Live Vulnerability Intelligence
Threat Database
Search CVEs, inspect descriptions, and open detail pages with AI-assisted technical context.
Threat Entry
Updated 2026-06-17
CVE-2026-25023 - Run Contests, Raffles, and Giveaways with ContestsWP Plugin
Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in mdedev Run Contests, Raffles, and Giveaways with ContestsWP contest-code-checker allows Retrieve Embedded Sensitive Data.This issue affects Run Contests, Raffles, and Giveaways with ContestsWP: from n/a through
PLUGIN
Run Contests, Raffles, and Giveaways with ContestsWP
CVE-2026-25023
Risk Score
Threat Entry
Updated 2026-06-17
CVE-2026-25019 - Atarim Plugin
Missing Authorization vulnerability in Vito Peleg Atarim atarim-visual-collaboration allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Atarim: from n/a through
PLUGIN
Atarim
CVE-2026-25019
Risk Score
Threat Entry
Updated 2026-06-17
CVE-2026-25020 - WP Sync for Notion Plugin
Missing Authorization vulnerability in WP connect WP Sync for Notion wp-sync-for-notion allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP Sync for Notion: from n/a through
PLUGIN
WP Sync for Notion
CVE-2026-25020
Risk Score
Threat Entry
Updated 2026-06-17
CVE-2026-25012 - WP Bannerize Pro Plugin
Missing Authorization vulnerability in gfazioli WP Bannerize Pro wp-bannerize-pro allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP Bannerize Pro: from n/a through
PLUGIN
WP Bannerize Pro
CVE-2026-25012
Risk Score
Threat Entry
Updated 2026-06-17
CVE-2026-25010 - Share This Image Plugin
Missing Authorization vulnerability in ILLID Share This Image share-this-image allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Share This Image: from n/a through
PLUGIN
Share This Image
CVE-2026-25010
Risk Score
Threat Entry
Updated 2026-06-17
CVE-2026-24998 - Hustle Plugin
Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in WPMU DEV - Your All-in-One WordPress Platform Hustle wordpress-popup allows Retrieve Embedded Sensitive Data.This issue affects Hustle: from n/a through
PLUGIN
Hustle
CVE-2026-24998
Risk Score
Threat Entry
Updated 2026-06-17
CVE-2026-25016 - Nelio Popups Plugin
Missing Authorization vulnerability in Nelio Software Nelio Popups nelio-popups allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Nelio Popups: from n/a through
PLUGIN
Nelio Popups
CVE-2026-25016
Risk Score
Threat Entry
Updated 2026-06-17
CVE-2026-25015 - UsersWP Plugin
Cross-Site Request Forgery (CSRF) vulnerability in Stiofan UsersWP userswp allows Cross Site Request Forgery.This issue affects UsersWP: from n/a through
PLUGIN
UsersWP
CVE-2026-25015
Risk Score
Threat Entry
Updated 2026-06-17
CVE-2026-25014 - Enter Addons Plugin
Cross-Site Request Forgery (CSRF) vulnerability in themelooks Enter Addons enteraddons allows Cross Site Request Forgery.This issue affects Enter Addons: from n/a through
PLUGIN
Enter Addons
CVE-2026-25014
Risk Score
Threat Entry
Updated 2026-06-17
CVE-2026-25011 - WP Custom Admin Interface Plugin
Missing Authorization vulnerability in Northern Beaches Websites WP Custom Admin Interface wp-custom-admin-interface allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP Custom Admin Interface: from n/a through
PLUGIN
WP Custom Admin Interface
CVE-2026-25011
Risk Score
Threat Entry
Updated 2026-06-17
CVE-2026-24990 - WP Docs Plugin
Missing Authorization vulnerability in Fahad Mahmood WP Docs wp-docs allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP Docs: from n/a through
PLUGIN
WP Docs
CVE-2026-24990
Risk Score
Threat Entry
Updated 2026-06-17
CVE-2026-24997 - Wired Impact Volunteer Management Plugin
Missing Authorization vulnerability in Wired Impact Wired Impact Volunteer Management wired-impact-volunteer-management allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Wired Impact Volunteer Management: from n/a through
PLUGIN
Wired Impact Volunteer Management
CVE-2026-24997
Risk Score
Threat Entry
Updated 2026-06-17
CVE-2026-24994 - Sunshine Photo Cart Plugin
Missing Authorization vulnerability in sunshinephotocart Sunshine Photo Cart sunshine-photo-cart allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Sunshine Photo Cart: from n/a through
PLUGIN
Sunshine Photo Cart
CVE-2026-24994
Risk Score
Threat Entry
Updated 2026-06-17
CVE-2026-24992 - WooCommerce Plugin
Insertion of Sensitive Information Into Sent Data vulnerability in WPFactory Advanced WooCommerce Product Sales Reporting webd-woocommerce-advanced-reporting-statistics allows Retrieve Embedded Sensitive Data.This issue affects Advanced WooCommerce Product Sales Reporting: from n/a through
PLUGIN
WooCommerce
CVE-2026-24992
Risk Score
Threat Entry
Updated 2026-06-17
CVE-2026-24991 - Extensions For CF7 Plugin
Authorization Bypass Through User-Controlled Key vulnerability in HT Plugins Extensions For CF7 extensions-for-cf7 allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Extensions For CF7: from n/a through
PLUGIN
Extensions For CF7
CVE-2026-24991
Risk Score
Threat Entry
Updated 2026-06-17
CVE-2026-24996 - WPElemento Importer Plugin
Missing Authorization vulnerability in wpelemento WPElemento Importer wpelemento-importer allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WPElemento Importer: from n/a through
PLUGIN
WPElemento Importer
CVE-2026-24996
Risk Score
Threat Entry
Updated 2026-06-17
CVE-2026-24995 - Latest Post Shortcode Plugin
Missing Authorization vulnerability in Iulia Cazan Latest Post Shortcode latest-post-shortcode allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Latest Post Shortcode: from n/a through
PLUGIN
Latest Post Shortcode
CVE-2026-24995
Risk Score
Threat Entry
Updated 2026-06-17
CVE-2026-24988 - The Events Calendar Shortcode & Block Plugin
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Brian Hogg The Events Calendar Shortcode & Block the-events-calendar-shortcode allows Stored XSS.This issue affects The Events Calendar Shortcode & Block: from n/a through
PLUGIN
The Events Calendar Shortcode & Block
CVE-2026-24988
Risk Score
Threat Entry
Updated 2026-06-17
CVE-2026-24984 - Visual Link Preview Plugin
Missing Authorization vulnerability in Brecht Visual Link Preview visual-link-preview allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Visual Link Preview: from n/a through
PLUGIN
Visual Link Preview
CVE-2026-24984
Risk Score
Threat Entry
Updated 2026-06-17
CVE-2026-24986 - Simple Membership WP user Import Plugin
Cross-Site Request Forgery (CSRF) vulnerability in wp.insider Simple Membership WP user Import simple-membership-wp-user-import allows Cross Site Request Forgery.This issue affects Simple Membership WP user Import: from n/a through
PLUGIN
Simple Membership WP user Import
CVE-2026-24986
Risk Score