sales@hackhalt.com
Free Download Free Download Free Download
Explore Pricing Explore Pricing Explore Pricing

Blog

"Prevention is cheaper than a breach"

Live Vulnerability Intelligence

Threat Database

Search CVEs, inspect descriptions, and open detail pages with AI-assisted technical context.

Total18,541
Critical1,292
High4,446
Medium12,544
Reset
Showing 4821-4840 of 18541 records
Threat Entry Updated 2026-06-17

CVE-2026-24636 - Sugar Calendar (Lite Plugin

Missing Authorization vulnerability in Syed Balkhi Sugar Calendar (Lite) sugar-calendar-lite allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Sugar Calendar (Lite): from n/a through

PLUGIN Sugar Calendar (Lite

CVE-2026-24636

MEDIUM CVSS 4.3 2026-01-23
Open Full Technical Breakdown
Threat Entry Updated 2026-06-17

CVE-2026-24630 - Stylish Cost Calculator Plugin

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Design Stylish Cost Calculator stylish-cost-calculator allows Stored XSS.This issue affects Stylish Cost Calculator: from n/a through

PLUGIN Stylish Cost Calculator

CVE-2026-24630

MEDIUM CVSS 6.5 2026-01-23
Open Full Technical Breakdown
Threat Entry Updated 2026-06-17

CVE-2026-24632 - Delay Redirects Plugin

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in jagdish1o1 Delay Redirects delay-redirects allows DOM-Based XSS.This issue affects Delay Redirects: from n/a through

PLUGIN Delay Redirects

CVE-2026-24632

MEDIUM CVSS 5.9 2026-01-23
Open Full Technical Breakdown
Threat Entry Updated 2026-06-17

CVE-2026-24629 - Web Accessibility with Max Access Plugin

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Ability, Inc Web Accessibility with Max Access accessibility-toolbar allows Stored XSS.This issue affects Web Accessibility with Max Access: from n/a through

PLUGIN Web Accessibility with Max Access

CVE-2026-24629

MEDIUM CVSS 5.9 2026-01-23
Open Full Technical Breakdown
Threat Entry Updated 2026-06-17

CVE-2026-24631 - Rosebud Plugin

Authorization Bypass Through User-Controlled Key vulnerability in Mikado-Themes Rosebud rosebud allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Rosebud: from n/a through

PLUGIN Rosebud

CVE-2026-24631

MEDIUM CVSS 5.4 2026-01-23
Open Full Technical Breakdown
Threat Entry Updated 2026-06-17

CVE-2026-24633 - Add Expires Headers & Optimized Minify Plugin

Missing Authorization vulnerability in Passionate Brains Add Expires Headers & Optimized Minify add-expires-headers allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Add Expires Headers & Optimized Minify: from n/a through

PLUGIN Add Expires Headers & Optimized Minify

CVE-2026-24633

MEDIUM CVSS 5.3 2026-01-23
Open Full Technical Breakdown
Threat Entry Updated 2026-06-17

CVE-2026-24627 - Trusona for WordPress Plugin

Missing Authorization vulnerability in Trusona Trusona for WordPress trusona allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Trusona for WordPress: from n/a through

PLUGIN Trusona for WordPress

CVE-2026-24627

MEDIUM CVSS 4.3 2026-01-23
Open Full Technical Breakdown
Threat Entry Updated 2026-06-17

CVE-2026-24624 - Neoforum Plugin

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in saeros1984 Neoforum neoforum allows Blind SQL Injection.This issue affects Neoforum: from n/a through

PLUGIN Neoforum

CVE-2026-24624

HIGH CVSS 7.6 2026-01-23
Open Full Technical Breakdown
Threat Entry Updated 2026-06-17

CVE-2026-24623 - Neoforum Plugin

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in saeros1984 Neoforum neoforum allows Reflected XSS.This issue affects Neoforum: from n/a through

PLUGIN Neoforum

CVE-2026-24623

HIGH CVSS 7.1 2026-01-23
Open Full Technical Breakdown
Threat Entry Updated 2026-06-17

CVE-2026-24626 - Logo Slider Plugin

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in LogicHunt Logo Slider logo-slider-wp allows Stored XSS.This issue affects Logo Slider: from n/a through

PLUGIN Logo Slider

CVE-2026-24626

MEDIUM CVSS 5.9 2026-01-23
Open Full Technical Breakdown
Threat Entry Updated 2026-06-17

CVE-2026-24621 - Terms descriptions Plugin

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Vladimir Statsenko Terms descriptions terms-descriptions allows DOM-Based XSS.This issue affects Terms descriptions: from n/a through

PLUGIN Terms descriptions

CVE-2026-24621

MEDIUM CVSS 5.9 2026-01-23
Open Full Technical Breakdown
Threat Entry Updated 2026-06-17

CVE-2026-24620 - Landing Page Builder Plugin

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in PluginOps Landing Page Builder page-builder-add allows Stored XSS.This issue affects Landing Page Builder: from n/a through

PLUGIN Landing Page Builder

CVE-2026-24620

MEDIUM CVSS 5.9 2026-01-23
Open Full Technical Breakdown
Threat Entry Updated 2026-06-17

CVE-2026-24622 - Suggestion Toolkit Plugin

Missing Authorization vulnerability in Sergiy Dzysyak Suggestion Toolkit suggestion-toolkit allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Suggestion Toolkit: from n/a through

PLUGIN Suggestion Toolkit

CVE-2026-24622

MEDIUM CVSS 5.4 2026-01-23
Open Full Technical Breakdown
Threat Entry Updated 2026-06-17

CVE-2026-24625 - WooCommerce Plugin

Missing Authorization vulnerability in Imaginate Solutions File Uploads Addon for WooCommerce woo-addon-uploads allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects File Uploads Addon for WooCommerce: from n/a through

PLUGIN WooCommerce

CVE-2026-24625

MEDIUM CVSS 5.3 2026-01-23
Open Full Technical Breakdown
Threat Entry Updated 2026-06-17

CVE-2026-24617 - Easy Modal Plugin

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Daniel Iser Easy Modal easy-modal allows Stored XSS.This issue affects Easy Modal: from n/a through

PLUGIN Easy Modal

CVE-2026-24617

MEDIUM CVSS 6.5 2026-01-23
Open Full Technical Breakdown
Threat Entry Updated 2026-06-17

CVE-2026-24616 - WP Popups Plugin

Missing Authorization vulnerability in Damian WP Popups wp-popups-lite allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP Popups: from n/a through

PLUGIN WP Popups

CVE-2026-24616

MEDIUM CVSS 6.5 2026-01-23
Open Full Technical Breakdown
Threat Entry Updated 2026-06-17

CVE-2026-24614 - Flex QR Code Generator Plugin

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Devsbrain Flex QR Code Generator flex-qr-code-generator allows DOM-Based XSS.This issue affects Flex QR Code Generator: from n/a through

PLUGIN Flex QR Code Generator

CVE-2026-24614

MEDIUM CVSS 5.9 2026-01-23
Open Full Technical Breakdown
Threat Entry Updated 2026-06-17

CVE-2026-24619 - PopCash.Net Code Integration Tool Plugin

Missing Authorization vulnerability in PopCash PopCash.Net Code Integration Tool popcashnet-code-integration-tool allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects PopCash.Net Code Integration Tool: from n/a through

PLUGIN PopCash.Net Code Integration Tool

CVE-2026-24619

MEDIUM CVSS 5.3 2026-01-23
Open Full Technical Breakdown
Threat Entry Updated 2026-06-17

CVE-2026-24615 - Cream Magazine Plugin

Missing Authorization vulnerability in themebeez Cream Magazine cream-magazine allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Cream Magazine: from n/a through

PLUGIN Cream Magazine

CVE-2026-24615

MEDIUM CVSS 5.3 2026-01-23
Open Full Technical Breakdown
Threat Entry Updated 2026-06-17

CVE-2026-24613 - Ecwid Shopping Cart Plugin

Missing Authorization vulnerability in Ecwid by Lightspeed Ecommerce Shopping Cart Ecwid Shopping Cart ecwid-shopping-cart allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Ecwid Shopping Cart: from n/a through

PLUGIN Ecwid Shopping Cart

CVE-2026-24613

MEDIUM CVSS 5.3 2026-01-23
Open Full Technical Breakdown
Scroll to top