sales@hackhalt.com
Free Download

Live Vulnerability Intelligence

Threat Database

Search CVEs, inspect descriptions, and open detail pages with AI-assisted technical context.

Total40,783
Critical3,170
High11,980
Medium25,054
Reset
Showing 1041-1060 of 40783 records
Threat Entry Updated 2026-10-28

TiendaCrypto para WooCommerce - Security Vulnerability (CVE-2026-103325)

The TiendaCrypto para WooCommerce WordPress plugin through 1.2.1 does not correctly verify the authenticity of its payment webhook, validating the request signature against a key that is always empty, which allows unauthenticated attackers to forge webhook notifications and mark arbitrary WooCommerce orders as paid on web servers that preserve request header case.

PLUGIN TiendaCrypto para WooCommerce

CVE-2026-103325

LOW CVSS 3.7 2026-10-27
Open Full Technical Breakdown
Threat Entry Updated 2026-10-29

Analytics Insights - Security Vulnerability (CVE-2026-111820)

The Analytics Insights – Google Analytics Dashboard for WordPress plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Page Title in all versions up to, and including, 6.3.12 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.

PLUGIN Analytics Insights

CVE-2026-111820

HIGH CVSS 7.2 2026-10-27
Open Full Technical Breakdown
Threat Entry Updated 2026-10-28

Payex Payment Gateway for Woocommerce - Security Vulnerability (CVE-2026-103332)

The Payex Payment Gateway for Woocommerce WordPress plugin through 1.2.10 does not properly verify the authenticity of incoming payment notifications, relying on a validation secret that is empty by default, allowing unauthenticated attackers to forge a valid payment confirmation and mark any order as paid.

PLUGIN Payex Payment Gateway for Woocommerce

CVE-2026-103332

MEDIUM CVSS 5.3 2026-10-27
Open Full Technical Breakdown
Threat Entry Updated 2026-10-28

Payment Integration Wompi - Security Vulnerability (CVE-2026-103312)

The Payment Integration Wompi WordPress plugin through 4.0.1 does not verify the authenticity of incoming payment notifications on a stock install, because the callback's checksum is keyed on a merchant secret that is empty until it is manually configured, allowing an unauthenticated attacker to forge a notification and mark an arbitrary order as paid.

PLUGIN Payment Integration Wompi

CVE-2026-103312

MEDIUM CVSS 5.3 2026-10-27
Open Full Technical Breakdown
Threat Entry Updated 2026-10-26

Text Typing - Security Vulnerability (CVE-2026-115966)

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in bPlugins Typing Text – Give your texts many typing effects text-typing allows Stored XSS.This issue affects Typing Text – Give your texts many typing effects: from n/a through 2.2.0.

PLUGIN Text Typing

CVE-2026-115966

MEDIUM CVSS 6.5 2026-10-26
Open Full Technical Breakdown
Threat Entry Updated 2026-10-26

Woo Customer Coupons - Security Vulnerability (CVE-2026-112839)

Missing Authorization vulnerability in VillaTheme Customer Coupons for WooCommerce woo-customer-coupons allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Customer Coupons for WooCommerce: from n/a through 1.3.14.

PLUGIN Woo Customer Coupons

CVE-2026-112839

MEDIUM CVSS 4.3 2026-10-26
Open Full Technical Breakdown
Threat Entry Updated 2026-10-26

Woo Photo Reviews - Security Vulnerability (CVE-2026-111404)

Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition') vulnerability in VillaTheme Photo Reviews for WooCommerce woo-photo-reviews allows Leveraging Race Conditions.This issue affects Photo Reviews for WooCommerce: from n/a through 1.2.31.

PLUGIN Woo Photo Reviews

CVE-2026-111404

LOW CVSS 3.7 2026-10-26
Open Full Technical Breakdown
Threat Entry Updated 2026-10-26

Easy Digital Downloads - Security Vulnerability (CVE-2026-116403)

Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition') vulnerability in Awesomemotive Easy Digital Downloads easy-digital-downloads allows Leveraging Race Conditions.This issue affects Easy Digital Downloads: from n/a through 3.7.1.

PLUGIN Easy Digital Downloads

CVE-2026-116403

MEDIUM CVSS 5.9 2026-10-26
Open Full Technical Breakdown
Threat Entry Updated 2026-10-26

Panorama - Security Vulnerability (CVE-2026-115956)

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in bPlugins Panorama Viewer – 360 Degree Image + Video Viewer panorama allows Stored XSS.This issue affects Panorama Viewer – 360 Degree Image + Video Viewer: from n/a through 1.8.3.

PLUGIN Panorama

CVE-2026-115956

MEDIUM CVSS 6.5 2026-10-26
Open Full Technical Breakdown

WordPress security that blocks attacks before they land.

sales@hackhalt.com

Product

Resources

Company

© Hack Halt Inc. All rights reserved.