokes B2S_Tools::searchUser() in includes/Tools.php, which returns the email address of every matching user without restricting access to callers holding the list_users capability, allowing any user with the edit_posts capability to retrieve user email addresses including those of administrators.
PLUGIN
Blog2social
CVE-2026-89030
Risk Score
Threat Entry
Updated 2026-09-24
Blog2social - Security Vulnerability (CVE-2026-89029)
Adenion Blog2Social plugin for WordPress before 9.1.0 allows low-privileged users to enumerate WordPress user accounts. The b2s_get_select_mandant_user AJAX handler in includes/Ajax/Get.php resolves arbitrary user IDs supplied in the owner parameter to display names without verifying that the caller is authorized to read user account data, allowing any user with the edit_posts capability to map WordPress user IDs to display names and confirm account existence for arbitrary IDs.
PLUGIN
Blog2social
CVE-2026-89029
Risk Score
Threat Entry
Updated 2026-09-23
WP Mega Menu - Security Vulnerability (CVE-2026-92465)
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Themeum WP Mega Menu allows Blind SQL Injection. This issue affects WP Mega Menu: from n/a through 1.4.2.
THEME
WP Mega Menu
CVE-2026-92465
Risk Score
Threat Entry
Updated 2026-09-16
Appointment Hour Booking - Security Vulnerability (CVE-2026-86475)
The Appointment Hour Booking WordPress plugin before 1.5.95 does not check every appointment in a booking submission against the capacity configured for its own slot, allowing unauthenticated visitors to take slots that are already fully booked.
PLUGIN
Appointment Hour Booking
CVE-2026-86475
Risk Score
Threat Entry
Updated 2026-09-16
Eventin - Security Vulnerability (CVE-2026-84906)
The Eventin WordPress plugin before 4.1.24 does not verify that a completed payment corresponds to the order it is applied to, confirming only that the payment gateway reports the transaction as successful, not its amount, currency, or which order it belongs to, allowing unauthenticated visitors to mark unpaid orders of any value as paid by replaying the transaction of a single genuine low-value payment.
PLUGIN
Eventin
CVE-2026-84906
Risk Score
Threat Entry
Updated 2026-09-16
Formidable Forms - Security Vulnerability (CVE-2026-19857)
The Formidable Forms WordPress plugin before 6.35 does not prevent a request-derived value from reaching the WordPress shortcode parser when it substitutes a supported token into a form's custom HTML, allowing unauthenticated visitors to have arbitrary shortcodes, with attacker-chosen attributes, executed server-side on any page displaying an affected form.
PLUGIN
Formidable Forms
CVE-2026-19857
Risk Score
Threat Entry
Updated 2026-09-16
Royal Elementor Addons - Security Vulnerability (CVE-2026-13407)
The Royal Elementor Addons WordPress plugin before 1.7.1067 does not properly sanitize and escape values submitted through its form widget before including them in the body of administrator notification emails, allowing unauthenticated attackers to inject arbitrary HTML into emails sent to the site administrator on form submission.
PLUGIN
Royal Elementor Addons
CVE-2026-13407
Risk Score
Threat Entry
Updated 2026-09-17
Seraphinite Accelerator - Security Vulnerability (CVE-2026-87828)
The Seraphinite Accelerator WordPress plugin before 2.29.24 does not perform a capability check on one of its state-update AJAX actions, allowing authenticated users such as subscribers to write a malformed value that causes an uncaught error on every subsequent admin page load, making the entire admin area inaccessible to all administrators (denial of service).
PLUGIN
Seraphinite Accelerator
CVE-2026-87828
Risk Score
Threat Entry
Updated 2026-09-17
ttings, allowing users with subscriber-level access to overwrite those settings, including the API key used for the WPBot - Security Vulnerability (CVE-2026-87959)
The WPBot WordPress plugin before 8.7.6 does not perform a capability check on the AJAX action that saves its Claude AI provider settings, allowing users with subscriber-level access to overwrite those settings, including the API key used for the WPBot WordPress plugin before 8.7.6's outgoing AI requests.
PLUGIN
ttings, allowing users with subscriber-level access to overwrite those settings, including the API key used for the WPBot
CVE-2026-87959
Risk Score
Threat Entry
Updated 2026-09-17
Kboard - Security Vulnerability (CVE-2026-88910)
The kboard WordPress plugin before 6.7 does not verify ownership or context before deleting board media, allowing unauthenticated attackers to permanently delete its uploaded media files and their database records by iterating identifiers.
PLUGIN
Kboard
CVE-2026-88910
Risk Score
Threat Entry
Updated 2026-09-17
Rox Appointment Booking - Security Vulnerability (CVE-2026-87907)
The Rox Appointment Booking WordPress plugin before 1.2.8 does not perform any authorization check on the endpoints that return booking service and category records, allowing unauthenticated attackers to read the private internal notes stored on each service and category.
PLUGIN
Rox Appointment Booking
CVE-2026-87907
Risk Score
Threat Entry
Updated 2026-09-17
Rox Appointment Booking - Security Vulnerability (CVE-2026-87896)
The Rox Appointment Booking WordPress plugin before 1.2.8 does not perform any authorization check on the endpoint that returns booking agent (staff) records, allowing unauthenticated attackers to read staff email addresses, phone numbers, private internal notes and the linked WordPress account name for every agent.
PLUGIN
Rox Appointment Booking
CVE-2026-87896
Risk Score
Threat Entry
Updated 2026-09-17
Subscriptions for WooCommerce - Security Vulnerability (CVE-2026-87854)
The Subscriptions for WooCommerce WordPress plugin before 2.0.3 does not correctly validate the shared secret protecting one of its REST endpoints, allowing unauthenticated users to retrieve the store's full list of subscriptions, including customer usernames, product names, recurring amounts and payment dates.
PLUGIN
Subscriptions for WooCommerce
CVE-2026-87854
Risk Score
Threat Entry
Updated 2026-09-17
Newsletter - Security Vulnerability (CVE-2026-86823)
The Newsletter WordPress plugin before 9.3.7 does not validate the destination of the redirect performed after a public subscription action, allowing unauthenticated attackers to redirect users to arbitrary external sites and to disclose a subscriber token that grants access to that subscriber record's front-end actions.
PLUGIN
Newsletter
CVE-2026-86823
Risk Score
Threat Entry
Updated 2026-09-17
Subscriptions for WooCommerce - Security Vulnerability (CVE-2026-87860)
The Subscriptions for WooCommerce WordPress plugin before 2.0.3 does not verify the security token on the request that cancels a subscription, allowing attackers to make a logged-in customer cancel their own active subscription through a crafted request they are tricked into making.
PLUGIN
Subscriptions for WooCommerce
CVE-2026-87860
Risk Score
Threat Entry
Updated 2026-09-17
FluentBoards - Security Vulnerability (CVE-2026-89328)
The FluentBoards WordPress plugin before 2.0.15 does not properly verify that a user holds board-manager privileges before performing several board-management operations, checking only board membership. This allows any member of a board to carry out manager-only actions on it, including adding or removing members and enabling public access to a private board.
PLUGIN
FluentBoards
CVE-2026-89328
Risk Score
Threat Entry
Updated 2026-09-17
FluentBoards - Security Vulnerability (CVE-2026-89327)
The FluentBoards WordPress plugin before 2.0.15 does not verify that a board member submitting a comment is the user the comment is attributed to, allowing any board member to post comments that appear to be authored by another user, including administrators.
PLUGIN
FluentBoards
CVE-2026-89327
Risk Score