sales@hackhalt.com
Free Download

Live Vulnerability Intelligence

Threat Database

Search CVEs, inspect descriptions, and open detail pages with AI-assisted technical context.

Total40,783
Critical3,170
High11,980
Medium25,054
Reset
Showing 961-980 of 40783 records
Threat Entry Updated 2026-10-30

User Frontend - Security Vulnerability (CVE-2026-115277)

The User Frontend WordPress plugin before 4.3.14 does not sanitise and escape some user-supplied values before reflecting them into HTML attributes in a publicly reachable AJAX response, leading to Reflected Cross-Site Scripting. The affected action is gated by an anonymous nonce that only validates for logged-out requests, so the payload executes against logged-out visitors rather than authenticated users.

PLUGIN User Frontend

CVE-2026-115277

MEDIUM CVSS 4.7 2026-10-30
Open Full Technical Breakdown
Threat Entry Updated 2026-10-30

Security Plugin, Firewall & Malware Scanner with Auto Removal - Security Vulnerability (CVE-2026-114444)

The Security Plugin, Firewall & Malware Scanner with Auto Removal WordPress plugin before 2.191 does not restrict its File System Watcher file viewer to Super Admins or to the files it legitimately tracks, allowing a non-super-admin administrator, including a subsite administrator on WordPress multisite, to read the contents of sensitive tracked files such as the main configuration file and disclose the site's authentication keys, salts and, on a standard install, database credentials.

PLUGIN Security Plugin, Firewall & Malware Scanner with Auto Removal

CVE-2026-114444

MEDIUM CVSS 4.4 2026-10-30
Open Full Technical Breakdown
Threat Entry Updated 2026-10-30

Enable Media Replace - Security Vulnerability (CVE-2026-114422)

The Enable Media Replace WordPress plugin before 4.2.3 does not restrict the classes allowed when deserializing stored metadata during its media replace-and-update-links routine, allowing unauthenticated users to inject a PHP object that is instantiated when a user with upload access performs a routine media replacement, resulting in PHP Object Injection and local file inclusion of existing PHP/HTML files, which can be escalated to remote code execution where an attacker-influenced PHP or HTML file is present on the server. This is a regression of CVE-2023-4643, which was fixed in 4.1.3 and…

PLUGIN Enable Media Replace

CVE-2026-114422

HIGH CVSS 7.5 2026-10-30
Open Full Technical Breakdown
Threat Entry Updated 2026-10-30

Forminator Forms - Security Vulnerability (CVE-2026-5461)

The Forminator Forms plugin for WordPress is vulnerable to Limited File Deletion in all versions up to, and including, 1.55.0.2. This is due to the plugin accepting arbitrary upload field metadata from POST requests in draft submissions without proper validation, which is then used to delete files when a subsequent draft references the poisoned draft via the previous_draft_id parameter. This makes it possible for unauthenticated attackers to delete arbitrary non-PHP files within the wp-content/uploads/ directory.

PLUGIN Forminator Forms

CVE-2026-5461

MEDIUM CVSS 6.5 2026-10-30
Open Full Technical Breakdown
Threat Entry Updated 2026-10-30

Users Customers Import Export For Wp Woocommerce - Security Vulnerability (CVE-2026-104368)

The Export and Import Users and Customers plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 2.7.5 via the plugin's own export and re-import workflow. The vulnerability exists because of a CSV escape-character mismatch between the exporter and the importer: class-csvwriter.php writes cells with fputcsv() using PHP's default backslash (\) escape character, while class-csvreader.php parses the same file with fgetcsv() using a double-quote (") as the escape character. As a result, a crafted value stored in a Subscriber's Biographical Info field — containing a…

PLUGIN Users Customers Import Export For Wp Woocommerce

CVE-2026-104368

HIGH CVSS 8.8 2026-10-30
Open Full Technical Breakdown
Threat Entry Updated 2026-10-30

the load_popup_content REST endpoint that - Security Vulnerability (CVE-2026-119325)

Bricks Theme 2.4 and before for WordPress contains an unauthenticated broken access control vulnerability in the load_popup_content REST endpoint that allows anonymous attackers to read draft and unpublished page content by supplying a popupId parameter without any status or capability checks. Attackers can obtain a public nonce via the bricks_regenerate_query_nonce action and then increment the popupId value in requests to the /wp-json/bricks/v1/load_popup_content endpoint to enumerate and disclose confidential content from any unpublished post on the site.

PLUGIN the load_popup_content REST endpoint that

CVE-2026-119325

HIGH CVSS 7.5 2026-10-29
Open Full Technical Breakdown

WordPress security that blocks attacks before they land.

sales@hackhalt.com

Product

Resources

Company

© Hack Halt Inc. All rights reserved.