Live Vulnerability Intelligence
Threat Database
Search CVEs, inspect descriptions, and open detail pages with AI-assisted technical context.
Threat Entry
Updated 2026-10-30
Cf7 Styler For Divi - Security Vulnerability (CVE-2026-62057)
Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) vulnerability in Fahim Reza Divi Contact Form 7 cf7-styler-for-divi allows Code Injection.This issue affects Divi Contact Form 7: from n/a through 4.1.0.
PLUGIN
Cf7 Styler For Divi
CVE-2026-62057
Risk Score
Threat Entry
Updated 2026-10-30
Fluent Crm - Security Vulnerability (CVE-2026-62056)
Missing Authorization vulnerability in WP ManageNinja LLC Fluent CRM fluent-crm allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Fluent CRM: from n/a through 3.2.6.
PLUGIN
Fluent Crm
CVE-2026-62056
Risk Score
Threat Entry
Updated 2026-10-30
Event Tickets - Security Vulnerability (CVE-2026-62047)
Missing Authorization vulnerability in Liquid Web / StellarWP Event Tickets event-tickets allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Event Tickets: from n/a through 5.30.2.
PLUGIN
Event Tickets
CVE-2026-62047
Risk Score
Threat Entry
Updated 2026-10-30
Unlimited Elements For Elementor - Security Vulnerability (CVE-2026-62023)
Missing Authorization vulnerability in Unlimited Elements Unlimited Elements For Elementor (Free Widgets, Addons, Templates) unlimited-elements-for-elementor allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Unlimited Elements For Elementor (Free Widgets, Addons, Templates): from n/a through 2.0.26.
PLUGIN
Unlimited Elements For Elementor
CVE-2026-62023
Risk Score
Threat Entry
Updated 2026-10-30
Bookit - Security Vulnerability (CVE-2026-62019)
Missing Authorization vulnerability in Liquid Web / StellarWP BookIt bookit allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects BookIt: from n/a through 2.6.0.6.
PLUGIN
Bookit
CVE-2026-62019
Risk Score
Threat Entry
Updated 2026-10-30
Profile Builder - Security Vulnerability (CVE-2026-54855)
Unauthenticated Cross Site Scripting (XSS) in Profile Builder
PLUGIN
Profile Builder
CVE-2026-54855
Risk Score
Threat Entry
Updated 2026-10-30
Profile Builder - Security Vulnerability (CVE-2026-54854)
Contributor Privilege Escalation in Profile Builder
PLUGIN
Profile Builder
CVE-2026-54854
Risk Score
Threat Entry
Updated 2026-10-30
Fast Velocity Minify - Security Vulnerability (CVE-2026-48201)
Unauthenticated Cross Site Scripting (XSS) in Fast Velocity Minify
PLUGIN
Fast Velocity Minify
CVE-2026-48201
Risk Score
Threat Entry
Updated 2026-10-30
Booking And Rental Manager For Woocommerce - Security Vulnerability (CVE-2026-54850)
Subscriber Broken Access Control in Booking and Rental Manager
PLUGIN
Booking And Rental Manager For Woocommerce
CVE-2026-54850
Risk Score
Threat Entry
Updated 2026-10-30
Ithemeland Free Gifts For Woo - Security Vulnerability (CVE-2026-52710)
Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) vulnerability in ithemelandco GIFTiT – Free Gifts for WooCommerce ithemeland-free-gifts-for-woo allows Code Injection.This issue affects GIFTiT – Free Gifts for WooCommerce: from n/a through 4.5.
PLUGIN
Ithemeland Free Gifts For Woo
CVE-2026-52710
Risk Score
Threat Entry
Updated 2026-11-01
Wp Marketing Automations - Security Vulnerability (CVE-2026-39738)
Deserialization of Untrusted Data vulnerability in Aman FunnelKit Automations wp-marketing-automations allows Object Injection.This issue affects FunnelKit Automations: from n/a through 3.8.6.1.
PLUGIN
Wp Marketing Automations
CVE-2026-39738
Risk Score
Threat Entry
Updated 2026-11-14
Serbian Transliteration - Security Vulnerability (CVE-2026-39732)
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in INTINITUM FORM Transliterator serbian-transliteration allows Blind SQL Injection.This issue affects Transliterator: from n/a through 2.5.13.
PLUGIN
Serbian Transliteration
CVE-2026-39732
Risk Score
Threat Entry
Updated 2026-10-30
Wp Easy Pay - Security Vulnerability (CVE-2026-39734)
Unauthenticated Path Traversal in WP EasyPay
PLUGIN
Wp Easy Pay
CVE-2026-39734
Risk Score
Threat Entry
Updated 2026-10-30
Ba Book Everything - Security Vulnerability (CVE-2026-39786)
Unauthenticated Cross Site Scripting (XSS) in BA Book Everything
PLUGIN
Ba Book Everything
CVE-2026-39786
Risk Score
Threat Entry
Updated 2026-10-30
Header Footer Elementor - Security Vulnerability (CVE-2026-39739)
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Brainstorm Force Ultimate Addons for Elementor - Lite header-footer-elementor allows Stored XSS.This issue affects Ultimate Addons for Elementor - Lite: from n/a through 2.9.5.
PLUGIN
Header Footer Elementor
CVE-2026-39739
Risk Score
Threat Entry
Updated 2026-11-02
Vikrentcar - Security Vulnerability (CVE-2026-28160)
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in e4jvikwp VikRentCar vikrentcar allows Stored XSS.This issue affects VikRentCar: from n/a through 1.4.10.
PLUGIN
Vikrentcar
CVE-2026-28160
Risk Score
Threat Entry
Updated 2026-10-30
User Registration - Security Vulnerability (CVE-2026-27061)
Subscriber Cross Site Scripting (XSS) in User Registration
PLUGIN
User Registration
CVE-2026-27061
Risk Score
Threat Entry
Updated 2026-10-30
Royal Event - Security Vulnerability (CVE-2026-119526)
Deserialization of Untrusted Data vulnerability in ThemeREX Royal Event allows Object Injection. This issue affects Royal Event: from n/a through 2.0.
THEME
Royal Event
CVE-2026-119526
Risk Score
Threat Entry
Updated 2026-10-30
Masterstudy Lms Learning Management System - Security Vulnerability (CVE-2026-118090)
Subscriber PHP Object Injection in MasterStudy LMS
PLUGIN
Masterstudy Lms Learning Management System
CVE-2026-118090
Risk Score
Threat Entry
Updated 2026-10-30
Wp Base Booking Of Appointments Services And Events - Security Vulnerability (CVE-2026-118086)
Subscriber Privilege Escalation in WP BASE Booking
PLUGIN
Wp Base Booking Of Appointments Services And Events
CVE-2026-118086
Risk Score