Live Vulnerability Intelligence
Threat Database
Search CVEs, inspect descriptions, and open detail pages with AI-assisted technical context.
Threat Entry
Updated 2026-09-14
Masteriyo LMS - Security Vulnerability (CVE-2026-82847)
The Masteriyo LMS WordPress plugin before 3.4.1 does not sanitise and escape one of its course fields before outputting it back in the course editor, allowing users with the instructor role to perform Stored Cross-Site Scripting attacks against higher privileged users such as administrators.
PLUGIN
Masteriyo LMS
CVE-2026-82847
Risk Score
Threat Entry
Updated 2026-09-14
BEAR - Security Vulnerability (CVE-2026-84023)
The BEAR WordPress plugin before 1.2.2 does not verify a CSRF nonce or check user capabilities before updating taxonomy terms, allowing an attacker to modify arbitrary terms by tricking a logged-in privileged user into visiting a crafted page.
PLUGIN
BEAR
CVE-2026-84023
Risk Score
Threat Entry
Updated 2026-09-14
BEAR - Security Vulnerability (CVE-2026-84024)
The BEAR WordPress plugin before 1.2.2 does not verify a CSRF nonce before saving its meta field configuration, allowing an attacker to overwrite that configuration by tricking a logged-in administrator into visiting a crafted page.
PLUGIN
BEAR
CVE-2026-84024
Risk Score
Threat Entry
Updated 2026-09-14
Masteriyo LMS - Security Vulnerability (CVE-2026-82851)
The Masteriyo LMS WordPress plugin before 3.4.1 does not verify ownership of, or restrict the type of, the records a user requests for download, allowing users with the instructor role to retrieve the full content and metadata of arbitrary posts, including other instructors' private and draft courses.
PLUGIN
Masteriyo LMS
CVE-2026-82851
Risk Score
Threat Entry
Updated 2026-09-14
BEAR - Security Vulnerability (CVE-2026-84025)
The BEAR WordPress plugin before 1.2.2 does not perform ownership checks on several handlers that return product data by a user-supplied identifier, allowing users who are restricted to their own products to read other owners' product information, including protected downloadable file URLs and private product metadata.
PLUGIN
BEAR
CVE-2026-84025
Risk Score
Threat Entry
Updated 2026-09-14
DS Ad Rotator - Security Vulnerability (CVE-2026-81402)
The DS Ad Rotator WordPress plugin through 0.8 does not perform any capability check, nonce verification, or file-type validation on its image upload handler, allowing unauthenticated attackers to upload arbitrary files, including PHP, to a web-accessible directory, which can lead to remote code execution.
PLUGIN
DS Ad Rotator
CVE-2026-81402
Risk Score
Threat Entry
Updated 2026-09-14
BE REST Endpoints - Security Vulnerability (CVE-2026-81742)
The BE REST Endpoints WordPress plugin through 1.0.0 does not perform any authorization check before allowing widgets to be read, created, updated and deleted, and does not sanitize the values it stores in them, allowing unauthenticated users to inject arbitrary web scripts which will execute in the browser of any user visiting the site.
PLUGIN
BE REST Endpoints
CVE-2026-81742
Risk Score
Threat Entry
Updated 2026-09-14
Yogeta WP Cloud - Security Vulnerability (CVE-2026-80494)
The Yogeta WP Cloud WordPress plugin through 1.0 does not validate a user-supplied file path before passing it to a file-read function on a public endpoint that lacks any authorization check, allowing unauthenticated attackers to download arbitrary files from the server, including files containing sensitive credentials.
PLUGIN
Yogeta WP Cloud
CVE-2026-80494
Risk Score
Threat Entry
Updated 2026-09-14
SAMO Forms - Security Vulnerability (CVE-2026-80491)
The SAMO Forms WordPress plugin through 1.0.0 does not properly sanitise and escape user input before using it in SQL queries in several unauthenticated actions, allowing unauthenticated attackers to perform SQL injection attacks.
PLUGIN
SAMO Forms
CVE-2026-80491
Risk Score
Threat Entry
Updated 2026-09-14
Gpx2Graphics - Security Vulnerability (CVE-2026-81090)
The Gpx2Graphics WordPress plugin through 0.3 does not perform a CSRF check when handling file uploads, nor validate the type of the uploaded file, allowing attackers to make a logged-in administrator upload arbitrary files such as PHP via a CSRF attack, leading to Remote Code Execution.
PLUGIN
Gpx2Graphics
CVE-2026-81090
Risk Score
Threat Entry
Updated 2026-09-14
Temporary Login Without Password - Security Vulnerability (CVE-2026-77752)
The Temporary Login Without Password WordPress plugin before 1.9.9 does not verify that the user requesting a temporary login holds network super admin rights before granting the new account those rights, allowing an administrator of a single site on a multisite network to take over the whole network. The same missing check also allows an existing account, including the attacker's own, to be promoted.
PLUGIN
Temporary Login Without Password
CVE-2026-77752
Risk Score
Threat Entry
Updated 2026-09-14
Export & Import WPBakery Page Builder - Security Vulnerability (CVE-2026-81429)
The Export & Import WPBakery Page Builder WordPress plugin through 1.0.2 does not perform any CSRF check on its template-import feature and does not sanitise the imported data before storing it and echoing it back, allowing attackers to make a logged-in administrator import a crafted template via a forged request that results in Stored Cross-Site Scripting executed in the administrator's session.
PLUGIN
Export & Import WPBakery Page Builder
CVE-2026-81429
Risk Score
Threat Entry
Updated 2026-09-14
Temporary Login Without Password - Security Vulnerability (CVE-2026-77753)
The Temporary Login Without Password WordPress plugin before 1.9.9 does not prevent a temporary user from creating an Application Password, and does not revoke one when the temporary access expires or is disabled, allowing the recipient of a temporary login to retain working access to the site over REST and XML-RPC after the administrator believes it has been withdrawn. The retained access carries whatever role was granted, which for the Temporary Login Without Password WordPress plugin before 1.9.9's main use case is Administrator.
PLUGIN
Temporary Login Without Password
CVE-2026-77753
Risk Score
Threat Entry
Updated 2026-09-14
SureRank SEO - Security Vulnerability (CVE-2026-78152)
The SureRank SEO WordPress plugin before 1.10.1 does not exclude users' registered account email addresses from the structured data it outputs on public pages by default, allowing unauthenticated visitors to obtain the email address of any user who has published content.
PLUGIN
SureRank SEO
CVE-2026-78152
Risk Score
Threat Entry
Updated 2026-09-23
WebTotem Backups - Security Vulnerability (CVE-2026-77006)
The WebTotem Backups WordPress plugin through 1.0.1 does not validate a user-supplied file path, does not check the capability of the user making the request, and discards the result of its own CSRF check, allowing any authenticated user, such as a subscriber, to delete arbitrary files on the server, which can lead to a site takeover.
PLUGIN
WebTotem Backups
CVE-2026-77006
Risk Score
Threat Entry
Updated 2026-09-14
CODE MONKEYS PROPOSALS - Security Vulnerability (CVE-2026-77005)
The CODE MONKEYS PROPOSALS WordPress plugin through 1.0.1 does not validate a user-supplied file path before deleting a file, and does not check the capability of the user making the request, allowing any authenticated user, such as a subscriber, to delete arbitrary files on the server, which can lead to a site takeover.
PLUGIN
CODE MONKEYS PROPOSALS
CVE-2026-77005
Risk Score
Threat Entry
Updated 2026-09-14
Booking for Appointments and Events Calendar - Security Vulnerability (CVE-2026-77705)
The Booking for Appointments and Events Calendar WordPress plugin before 2.4.10 does not verify that the user editing a customer or employee record is entitled to modify the WordPress account linked to it, allowing users holding Amelia's customer or employee management permissions to set the password and email address of other users' WordPress accounts and take them over.
PLUGIN
Booking for Appointments and Events Calendar
CVE-2026-77705
Risk Score
Threat Entry
Updated 2026-09-14
Booking for Appointments and Events Calendar - Security Vulnerability (CVE-2026-77689)
The Booking for Appointments and Events Calendar WordPress plugin before 9.8.1 does not verify that a payment was actually taken before recording a booking as paid, trusting the payment gateway named in a public, unauthenticated booking request even when the site has never configured that gateway. This lets an unauthenticated attacker obtain confirmed, fully paid appointments and events without any payment being collected.
PLUGIN
Booking for Appointments and Events Calendar
CVE-2026-77689
Risk Score
Threat Entry
Updated 2026-09-14
Frontegg SAML SSO - Security Vulnerability (CVE-2026-75800)
The Frontegg SAML SSO WordPress plugin through 1.0.1 does not verify the signature or issuer of SAML authentication responses before establishing a session, allowing unauthenticated attackers to log in as any user, including administrators, as well as to create arbitrary accounts.
PLUGIN
Frontegg SAML SSO
CVE-2026-75800
Risk Score
Threat Entry
Updated 2026-09-11
Visualcomposer - Security Vulnerability (CVE-2026-62138)
Contributor Cross Site Scripting (XSS) in Visual Composer Website Builder
PLUGIN
Visualcomposer
CVE-2026-62138
Risk Score