Live Vulnerability Intelligence
Threat Database
Search CVEs, inspect descriptions, and open detail pages with AI-assisted technical context.
Threat Entry
Updated 2026-11-03
Usc E Shop - Security Vulnerability (CVE-2026-119166)
The Welcart e-Commerce plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 2.12.5 via the 'member[ID]' parameter due to missing validation on a user controlled key. This makes it possible for unauthenticated attackers to overwrite any existing Welcart shop-member account's email address and password by supplying that member's numeric ID, then authenticate as that member to achieve full account takeover. The only authentication barrier is a wp_verify_nonce() check against a nonce printed to every unauthenticated visitor on the auto-published New Enrollment Form,…
PLUGIN
Usc E Shop
CVE-2026-119166
Risk Score
Threat Entry
Updated 2026-11-05
Wp Booking System - Security Vulnerability (CVE-2026-116557)
The WP Booking System - Booking Calendar plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the wpbs_action_ajax_calendar_remove_note() function in versions up to, and including, 2.1.0.5 This makes it possible for authenticated attackers, with Subscriber-level access and above, to delete arbitrary calendar notes belonging to any calendar.
PLUGIN
Wp Booking System
CVE-2026-116557
Risk Score
Threat Entry
Updated 2026-11-02
VikRentCar Car Rental Management System - Security Vulnerability (CVE-2026-116548)
The VikRentCar Car Rental Management System plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'optionals' parameter in all versions up to, and including, 1.4.10 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.
PLUGIN
VikRentCar Car Rental Management System
CVE-2026-116548
Risk Score
Threat Entry
Updated 2026-11-02
Relevanssi - A Better Search - Security Vulnerability (CVE-2026-116522)
The Relevanssi – A Better Search plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'comment' parameter in all versions up to, and including, 4.28.5 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. This requires the site to have both the comment indexing and comment highlighting options enabled, and the payload only fires when a visitor reaches a singular page via a Relevanssi search-result…
PLUGIN
Relevanssi - A Better Search
CVE-2026-116522
Risk Score
Threat Entry
Updated 2026-11-02
VikRentCar Car Rental Management System - Security Vulnerability (CVE-2026-115840)
The VikRentCar Car Rental Management System plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'poplink' parameter in all versions up to, and including, 1.4.9 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. The handler requires only a WordPress nonce (vikwp_nonce), which the plugin itself emits to unauthenticated visitors on the public booking-confirmation page, allowing an attacker to obtain a valid token without any…
PLUGIN
VikRentCar Car Rental Management System
CVE-2026-115840
Risk Score
Threat Entry
Updated 2026-11-02
Wp Job Portal - Security Vulnerability (CVE-2026-116546)
The WP Job Portal – AI-Powered Recruitment System for Company or Job Board website plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'degreetitle' parameter in all versions up to, and including, 2.7.0 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with subscriber-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. The plugin's self-registration flow allows any visitor to create a Subscriber-backed Employer account, meaning this vulnerability is effectively…
PLUGIN
Wp Job Portal
CVE-2026-116546
Risk Score
Threat Entry
Updated 2026-11-03
Pdf For Woocommerce - Security Vulnerability (CVE-2026-109220)
The PDF Invoice for WooCommerce + Drag and Drop Template Builder plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 7.1.1 via the 'customer_note' parameter parameter. This is due to insufficient sanitization of the customer_note checkout field, which is inlined verbatim into invoice HTML, entity-decoded back into a live tag by simplehtmldom, reassembled into raw bytes by mPDF, and passed to unserialize() in _getObjAttr without validation. This makes it possible for unauthenticated attackers to execute code on the server. An unauthenticated attacker can…
PLUGIN
Pdf For Woocommerce
CVE-2026-109220
Risk Score
Threat Entry
Updated 2026-11-02
W3 Total Cache - Security Vulnerability (CVE-2026-111254)
The W3 Total Cache plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'comment' parameter in all versions up to, and including, 2.10.7 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. Exploitation requires that a Pro license was previously active with REST caching enabled and has since become inactive while Disk Enhanced page caching remains configured, and that the attacker holds a previously approved…
PLUGIN
W3 Total Cache
CVE-2026-111254
Risk Score
Threat Entry
Updated 2026-11-02
Wp Discussion Board - Security Vulnerability (CVE-2026-107765)
The Discussion Board – WordPress Forum Plugin plugin for WordPress is vulnerable to Stored Cross-Site Scripting in versions up to, and including, 2.6.0 via the user profile Website (user_url) field. This is due to insufficient output escaping in the ctdb_filter_comment_author_name() callback hooked to get_comment_author_link, which interpolates the raw user_url value into a single-quoted href attribute without esc_url() or esc_attr(). This makes it possible for authenticated attackers, with subscriber-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses a Discussion Board topic containing…
PLUGIN
Wp Discussion Board
CVE-2026-107765
Risk Score
Threat Entry
Updated 2026-11-02
Webmention - Security Vulnerability (CVE-2026-111109)
The Webmention plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Open Graph og:title meta tag of a webmention source URL in versions up to, and including, 5.10.1. This is due to insufficient input sanitization: Meta::add_properties() maps og:title to the Item::name property, but Item has no concrete set_name() method, so Item::__call() stores the value raw while sibling set_content()/set_summary() paths route through webmention_sanitize_html(); Item::get_content() then falls back to the raw name when content and summary are empty, and Receiver::process() explicitly removes the core wp_filter_kses / wp_filter_post_kses hooks on pre_comment_content…
PLUGIN
Webmention
CVE-2026-111109
Risk Score
Threat Entry
Updated 2026-11-06
Woo Photo Reviews - Security Vulnerability (CVE-2026-110251)
The Photo Reviews for WooCommerce plugin for WordPress is vulnerable to unauthorized Media Library File Deletion in all versions up to, and including, 1.2.31. This is due to the `delete_reviews_image()` function's `delete_comment` hook trusting attachment IDs supplied via the `wcpr_image_upload_id` POST parameter that were stored in comment meta without any ownership or capability check — `viwcpr_filter_review_image_ids()` verifies only that each submitted ID refers to an attachment post type, not that the submitter uploaded or owns it. This makes it possible for unauthenticated attackers to permanently delete any WordPress media library…
PLUGIN
Woo Photo Reviews
CVE-2026-110251
Risk Score
Threat Entry
Updated 2026-11-05
Woocommerce Pdf Invoices Packing Slips - Security Vulnerability (CVE-2026-109217)
The PDF Invoices & Packing Slips for WooCommerce plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 5.16.5 via the 'invoice_number (via document filename)' parameter. This makes it possible for unauthenticated attackers to extract another customer's complete invoice PDF — including billing identity, shipping address, private order notes, line items, prices, dates, order ID, and invoice number — delivered directly to the attacker's email as an order confirmation attachment. Exploitation requires the plugin's yearly invoice number reset option to be enabled, and the…
PLUGIN
Woocommerce Pdf Invoices Packing Slips
CVE-2026-109217
Risk Score
Threat Entry
Updated 2026-11-02
Wordpress Popup - Security Vulnerability (CVE-2026-109386)
The Hustle – Email Marketing, Lead Generation, Optins, Popups plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 7.8.14.3. This is due to the plugin not properly verifying that a user is authorized to perform an action. This makes it possible for authenticated attackers, with custom-level access and above, to overwrite the site's active ESP integration credentials (AWeber, Constant Contact, Infusionsoft, ConvertKit, or HubSpot API keys) with attacker-controlled values — diverting all subsequent Hustle form lead submissions to the attacker's ESP tenant — and,…
PLUGIN
Wordpress Popup
CVE-2026-109386
Risk Score
Threat Entry
Updated 2026-11-02
Woocommerce Pdf Invoices Packing Slips - Security Vulnerability (CVE-2026-107750)
The PDF Invoices & Packing Slips for WooCommerce plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'billing_address.first_name / last_name / company, customer_note' parameter in all versions up to, and including, 5.16.4 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. This is an incomplete fix for CVE-2026-92244: the wp_kses() allow-list introduced in 5.16.2 correctly blocks raw-tag payloads but is bypassed by entity-encoded payloads (e.g.,…
PLUGIN
Woocommerce Pdf Invoices Packing Slips
CVE-2026-107750
Risk Score
Threat Entry
Updated 2026-11-02
Surecart - Security Vulnerability (CVE-2026-107653)
The SureCart – Ecommerce Made Easy For Selling Physical Products, Digital Downloads, Subscriptions, Donations, & Payments plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'comment' parameter in all versions up to, and including, 4.9.4 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. Successful execution requires the injected comment to be visible on a page that loads SureCart's web-component bundle (e.g. a page containing…
PLUGIN
Surecart
CVE-2026-107653
Risk Score
Threat Entry
Updated 2026-11-03
Ultimate Addons For Gutenberg - Security Vulnerability (CVE-2026-92294)
The Spectra Gutenberg Blocks – Website Builder for the Block Editor plugin for WordPress is vulnerable to limited file deletion due to insufficient file path validation in the '__construct' function in all versions up to, and including, 2.20.4 This makes it possible for unauthenticated attackers to delete theme files on the server.
PLUGIN
Ultimate Addons For Gutenberg
CVE-2026-92294
Risk Score
Threat Entry
Updated 2026-11-02
Payable Payment Gateway for WooCommerce - Security Vulnerability (CVE-2026-94361)
The Payable Payment Gateway for WooCommerce WordPress plugin before 1.3.1 does not verify the authenticity of an incoming payment notification before marking a WooCommerce order paid or failed, allowing unauthenticated attackers to change the payment status of any order in the store regardless of the payment method it was placed with.
PLUGIN
Payable Payment Gateway for WooCommerce
CVE-2026-94361
Risk Score
Threat Entry
Updated 2026-11-02
Mapster WP Maps - Security Vulnerability (CVE-2026-118638)
The Mapster WP Maps WordPress plugin before 2.0.6 does not perform any authorization check on a REST API route that writes post data, allowing unauthenticated attackers to overwrite the title of arbitrary posts, create arbitrary published posts, and overwrite the Mapster WP Maps WordPress plugin before 2.0.6's stored settings.
PLUGIN
Mapster WP Maps
CVE-2026-118638
Risk Score
Threat Entry
Updated 2026-11-02
All-in-One Video Gallery - Security Vulnerability (CVE-2026-118629)
The All-in-One Video Gallery WordPress plugin before 5.0.0 does not check a video's publication status before rendering it on its player page, allowing unauthenticated users to view the title and source URLs of private, draft, pending, scheduled and trashed videos by their ID.
PLUGIN
All-in-One Video Gallery
CVE-2026-118629
Risk Score
Threat Entry
Updated 2026-11-02
Quick Event Manager - Security Vulnerability (CVE-2026-82214)
The Quick Event Manager WordPress plugin before 9.19 does not verify the status or type of the requested post before returning its details through a calendar export, allowing unauthenticated users to read the content of draft and private posts.
PLUGIN
Quick Event Manager
CVE-2026-82214
Risk Score