sales@hackhalt.com
Free Download

Live Vulnerability Intelligence

Threat Database

Search CVEs, inspect descriptions, and open detail pages with AI-assisted technical context.

Total40,783
Critical3,170
High11,980
Medium25,054
Reset
Showing 1021-1040 of 40783 records
Threat Entry Updated 2026-11-04

Multiple Pages Generator By Porthas - Security Vulnerability (CVE-2026-119054)

Multiple Pages Generator by Themeisle before 4.2.5 contains a stored cross-site scripting vulnerability that allows Contributor-level users to inject script via the [mpg] and [mpg_match] shortcode base-url attribute. Attackers can store entity-encoded payloads that pass kses but are decoded by html_entity_decode() and rendered unescaped through {{mpg_url}}, executing script in administrators' browsers.

PLUGIN Multiple Pages Generator By Porthas

CVE-2026-119054

MEDIUM CVSS 5.1 2026-10-29
Open Full Technical Breakdown
Threat Entry Updated 2026-11-05

Upsell Order Bump Offer For Woocommerce - Security Vulnerability (CVE-2026-116409)

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WP Swings Upsell Order Bump Offer for WooCommerce upsell-order-bump-offer-for-woocommerce allows Reflected XSS.This issue affects Upsell Order Bump Offer for WooCommerce: from n/a through 3.1.7.

PLUGIN Upsell Order Bump Offer For Woocommerce

CVE-2026-116409

HIGH CVSS 7.1 2026-10-29
Open Full Technical Breakdown
Threat Entry Updated 2026-11-03

Disable Payment Method For Woocommerce - Security Vulnerability (CVE-2026-118757)

PiWeb Disable payment method / Partial payment for WooCommerce before 1.1.10.9 contains a missing authorization vulnerability in the update_fees AJAX handler that allows unauthenticated attackers to modify and read other customers' orders. Attackers can reuse a nonce from their own order-pay page and supply sequential order_id values to change payment methods, recalculate fees, and disclose order line items and totals.

PLUGIN Disable Payment Method For Woocommerce

CVE-2026-118757

MEDIUM CVSS 6.9 2026-10-28
Open Full Technical Breakdown
Threat Entry Updated 2026-11-04

Ninja Forms - Security Vulnerability (CVE-2026-67187)

Ninja Forms plugin for WordPress before 3.15.4 contains an incomplete server-side validation vulnerability that allows unauthenticated attackers to submit arbitrary values to Checkbox List, Multi-Select List, Image List, Country, and State fields because NF_Abstracts_List falls through to a validate() method that only checks required-field presence. Attackers can submit crafted formula payloads through the unauthenticated nf_ajax_submit endpoint that bypass CSV escaping applied only to Textbox and Textarea fields, resulting in CSV injection when an administrator downloads and opens the exported submissions file.

PLUGIN Ninja Forms

CVE-2026-67187

MEDIUM CVSS 5.1 2026-10-28
Open Full Technical Breakdown
Threat Entry Updated 2026-11-04

MemberPress - Security Vulnerability (CVE-2026-92797)

The MemberPress plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 1.14.1. This is due to a bypassable nonce verification check in the save_profile_fields() function that uses an isset() condition at line 1119, allowing the security check to be completely bypassed by simply omitting the nonce parameter from the request. This makes it possible for unauthenticated attackers to change authenticated users' email addresses via a forged request granted they can trick an authenticated user into performing an action such as clicking on a link,…

PLUGIN MemberPress

CVE-2026-92797

HIGH CVSS 8.8 2026-10-28
Open Full Technical Breakdown
Threat Entry Updated 2026-11-04

Enable Media Replace - Security Vulnerability (CVE-2026-85655)

The Enable Media Replace plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 4.2.2. This is due to the plugin not properly verifying that a user is authorized to perform an action. This makes it possible for authenticated attackers, with author-level access and above, to modify the post_content of any published post referencing the replaced media — including Administrator-owned posts — making changes immediately visible to unauthenticated visitors. The doReplaceQuery() method performs a database-wide search-and-replace across all posts containing the old media URL without…

PLUGIN Enable Media Replace

CVE-2026-85655

MEDIUM CVSS 4.3 2026-10-28
Open Full Technical Breakdown
Threat Entry Updated 2026-11-09

UniPAY Payment Gateway For WooCommerce - Security Vulnerability (CVE-2026-103331)

The UniPAY Payment Gateway For WooCommerce WordPress plugin before 2.4 does not properly verify the authenticity of payment notifications, as their signature is checked against a merchant secret that is empty by default, allowing unauthenticated attackers to forge a valid notification and mark arbitrary orders as paid.

PLUGIN UniPAY Payment Gateway For WooCommerce

CVE-2026-103331

MEDIUM CVSS 5.3 2026-10-28
Open Full Technical Breakdown
Threat Entry Updated 2026-11-04

Memberfindme - Security Vulnerability (CVE-2026-112355)

The MembershipWorks plugin for WordPress before 6.17 contains an information disclosure vulnerability that allows unauthenticated attackers to access member-only content through the WordPress REST API. Because the filter that strips protected content for non-members is only attached during normal front-end request handling and not during REST API requests, an unauthenticated attacker can retrieve the raw member-only content in a post or page’s rendered content, bypassing the plugin’s content protection.

PLUGIN Memberfindme

CVE-2026-112355

HIGH CVSS 8.7 2026-10-27
Open Full Technical Breakdown
Threat Entry Updated 2026-10-29

Acf Views - Security Vulnerability (CVE-2026-109995)

The Advanced Views – Display Framework for Gutenberg & Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'comment' parameter in all versions up to, and including, 3.9.6 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. This vulnerability is exploitable even against pending or unapproved comments, as the plugin's get_comment() lookup applies no approval-status filter, meaning a payload executes for any visitor loading…

PLUGIN Acf Views

CVE-2026-109995

HIGH CVSS 7.2 2026-10-27
Open Full Technical Breakdown
Threat Entry Updated 2026-10-29

Acf Extended - Security Vulnerability (CVE-2026-10752)

The Advanced Custom Fields: Extended plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 0.9.2.6. This is due to the plugin not properly verifying that a user is authorized to perform an action. This makes it possible for unauthenticated attackers to permanently delete arbitrary WordPress media library attachments by supplying a numeric attachment ID in the form submission without any ownership or capability verification. Exploitation requires a site administrator to have configured a public-facing ACFE form with an Email action whose attachment row uses…

PLUGIN Acf Extended

CVE-2026-10752

MEDIUM CVSS 4.8 2026-10-27
Open Full Technical Breakdown
Threat Entry Updated 2026-10-27

Qode Membership - Security Vulnerability (CVE-2026-92885)

The Qode Membership plugin for WordPress is vulnerable to Authentication Bypass leading to Account Takeover in all versions up to, and including, 2.0.6.2 via the qode_membership_check_facebook_user AJAX action. This is due to a typographic error in the Facebook OAuth token verification guard within the qode_membership_login_user_from_social_network function — the guard condition tests an undefined variable ($check_social_useqoder instead of $check_social_user), causing empty() to always return true and rendering the Graph API token verification branch dead code, leaving wp_set_auth_cookie() reachable with no credential or token validation whatsoever. This makes it possible for unauthenticated…

PLUGIN Qode Membership

CVE-2026-92885

CRITICAL CVSS 9.8 2026-10-27
Open Full Technical Breakdown
Threat Entry Updated 2026-10-29

Jupiterx Core - Security Vulnerability (CVE-2026-10511)

The Jupiter X Core plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'forget_password_link' parameter in all versions up to, and including, 4.61.0 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.

PLUGIN Jupiterx Core

CVE-2026-10511

MEDIUM CVSS 6.4 2026-10-27
Open Full Technical Breakdown
Threat Entry Updated 2026-10-29

Kirki - Security Vulnerability (CVE-2026-75891)

The Kirki plugin for WordPress is vulnerable to Privilege Escalation via PHP Object Injection in all versions up to, and including, 6.2.5 via deserialization of untrusted input through the 'get-single-symbol' branch of the kirki_post_apis() AJAX dispatcher due to a missing capability check. This makes it possible for authenticated attackers, with Subscriber-level access and above, to inject a PHP Object. The additional presence of a POP chain allows attackers to overwrite an administrator's password and gain administrative access.

PLUGIN Kirki

CVE-2026-75891

HIGH CVSS 8.8 2026-10-27
Open Full Technical Breakdown
Threat Entry Updated 2026-10-28

PayDunya WooCommerce Payment Gateway - Security Vulnerability (CVE-2026-103359)

The PayDunya WooCommerce Payment Gateway WordPress plugin through 1.1.6 does not verify the authenticity of incoming payment notifications and, until the gateway is configured, authenticates them with a value derived from an empty secret that anyone can compute, allowing unauthenticated attackers to mark arbitrary WooCommerce orders as paid and completed.

PLUGIN PayDunya WooCommerce Payment Gateway

CVE-2026-103359

MEDIUM CVSS 5.3 2026-10-27
Open Full Technical Breakdown

WordPress security that blocks attacks before they land.

sales@hackhalt.com

Product

Resources

Company

© Hack Halt Inc. All rights reserved.