Threat Entry Updated 2026-06-17

CVE-2026-32457 - Advanced Product Fields (Product Addons) for WooCommerce Plugin

Missing Authorization vulnerability in Wombat Plugins Advanced Product Fields (Product Addons) for WooCommerce advanced-product-fields-for-woocommerce allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Advanced Product Fields (Product Addons) for WooCommerce: from n/a through

PLUGIN Advanced Product Fields (Product Addons) for WooCommerce

CVE-2026-32457

MEDIUM CVSS 5.3 2026-03-13

Risk Score

Open Full Technical Breakdown

Threat Entry Updated 2026-06-17

CVE-2026-32456 - Admin Menu Editor Plugin

Cross-Site Request Forgery (CSRF) vulnerability in Janis Elsts Admin Menu Editor admin-menu-editor allows Cross Site Request Forgery.This issue affects Admin Menu Editor: from n/a through

PLUGIN Admin Menu Editor

CVE-2026-32456

MEDIUM CVSS 4.3 2026-03-13

Risk Score

Open Full Technical Breakdown

Threat Entry Updated 2026-06-17

CVE-2026-32451 - Fusion Builder Plugin

Missing Authorization vulnerability in ThemeFusion Fusion Builder fusion-builder allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Fusion Builder: from n/a through < 3.15.0.

PLUGIN Fusion Builder

CVE-2026-32451

MEDIUM CVSS 6.5 2026-03-13

Risk Score

Open Full Technical Breakdown

Threat Entry Updated 2026-06-17

CVE-2026-32450 - Active Products Tables for WooCommerce Plugin

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in RealMag777 Active Products Tables for WooCommerce profit-products-tables-for-woocommerce allows DOM-Based XSS.This issue affects Active Products Tables for WooCommerce: from n/a through

PLUGIN Active Products Tables for WooCommerce

CVE-2026-32450

MEDIUM CVSS 6.5 2026-03-13

Risk Score

Open Full Technical Breakdown

Threat Entry Updated 2026-06-17

CVE-2026-32453 - Avada Core Plugin

Missing Authorization vulnerability in ThemeFusion Avada Core fusion-core allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Avada Core: from n/a through < 5.15.0.

PLUGIN Avada Core

CVE-2026-32453

MEDIUM CVSS 5.3 2026-03-13

Risk Score

Open Full Technical Breakdown

Threat Entry Updated 2026-06-17

CVE-2026-32452 - Fusion Builder Plugin

Missing Authorization vulnerability in ThemeFusion Fusion Builder fusion-builder allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Fusion Builder: from n/a through < 3.15.0.

PLUGIN Fusion Builder

CVE-2026-32452

MEDIUM CVSS 5.3 2026-03-13

Risk Score

Open Full Technical Breakdown

Threat Entry Updated 2026-06-17

CVE-2026-32449 - Themify Event Post Plugin

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in themifyme Themify Event Post themify-event-post allows Stored XSS.This issue affects Themify Event Post: from n/a through

PLUGIN Themify Event Post

CVE-2026-32449

MEDIUM CVSS 6.5 2026-03-13

Risk Score

Open Full Technical Breakdown

Threat Entry Updated 2026-06-17

CVE-2026-32448 - Podlove Podcast Publisher Plugin

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Eric Teubert Podlove Podcast Publisher podlove-podcasting-plugin-for-wordpress allows Stored XSS.This issue affects Podlove Podcast Publisher: from n/a through

PLUGIN Podlove Podcast Publisher

CVE-2026-32448

MEDIUM CVSS 6.5 2026-03-13

Risk Score

Open Full Technical Breakdown

Threat Entry Updated 2026-06-17

CVE-2026-32447 - Atarim Plugin

Missing Authorization vulnerability in Vito Peleg Atarim atarim-visual-collaboration allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Atarim: from n/a through

PLUGIN Atarim

CVE-2026-32447

MEDIUM CVSS 4.3 2026-03-13

Risk Score

Open Full Technical Breakdown

Threat Entry Updated 2026-06-17

CVE-2026-32446 - WPForms Plugin

Missing Authorization vulnerability in Syed Balkhi Contact Form by WPForms wpforms-lite allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Contact Form by WPForms: from n/a through

PLUGIN WPForms

CVE-2026-32446

MEDIUM CVSS 4.3 2026-03-13

Risk Score

Open Full Technical Breakdown

Threat Entry Updated 2026-06-17

CVE-2026-32445 - Elementor Plugin

Missing Authorization vulnerability in Elementor Elementor Website Builder elementor allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Elementor Website Builder: from n/a through

PLUGIN Elementor

CVE-2026-32445

LOW CVSS 2.7 2026-03-13

Risk Score

Open Full Technical Breakdown

Threat Entry Updated 2026-06-17

CVE-2026-32443 - Product Feed PRO for WooCommerce Plugin

Cross-Site Request Forgery (CSRF) vulnerability in Josh Kohlbach Product Feed PRO for WooCommerce woo-product-feed-pro allows Cross Site Request Forgery.This issue affects Product Feed PRO for WooCommerce: from n/a through

PLUGIN Product Feed PRO for WooCommerce

CVE-2026-32443

MEDIUM CVSS 6.5 2026-03-13

Risk Score

Open Full Technical Breakdown

Threat Entry Updated 2026-06-17

CVE-2026-32440 - WP Food Plugin

Missing Authorization vulnerability in Ex-Themes WP Food wp-food allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP Food: from n/a through < 2.7.1.

PLUGIN WP Food

CVE-2026-32440

MEDIUM CVSS 5.3 2026-03-13

Risk Score

Open Full Technical Breakdown

Threat Entry Updated 2026-06-17

CVE-2026-32439 - BigHearts Plugin

Missing Authorization vulnerability in WebGeniusLab BigHearts bighearts allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects BigHearts: from n/a through

PLUGIN BigHearts

CVE-2026-32439

MEDIUM CVSS 5.3 2026-03-13

Risk Score

Open Full Technical Breakdown

Threat Entry Updated 2026-06-17

CVE-2026-32438 - VW School Education Plugin

Missing Authorization vulnerability in vowelweb VW School Education vw-school-education allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects VW School Education: from n/a through

PLUGIN VW School Education

CVE-2026-32438

MEDIUM CVSS 5.3 2026-03-13

Risk Score

Open Full Technical Breakdown

Threat Entry Updated 2026-06-17

CVE-2026-32442 - E2pdf Plugin

Missing Authorization vulnerability in E2Pdf e2pdf e2pdf allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects e2pdf: from n/a through

PLUGIN E2pdf

CVE-2026-32442

MEDIUM CVSS 5.0 2026-03-13

Risk Score

Open Full Technical Breakdown

Threat Entry Updated 2026-06-17

CVE-2026-32437 - VW Portfolio Plugin

Missing Authorization vulnerability in vowelweb VW Portfolio vw-portfolio allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects VW Portfolio: from n/a through

PLUGIN VW Portfolio

CVE-2026-32437

MEDIUM CVSS 5.3 2026-03-13

Risk Score

Open Full Technical Breakdown

Threat Entry Updated 2026-06-17

CVE-2026-32436 - VW Photography Plugin

Missing Authorization vulnerability in vowelweb VW Photography vw-photography allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects VW Photography: from n/a through

PLUGIN VW Photography

CVE-2026-32436

MEDIUM CVSS 5.3 2026-03-13

Risk Score

Open Full Technical Breakdown

Threat Entry Updated 2026-06-17

CVE-2026-32435 - VW Pet Shop Plugin

Missing Authorization vulnerability in vowelweb VW Pet Shop vw-pet-shop allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects VW Pet Shop: from n/a through

PLUGIN VW Pet Shop

CVE-2026-32435

MEDIUM CVSS 5.3 2026-03-13

Risk Score

Open Full Technical Breakdown

Threat Entry Updated 2026-06-17

CVE-2026-32434 - VW Fitness Plugin

Missing Authorization vulnerability in vowelweb VW Fitness vw-fitness allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects VW Fitness: from n/a through

PLUGIN VW Fitness

CVE-2026-32434

MEDIUM CVSS 5.3 2026-03-13

Risk Score

Open Full Technical Breakdown