Threat Database (40,783)

Threat Entry Updated 2026-10-30

Geo My Wp - Security Vulnerability (CVE-2026-61992)

Unauthenticated PHP Object Injection in GEO my WordPress

PLUGIN Geo My Wp

CVE-2026-61992

CRITICAL CVSS 9.8 2026-10-29

Risk Score

Open Full Technical Breakdown

Threat Entry Updated 2026-10-30

Easy Property Listings - Security Vulnerability (CVE-2026-61989)

Unauthenticated Cross Site Scripting (XSS) in Easy Property Listings

PLUGIN Easy Property Listings

CVE-2026-61989

HIGH CVSS 7.1 2026-10-29

Risk Score

Open Full Technical Breakdown

Threat Entry Updated 2026-10-30

Ozisti - Security Vulnerability (CVE-2026-54860)

Unauthenticated PHP Object Injection in Ozisti

THEME Ozisti

CVE-2026-54860

CRITICAL CVSS 9.8 2026-10-29

Risk Score

Open Full Technical Breakdown

Threat Entry Updated 2026-10-30

Video Playlist And Gallery Plugin - Security Vulnerability (CVE-2026-54864)

Unauthenticated Cross Site Scripting (XSS) in Post Video Players

PLUGIN Video Playlist And Gallery Plugin

CVE-2026-54864

HIGH CVSS 7.1 2026-10-29

Risk Score

Open Full Technical Breakdown

Threat Entry Updated 2026-10-30

Podamibe Custom User Gravatar - Security Vulnerability (CVE-2026-54865)

Subscriber Cross Site Scripting (XSS) in Podamibe Custom User Gravatar

PLUGIN Podamibe Custom User Gravatar

CVE-2026-54865

MEDIUM CVSS 6.5 2026-10-29

Risk Score

Open Full Technical Breakdown

Threat Entry Updated 2026-10-30

Quirky - Security Vulnerability (CVE-2026-54857)

Unauthenticated PHP Object Injection in Quirky

THEME Quirky

CVE-2026-54857

CRITICAL CVSS 9.8 2026-10-29

Risk Score

Open Full Technical Breakdown

Threat Entry Updated 2026-10-30

Rexcoin - Security Vulnerability (CVE-2026-54856)

Unauthenticated PHP Object Injection in RexCoin

THEME Rexcoin

CVE-2026-54856

CRITICAL CVSS 9.8 2026-10-29

Risk Score

Open Full Technical Breakdown

Threat Entry Updated 2026-10-30

Yaymail - Security Vulnerability (CVE-2026-42701)

Shop manager PHP Object Injection in YayMail

PLUGIN Yaymail

CVE-2026-42701

HIGH CVSS 7.2 2026-10-29

Risk Score

Open Full Technical Breakdown

Threat Entry Updated 2026-10-30

Kirki - Security Vulnerability (CVE-2026-42694)

Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) vulnerability in Themeum Kirki kirki allows Code Injection.This issue affects Kirki: from n/a through 6.4.0.

PLUGIN Kirki

CVE-2026-42694

MEDIUM CVSS 4.3 2026-10-29

Risk Score

Open Full Technical Breakdown

Threat Entry Updated 2026-10-30

Eventer - Security Vulnerability (CVE-2026-27394)

Unauthenticated Cross Site Scripting (XSS) in Eventer

PLUGIN Eventer

CVE-2026-27394

HIGH CVSS 7.1 2026-10-29

Risk Score

Open Full Technical Breakdown

Threat Entry Updated 2026-10-30

Buddyboss Platform - Security Vulnerability (CVE-2026-118082)

Subscriber Privilege Escalation in Buddyboss Platform

PLUGIN Buddyboss Platform

CVE-2026-118082

HIGH CVSS 8.8 2026-10-29

Risk Score

Open Full Technical Breakdown

Threat Entry Updated 2026-10-30

Wp Crowdfunding - Security Vulnerability (CVE-2026-118083)

Unauthenticated Sensitive Data Exposure in WP Crowdfunding

PLUGIN Wp Crowdfunding

CVE-2026-118083

HIGH CVSS 7.5 2026-10-29

Risk Score

Open Full Technical Breakdown

Threat Entry Updated 2026-10-30

Global Payments Woocommerce - Security Vulnerability (CVE-2026-118085)

Unauthenticated Cross Site Scripting (XSS) in GlobalPayments WooCommerce

PLUGIN Global Payments Woocommerce

CVE-2026-118085

HIGH CVSS 7.1 2026-10-29

Risk Score

Open Full Technical Breakdown

Threat Entry Updated 2026-10-30

Nd Booking - Security Vulnerability (CVE-2026-118084)

Subscriber Insecure Direct Object References (IDOR) in Hotel Booking

PLUGIN Nd Booking

CVE-2026-118084

MEDIUM CVSS 6.5 2026-10-29

Risk Score

Open Full Technical Breakdown

Threat Entry Updated 2026-11-03

FV Flowplayer Video Player - Security Vulnerability (CVE-2026-118079)

Deserialization of Untrusted Data vulnerability in FolioVision FV Flowplayer Video Player fv-wordpress-flowplayer allows Object Injection.This issue affects FV Flowplayer Video Player: from n/a through 7.5.56.7212.

PLUGIN FV Flowplayer Video Player

CVE-2026-118079

HIGH CVSS 7.2 2026-10-29

Risk Score

Open Full Technical Breakdown

Threat Entry Updated 2026-10-30

Product Catalog Feed - Security Vulnerability (CVE-2026-118078)

Shop manager PHP Object Injection in Product Catalog Feed by PixelYourSite

PLUGIN Product Catalog Feed

CVE-2026-118078

HIGH CVSS 7.2 2026-10-29

Risk Score

Open Full Technical Breakdown

Threat Entry Updated 2026-10-30

Sastra Essential Addons For Elementor - Security Vulnerability (CVE-2026-118077)

Author PHP Object Injection in Sastra Essential Addons for Elementor

PLUGIN Sastra Essential Addons For Elementor

CVE-2026-118077

HIGH CVSS 7.2 2026-10-29

Risk Score

Open Full Technical Breakdown

Threat Entry Updated 2026-10-30

Finale Lite - Security Vulnerability (CVE-2026-118074)

Shop manager PHP Object Injection in Finale Lite

PLUGIN Finale Lite

CVE-2026-118074

HIGH CVSS 7.2 2026-10-29

Risk Score

Open Full Technical Breakdown

Threat Entry Updated 2026-10-30

News Kit Elementor Addons - Security Vulnerability (CVE-2026-118073)

Subscriber PHP Object Injection in News Kit Elementor Addons

THEME News Kit Elementor Addons

CVE-2026-118073

HIGH CVSS 8.8 2026-10-29

Risk Score

Open Full Technical Breakdown

Threat Entry Updated 2026-10-30

Extra Fees Plugin for WooCommerce - Security Vulnerability (CVE-2026-116866)

Contributor PHP Object Injection in Extra Fees Plugin for WooCommerce

PLUGIN Extra Fees Plugin for WooCommerce

CVE-2026-116866

HIGH CVSS 8.8 2026-10-29

Risk Score

Open Full Technical Breakdown