sales@hackhalt.com
Free Download Free Download Free Download
Explore Pricing Explore Pricing Explore Pricing

Blog

"Prevention is cheaper than a breach"

Live Vulnerability Intelligence

Threat Database

Search CVEs, inspect descriptions, and open detail pages with AI-assisted technical context.

Total18,248
Critical1,270
High4,357
Medium12,382
Reset
Showing 3361-3380 of 18248 records
Threat Entry Updated 2026-06-17

CVE-2026-32413 - Permalink Manager Lite Plugin

Missing Authorization vulnerability in Maciej Bis Permalink Manager Lite permalink-manager allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Permalink Manager Lite: from n/a through < 2.5.3.

PLUGIN Permalink Manager Lite

CVE-2026-32413

MEDIUM CVSS 5.3 2026-03-13
Open Full Technical Breakdown
Threat Entry Updated 2026-06-17

CVE-2026-32415 - Squeeze Plugin

Path Traversal: '.../...//' vulnerability in Bogdan Bendziukov Squeeze squeeze allows Path Traversal.This issue affects Squeeze: from n/a through

PLUGIN Squeeze

CVE-2026-32415

MEDIUM CVSS 5.0 2026-03-13
Open Full Technical Breakdown
Threat Entry Updated 2026-06-17

CVE-2026-32410 - WBW Currency Switcher for WooCommerce Plugin

Missing Authorization vulnerability in WBW Plugins WBW Currency Switcher for WooCommerce woo-currency allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WBW Currency Switcher for WooCommerce: from n/a through

PLUGIN WBW Currency Switcher for WooCommerce

CVE-2026-32410

MEDIUM CVSS 5.3 2026-03-13
Open Full Technical Breakdown
Threat Entry Updated 2026-06-17

CVE-2026-32409 - Forminator Plugin

Missing Authorization vulnerability in WPMU DEV - Your All-in-One WordPress Platform Forminator forminator allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Forminator: from n/a through

PLUGIN Forminator

CVE-2026-32409

MEDIUM CVSS 5.3 2026-03-13
Open Full Technical Breakdown
Threat Entry Updated 2026-06-17

CVE-2026-32408 - Brizy Plugin

Missing Authorization vulnerability in themefusecom Brizy brizy allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Brizy: from n/a through

PLUGIN Brizy

CVE-2026-32408

MEDIUM CVSS 4.3 2026-03-13
Open Full Technical Breakdown
Threat Entry Updated 2026-06-17

CVE-2026-32407 - WPC Smart Wishlist for WooCommerce Plugin

Missing Authorization vulnerability in WPClever WPC Smart Wishlist for WooCommerce woo-smart-wishlist allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WPC Smart Wishlist for WooCommerce: from n/a through

PLUGIN WPC Smart Wishlist for WooCommerce

CVE-2026-32407

MEDIUM CVSS 4.3 2026-03-13
Open Full Technical Breakdown
Threat Entry Updated 2026-06-17

CVE-2026-32406 - WPC Product Bundles for WooCommerce Plugin

Missing Authorization vulnerability in WPClever WPC Product Bundles for WooCommerce woo-product-bundle allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WPC Product Bundles for WooCommerce: from n/a through

PLUGIN WPC Product Bundles for WooCommerce

CVE-2026-32406

MEDIUM CVSS 4.3 2026-03-13
Open Full Technical Breakdown
Threat Entry Updated 2026-06-17

CVE-2026-32401 - Client Invoicing by Sprout Invoices Plugin

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in BoldGrid Client Invoicing by Sprout Invoices sprout-invoices allows PHP Local File Inclusion.This issue affects Client Invoicing by Sprout Invoices: from n/a through

PLUGIN Client Invoicing by Sprout Invoices

CVE-2026-32401

HIGH CVSS 7.2 2026-03-13
Open Full Technical Breakdown
Threat Entry Updated 2026-06-17

CVE-2026-32403 - Toocheke Companion Plugin

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in toocheke Toocheke Companion toocheke-companion allows DOM-Based XSS.This issue affects Toocheke Companion: from n/a through

PLUGIN Toocheke Companion

CVE-2026-32403

MEDIUM CVSS 6.5 2026-03-13
Open Full Technical Breakdown
Threat Entry Updated 2026-06-17

CVE-2026-32405 - WoodMart Plugin

Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in xtemos WoodMart woodmart allows Retrieve Embedded Sensitive Data.This issue affects WoodMart: from n/a through

PLUGIN WoodMart

CVE-2026-32405

MEDIUM CVSS 5.3 2026-03-13
Open Full Technical Breakdown
Threat Entry Updated 2026-06-17

CVE-2026-32404 - Studio99 WP Monitor Plugin

Missing Authorization vulnerability in Studio99 Studio99 WP Monitor studio99-wp-monitor allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Studio99 WP Monitor: from n/a through

PLUGIN Studio99 WP Monitor

CVE-2026-32404

MEDIUM CVSS 5.3 2026-03-13
Open Full Technical Breakdown
Threat Entry Updated 2026-06-17

CVE-2026-32402 - Image Slider by Ays Plugin

Missing Authorization vulnerability in Ays Pro Image Slider by Ays ays-slider allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Image Slider by Ays: from n/a through

PLUGIN Image Slider by Ays

CVE-2026-32402

MEDIUM CVSS 5.3 2026-03-13
Open Full Technical Breakdown
Threat Entry Updated 2026-06-17

CVE-2026-32399 - Media LIbrary Assistant Plugin

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in David Lingren Media LIbrary Assistant media-library-assistant allows Blind SQL Injection.This issue affects Media LIbrary Assistant: from n/a through

PLUGIN Media LIbrary Assistant

CVE-2026-32399

HIGH CVSS 8.5 2026-03-13
Open Full Technical Breakdown
Threat Entry Updated 2026-06-17

CVE-2026-32400 - Boldman Plugin

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in ThemetechMount Boldman boldman allows PHP Local File Inclusion.This issue affects Boldman: from n/a through

PLUGIN Boldman

CVE-2026-32400

HIGH CVSS 7.5 2026-03-13
Open Full Technical Breakdown
Threat Entry Updated 2026-06-17

CVE-2026-32398 - TeraWallet – For WooCommerce Plugin

Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition') vulnerability in Subrata Mal TeraWallet – For WooCommerce woo-wallet allows Leveraging Race Conditions.This issue affects TeraWallet – For WooCommerce: from n/a through

PLUGIN TeraWallet – For WooCommerce

CVE-2026-32398

MEDIUM CVSS 6.5 2026-03-13
Open Full Technical Breakdown
Threat Entry Updated 2026-06-17

CVE-2026-32397 - Filter & Grids Plugin

Missing Authorization vulnerability in YMC Filter & Grids ymc-smart-filter allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Filter & Grids: from n/a through

PLUGIN Filter & Grids

CVE-2026-32397

MEDIUM CVSS 5.3 2026-03-13
Open Full Technical Breakdown
Threat Entry Updated 2026-06-17

CVE-2026-32396 - Team Plugin

Missing Authorization vulnerability in RadiusTheme Team tlp-team allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Team: from n/a through

PLUGIN Team

CVE-2026-32396

MEDIUM CVSS 5.3 2026-03-13
Open Full Technical Breakdown
Threat Entry Updated 2026-06-17

CVE-2026-32395 - Elementor Plugin

Missing Authorization vulnerability in Xpro Xpro Addons For Beaver Builder – Lite xpro-addons-beaver-builder-elementor allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Xpro Addons For Beaver Builder – Lite: from n/a through

PLUGIN Elementor

CVE-2026-32395

MEDIUM CVSS 5.3 2026-03-13
Open Full Technical Breakdown
Threat Entry Updated 2026-06-17

CVE-2026-32393 - Greenly Theme Addons

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Creatives_Planet Greenly Theme Addons greenly-addons allows PHP Local File Inclusion.This issue affects Greenly Theme Addons: from n/a through < 8.2.

THEME Greenly Theme Addons

CVE-2026-32393

HIGH CVSS 7.5 2026-03-13
Open Full Technical Breakdown
Scroll to top