Live Vulnerability Intelligence
Threat Database
Search CVEs, inspect descriptions, and open detail pages with AI-assisted technical context.
Threat Entry
Updated 2026-10-11
click5 CRM add-on to Ninja Forms - Security Vulnerability (CVE-2026-84251)
The click5 CRM add-on to Ninja Forms WordPress plugin through 1.0.1 does not have authorisation and CSRF checks when updating options via a REST endpoint, and does not ensure that the option to be updated belongs to the click5 CRM add-on to Ninja Forms WordPress plugin through 1.0.1. As a result, unauthenticated attackers could change arbitrary blog options, allowing them to create a new administrator account and take over the site.
PLUGIN
click5 CRM add-on to Ninja Forms
CVE-2026-84251
Risk Score
Threat Entry
Updated 2026-10-11
Fundiin cho WooCommerce - Security Vulnerability (CVE-2026-81649)
The Fundiin cho WooCommerce WordPress plugin through 3.4.0 does not have proper authorisation on several of its REST API routes, relying instead on a credential that is identical on every installation, allowing unauthenticated attackers to disclose the store's payment credentials and customer order data, overwrite the payment gateway configuration so that payments are credited elsewhere, and mark unpaid orders as paid. The same missing authorisation also allows arbitrary script to be stored in a field which is output unescaped on the classic checkout, leading to unauthenticated stored XSS on stores…
PLUGIN
Fundiin cho WooCommerce
CVE-2026-81649
Risk Score
Threat Entry
Updated 2026-10-11
Tcard WP - Security Vulnerability (CVE-2026-81420)
The Tcard WP WordPress plugin through 1.8.0 does not sanitise and escape a parameter before using it in a SQL statement in one of its unauthenticated AJAX actions, allowing unauthenticated users to perform SQL injection attacks.
PLUGIN
Tcard WP
CVE-2026-81420
Risk Score
Threat Entry
Updated 2026-10-11
WooCommerce Bookings - Security Vulnerability (CVE-2026-14854)
The WooCommerce Bookings WordPress plugin before 3.11.0 does not limit a user-supplied value before using it to allocate memory in one of its unauthenticated AJAX actions, allowing unauthenticated attackers to exhaust server memory and cause a Denial of Service with a single request.
PLUGIN
WooCommerce Bookings
CVE-2026-14854
Risk Score
Threat Entry
Updated 2026-10-11
Robo Gallery - Security Vulnerability (CVE-2026-81156)
The Robo Gallery WordPress plugin before 5.2.6 does not sanitise and escape some of its gallery settings before outputting them on the gallery edit screen, allowing users with the Contributor role and above to store JavaScript that executes in the context of an administrator who opens the gallery for editing.
PLUGIN
Robo Gallery
CVE-2026-81156
Risk Score
Threat Entry
Updated 2026-10-11
Robo Gallery - Security Vulnerability (CVE-2026-81155)
The Robo Gallery WordPress plugin before 5.2.6 does not sanitise and escape a gallery setting before outputting it on a frontend page, allowing users with the Author role and above to perform Stored Cross-Site Scripting attacks that execute in the browser of any visitor viewing a gallery, including administrators.
PLUGIN
Robo Gallery
CVE-2026-81155
Risk Score
Threat Entry
Updated 2026-10-11
Robo Gallery - Security Vulnerability (CVE-2026-81154)
The Robo Gallery WordPress plugin before 5.2.6 does not sanitise and escape image alt text before outputting it in one of its gallery layouts, allowing users with the Author role and above to perform Stored Cross-Site Scripting attacks that execute in the browser of any user viewing the affected gallery, including administrators.
PLUGIN
Robo Gallery
CVE-2026-81154
Risk Score
Threat Entry
Updated 2026-10-11
Robo Gallery - Security Vulnerability (CVE-2026-81153)
The Robo Gallery WordPress plugin before 5.2.6 does not sanitise and escape some of its image settings before outputting them in a gallery page, allowing users with the Author role and above to perform Stored Cross-Site Scripting attacks that execute in the browser of any visitor viewing the gallery, including administrators, even where the unfiltered_html capability is disallowed such as on multisite.
PLUGIN
Robo Gallery
CVE-2026-81153
Risk Score
Threat Entry
Updated 2026-10-11
Post Snippets - Security Vulnerability (CVE-2026-12980)
The Post Snippets WordPress plugin through 4.2.4 does not properly escape variable values substituted into snippets before outputting them, allowing users with the Contributor role and above to inject arbitrary web scripts that execute when the content is viewed.
PLUGIN
Post Snippets
CVE-2026-12980
Risk Score
Threat Entry
Updated 2026-10-11
Dokan - Security Vulnerability (CVE-2026-107694)
The Dokan: AI Powered WooCommerce Multivendor Marketplace Solution WordPress plugin before 5.2.0 does not verify that the vendor a commission calculation is requested for is the requesting vendor, allowing vendors to disclose the commission rate and fixed fee the marketplace administrator configured for other vendors.
PLUGIN
Dokan
CVE-2026-107694
Risk Score
Threat Entry
Updated 2026-10-11
Squadeno - Security Vulnerability (CVE-2026-107507)
The Squadeno WordPress plugin before 1.12.0 does not enforce its restrictions on every way a sport can be saved, allowing users with the lowest-tier Trainer role to change the section, age group, author, password, comment settings and date of a sport they are assigned to.
PLUGIN
Squadeno
CVE-2026-107507
Risk Score
Threat Entry
Updated 2026-10-11
Anton Extensions - Security Vulnerability (CVE-2026-104028)
The Anton Extensions WordPress plugin through 1.2.2 does not perform any capability check, nonce verification, or file-type validation before writing attacker-supplied content to an attacker-chosen path, allowing unauthenticated attackers to upload arbitrary PHP files and achieve remote code execution.
PLUGIN
Anton Extensions
CVE-2026-104028
Risk Score
Threat Entry
Updated 2026-10-11
Mobile builder - Security Vulnerability (CVE-2026-103694)
The Mobile builder WordPress plugin through 1.4.2 does not properly restrict which user meta keys a logged-in user can update through one of its REST routes, allowing any user with a self-registered account, such as a customer, to grant themselves the administrator role.
PLUGIN
Mobile builder
CVE-2026-103694
Risk Score
Threat Entry
Updated 2026-10-11
Mobile builder - Security Vulnerability (CVE-2026-103695)
The Mobile builder WordPress plugin through 1.4.2 does not sanitise and escape a parameter before using it in a SQL statement, allowing unauthenticated users to perform SQL injection attacks.
PLUGIN
Mobile builder
CVE-2026-103695
Risk Score
Threat Entry
Updated 2026-10-11
WeddingCity Lite - Security Vulnerability (CVE-2026-106029)
The WeddingCity Lite WordPress plugin through 1.0.4 does not perform any authorisation or validity checks before deleting posts, pages and media attachments, allowing unauthenticated attackers to permanently delete arbitrary content site-wide.
PLUGIN
WeddingCity Lite
CVE-2026-106029
Risk Score
Threat Entry
Updated 2026-10-11
Envira Gallery - Security Vulnerability (CVE-2026-104680)
The Envira Gallery WordPress plugin before 1.16.2 does not verify that a user holds the capability WordPress reserves for installing Envira Gallery WordPress plugin before 1.16.2 code before processing its setup-wizard Envira Gallery WordPress plugin before 1.16.2-installation request, and does not restrict the installation to its own curated list, allowing a Multisite subsite Administrator to install an arbitrary WordPress.org-published Envira Gallery WordPress plugin before 1.16.2 into the network-shared Envira Gallery WordPress plugin before 1.16.2 directory, a privilege Multisite reserves for the network Super Admin.
PLUGIN
Envira Gallery
CVE-2026-104680
Risk Score
Threat Entry
Updated 2026-10-11
Envira Gallery - Security Vulnerability (CVE-2026-104684)
The Envira Gallery WordPress plugin before 1.16.2 does not verify that a user is authorized to read a gallery before rendering it, allowing authors to embed and expose other users' non-public gallery metadata to unauthenticated visitors.
PLUGIN
Envira Gallery
CVE-2026-104684
Risk Score
Threat Entry
Updated 2026-10-11
Envira Gallery - Security Vulnerability (CVE-2026-104682)
The Envira Gallery WordPress plugin before 1.16.2 does not correctly check authorization on its gallery-conversion feature, verifying that the requester can edit an arbitrary post they name rather than that they are allowed to create the Envira Gallery WordPress plugin before 1.16.2's own gallery content, allowing users with contributor-level access to create and publish gallery posts that the Envira Gallery WordPress plugin before 1.16.2's settings otherwise withhold from them.
PLUGIN
Envira Gallery
CVE-2026-104682
Risk Score
Threat Entry
Updated 2026-10-11
Envira Gallery - Security Vulnerability (CVE-2026-104681)
The Envira Gallery WordPress plugin before 1.16.2 does not verify that an image identifier added to a gallery refers to a media attachment the caller is permitted to view, allowing any user able to create and edit a gallery (Author and above by default) to disclose the title and excerpt of other users' private, draft, pending and trashed posts that WordPress would otherwise withhold from them.
PLUGIN
Envira Gallery
CVE-2026-104681
Risk Score
Threat Entry
Updated 2026-10-11
Prenotazioni - Security Vulnerability (CVE-2026-103305)
The Prenotazioni WordPress plugin through 1.7.5 does not have authorisation and CSRF checks when saving its settings, and does not escape some of them when outputting them, allowing unauthenticated users to perform Stored Cross-Site Scripting attacks against administrators and site visitors.
PLUGIN
Prenotazioni
CVE-2026-103305
Risk Score