Calgary, Alberta, Canada
sales@hackhalt.com
Free Download Free Download Free Download
Explore Pricing Explore Pricing Explore Pricing

Blog

"Prevention is cheaper than a breach"

Live Vulnerability Intelligence

Threat Database

Search CVEs, inspect descriptions, and open detail pages with AI-assisted technical context.

Total18,002
Critical1,249
High4,286
Medium12,246
Reset
Showing 841-860 of 18002 records
Threat Entry Updated 2026-06-26

CVE-2026-57620 - Elementor Plugin

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Tim Strifler Exclusive Addons Elementor allows Stored XSS. This issue affects Exclusive Addons Elementor: from n/a through 2.7.9.8.

PLUGIN Elementor

CVE-2026-57620

MEDIUM CVSS 6.5 2026-06-26
Open Full Technical Breakdown
Threat Entry Updated 2026-06-26

CVE-2026-1869 - Login Builder Plugin

The User Registration & Membership – Free & Paid Memberships, Subscriptions, Content Restriction, User Profile, Custom User Registration & Login Builder plugin for WordPress is vulnerable to unauthorized modification of data due to missing validation checks in the confirm_payment() function in all versions up to, and including, 5.2.0. This makes it possible for unauthenticated attackers to bypass payment processing and activate paid memberships.

PLUGIN Login Builder

CVE-2026-1869

MEDIUM CVSS 6.5 2026-06-26
Open Full Technical Breakdown
Threat Entry Updated 2026-06-26

CVE-2026-10835 - Before 3 Plugin

The SALESmanago & Leadoo WordPress plugin before 3.11.3 does not properly sanitise and escape a parameter passed to one of its AJAX actions before using it in a SQL statement, and fails to enforce authorisation on that action, allowing authenticated users with minimal permissions, such as subscribers, to perform SQL injection attacks.

PLUGIN Before 3

CVE-2026-10835

HIGH CVSS 7.7 2026-06-26
Open Full Technical Breakdown
Threat Entry Updated 2026-06-26

CVE-2026-10823 - Ymc Filter Plugin

The YMC Filter WordPress plugin before 3.11.3 does not properly authorize access to one of its REST API endpoints and does not validate a user-supplied query parameter, allowing unauthenticated attackers to retrieve the titles and content of private, draft, and other non-public posts.

PLUGIN Ymc Filter

CVE-2026-10823

HIGH CVSS 7.5 2026-06-26
Open Full Technical Breakdown
Threat Entry Updated 2026-06-26

CVE-2026-8380 - Frontend File Manager Plugin

The Frontend File Manager Plugin WordPress plugin through 23.6 does not properly verify ownership of every targeted post before permanent deletion, allowing authenticated users with author-level access and above to permanently delete arbitrary posts and pages. When the Frontend File Manager Plugin WordPress plugin through 23.6's "Allow guest uploads" setting is enabled by an administrator, the same deletion primitive becomes reachable by unauthenticated users.

PLUGIN Frontend File Manager Plugin

CVE-2026-8380

MEDIUM CVSS 6.5 2026-06-26
Open Full Technical Breakdown
Threat Entry Updated 2026-06-26

CVE-2026-13226 - And Marketing Automation Plugin

The Groundhogg — CRM, Newsletters, and Marketing Automation plugin for WordPress is vulnerable to generic SQL Injection via the 'after' parameter in all versions up to, and including, 4.5.4 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it possible for authenticated attackers, with Sales Manager-level access and above, to append additional SQL queries into already existing queries that can be used to extract sensitive information from the database. The AJAX handler wp_ajax_groundhogg_get_contacts_table has its capability check commented…

PLUGIN And Marketing Automation

CVE-2026-13226

MEDIUM CVSS 6.5 2026-06-26
Open Full Technical Breakdown
Threat Entry Updated 2026-06-29

CVE-2026-57700 - OMGF Pro Plugin

Unrestricted Upload of File with Dangerous Type vulnerability in Daan.Dev OMGF Pro allows Using Malicious Files. This issue affects OMGF Pro: from n/a through 5.2.6.

PLUGIN OMGF Pro

CVE-2026-57700

CRITICAL CVSS 10.0 2026-06-25
Open Full Technical Breakdown
Scroll to top