Threat Database (40,784)

Threat Entry Updated 2026-09-11

Quiz Master Next - Security Vulnerability (CVE-2026-62140)

Unauthenticated Insecure Direct Object References (IDOR) in Quiz And Survey Master

PLUGIN Quiz Master Next

CVE-2026-62140

MEDIUM CVSS 5.3 2026-09-11

Risk Score

Open Full Technical Breakdown

Threat Entry Updated 2026-09-11

Bbpress - Security Vulnerability (CVE-2026-62137)

Unauthenticated Sensitive Data Exposure in bbPress

PLUGIN Bbpress

CVE-2026-62137

MEDIUM CVSS 5.3 2026-09-11

Risk Score

Open Full Technical Breakdown

Threat Entry Updated 2026-09-11

Flexible Quantity Measurement Price Calculator For Woocommerce - Security Vulnerability (CVE-2026-62136)

Unauthenticated Broken Access Control in Flexible Quantity – Measurement Price Calculator for WooCommerce

PLUGIN Flexible Quantity Measurement Price Calculator For Woocommerce

CVE-2026-62136

MEDIUM CVSS 5.3 2026-09-11

Risk Score

Open Full Technical Breakdown

Threat Entry Updated 2026-09-11

Google Site Kit - Security Vulnerability (CVE-2026-62139)

Unauthenticated Cross Site Request Forgery (CSRF) in Site Kit by Google

PLUGIN Google Site Kit

CVE-2026-62139

MEDIUM CVSS 4.3 2026-09-11

Risk Score

Open Full Technical Breakdown

Threat Entry Updated 2026-09-11

Ameliabooking - Security Vulnerability (CVE-2026-62112)

Editor SQL Injection in Amelia

PLUGIN Ameliabooking

CVE-2026-62112

HIGH CVSS 7.6 2026-09-11

Risk Score

Open Full Technical Breakdown

Threat Entry Updated 2026-09-11

Rometheme For Elementor - Security Vulnerability (CVE-2026-62133)

Subscriber Cross Site Request Forgery (CSRF) in RTMKit

PLUGIN Rometheme For Elementor

CVE-2026-62133

MEDIUM CVSS 5.4 2026-09-11

Risk Score

Open Full Technical Breakdown

Threat Entry Updated 2026-09-11

Booktics - Security Vulnerability (CVE-2026-62135)

Unauthenticated Broken Access Control in Booktics

PLUGIN Booktics

CVE-2026-62135

MEDIUM CVSS 5.3 2026-09-11

Risk Score

Open Full Technical Breakdown

Threat Entry Updated 2026-09-11

Learning Management System - Security Vulnerability (CVE-2026-62132)

Subscriber Broken Access Control in Masteriyo - LMS

PLUGIN Learning Management System

CVE-2026-62132

MEDIUM CVSS 5.3 2026-09-11

Risk Score

Open Full Technical Breakdown

Threat Entry Updated 2026-09-11

Content Protector - Security Vulnerability (CVE-2026-62114)

Unauthenticated Broken Access Control in Passster

PLUGIN Content Protector

CVE-2026-62114

MEDIUM CVSS 5.3 2026-09-11

Risk Score

Open Full Technical Breakdown

Threat Entry Updated 2026-09-11

Astra Sites - Security Vulnerability (CVE-2026-62134)

Contributor Insecure Direct Object References (IDOR) in Starter Templates

PLUGIN Astra Sites

CVE-2026-62134

MEDIUM CVSS 4.3 2026-09-11

Risk Score

Open Full Technical Breakdown

Threat Entry Updated 2026-09-11

Slim Seo - Security Vulnerability (CVE-2026-62113)

Contributor Insecure Direct Object References (IDOR) in Slim SEO

PLUGIN Slim Seo

CVE-2026-62113

MEDIUM CVSS 4.3 2026-09-11

Risk Score

Open Full Technical Breakdown

Threat Entry Updated 2026-09-11

WordPress component - Security Vulnerability (CVE-2026-62105)

Unauthenticated PHP Object Injection in ThemeREX Addons < 2.45.0 versions.

UNKNOWN WordPress component

CVE-2026-62105

CRITICAL CVSS 9.8 2026-09-11

Risk Score

Open Full Technical Breakdown

Threat Entry Updated 2026-09-11

Everest Forms - Security Vulnerability (CVE-2026-62103)

Unauthenticated PHP Object Injection in Everest Forms

PLUGIN Everest Forms

CVE-2026-62103

CRITICAL CVSS 9.8 2026-09-11

Risk Score

Open Full Technical Breakdown

Threat Entry Updated 2026-11-12

Masteriyo - LMS - Security Vulnerability (CVE-2026-62107)

Deserialization of Untrusted Data vulnerability in ThemeGrill Masteriyo - LMS learning-management-system allows Object Injection.This issue affects Masteriyo - LMS: from n/a through 3.4.0.

THEME Masteriyo - LMS

CVE-2026-62107

HIGH CVSS 8.8 2026-09-11

Risk Score

Open Full Technical Breakdown

Threat Entry Updated 2026-09-11

Sms Alert - Security Vulnerability (CVE-2026-62106)

Subscriber Privilege Escalation in SMS Alert Order Notifications

PLUGIN Sms Alert

CVE-2026-62106

HIGH CVSS 8.8 2026-09-11

Risk Score

Open Full Technical Breakdown

Threat Entry Updated 2026-09-11

Gatographql - Security Vulnerability (CVE-2026-62102)

Subscriber Privilege Escalation in Gato GraphQL

PLUGIN Gatographql

CVE-2026-62102

HIGH CVSS 8.8 2026-09-11

Risk Score

Open Full Technical Breakdown

Threat Entry Updated 2026-09-11

Sky Elementor Addons - Security Vulnerability (CVE-2026-62109)

Editor SQL Injection in Sky Addons for Elementor

PLUGIN Sky Elementor Addons

CVE-2026-62109

HIGH CVSS 7.6 2026-09-11

Risk Score

Open Full Technical Breakdown

Threat Entry Updated 2026-09-11

Simple Payment - Security Vulnerability (CVE-2026-62111)

Contributor Cross Site Scripting (XSS) in Simple Payment

PLUGIN Simple Payment

CVE-2026-62111

MEDIUM CVSS 6.5 2026-09-11

Risk Score

Open Full Technical Breakdown

Threat Entry Updated 2026-09-11

Bold Page Builder - Security Vulnerability (CVE-2026-62110)

Contributor Cross Site Scripting (XSS) in Bold Page Builder

PLUGIN Bold Page Builder

CVE-2026-62110

MEDIUM CVSS 6.5 2026-09-11

Risk Score

Open Full Technical Breakdown

Threat Entry Updated 2026-09-11

Master Addons - Security Vulnerability (CVE-2026-62089)

Missing Authorization vulnerability in Pixar Labs Master Addons for Elementor allows Privilege Abuse. This issue affects Master Addons for Elementor: from n/a through 3.2.2.

PLUGIN Master Addons

CVE-2026-62089

HIGH CVSS 7.1 2026-09-11

Risk Score

Open Full Technical Breakdown