Threat Entry Updated 2026-06-17

CVE-2026-54184 - WordPress component

Unauthenticated Insecure Direct Object References (IDOR) in Clean Login

UNKNOWN WordPress component

CVE-2026-54184

HIGH CVSS 8.2 2026-06-17

Risk Score

Open Full Technical Breakdown

Threat Entry Updated 2026-06-17

CVE-2026-52698 - WordPress component

Subscriber Sensitive Data Exposure in PushEngage – Web Push Notifications, eCommerce Automation & Chat Widget

UNKNOWN WordPress component

CVE-2026-52698

HIGH CVSS 7.4 2026-06-17

Risk Score

Open Full Technical Breakdown

Threat Entry Updated 2026-06-17

CVE-2026-52696 - WordPress component

Unauthenticated Sensitive Data Exposure in JetBlog

UNKNOWN WordPress component

CVE-2026-52696

HIGH CVSS 7.5 2026-06-17

Risk Score

Open Full Technical Breakdown

Threat Entry Updated 2026-06-17

CVE-2026-49767 - WordPress component

Unauthenticated Broken Authentication in wpForo Forum

UNKNOWN WordPress component

CVE-2026-49767

CRITICAL CVSS 9.8 2026-06-17

Risk Score

Open Full Technical Breakdown

Threat Entry Updated 2026-06-17

CVE-2026-49107 - WordPress component

Unauthenticated PHP Object Injection in Thrive Apprentice < 10.8.10.2 versions.

UNKNOWN WordPress component

CVE-2026-49107

CRITICAL CVSS 9.8 2026-06-17

Risk Score

Open Full Technical Breakdown

Threat Entry Updated 2026-06-17

CVE-2026-49084 - WordPress component

Unauthenticated SQL Injection in JetEngine < 3.8.9.1 versions.

UNKNOWN WordPress component

CVE-2026-49084

CRITICAL CVSS 9.3 2026-06-17

Risk Score

Open Full Technical Breakdown

Threat Entry Updated 2026-06-17

CVE-2026-49080 - WordPress component

Unauthenticated SQL Injection in wpDataTables

UNKNOWN WordPress component

CVE-2026-49080

CRITICAL CVSS 9.3 2026-06-17

Risk Score

Open Full Technical Breakdown

Threat Entry Updated 2026-06-17

CVE-2026-49113 - WordPress component

Subscriber Arbitrary Code Execution in Cornerstone < 7.8.8 versions.

UNKNOWN WordPress component

CVE-2026-49113

HIGH CVSS 8.5 2026-06-17

Risk Score

Open Full Technical Breakdown

Threat Entry Updated 2026-06-17

CVE-2026-49081 - WordPress component

Unauthenticated Broken Access Control in User Registration Stripe

UNKNOWN WordPress component

CVE-2026-49081

HIGH CVSS 8.2 2026-06-17

Risk Score

Open Full Technical Breakdown

Threat Entry Updated 2026-06-17

CVE-2026-49778 - WordPress component

Unauthenticated Cross Site Scripting (XSS) in WPFunnels Pro

UNKNOWN WordPress component

CVE-2026-49778

HIGH CVSS 7.1 2026-06-17

Risk Score

Open Full Technical Breakdown

Threat Entry Updated 2026-06-17

CVE-2026-49075 - WordPress component

Contributor PHP Object Injection in JetEngine

UNKNOWN WordPress component

CVE-2026-49075

CRITICAL CVSS 9.8 2026-06-17

Risk Score

Open Full Technical Breakdown

Threat Entry Updated 2026-06-17

CVE-2026-49079 - WordPress component

Unauthenticated SQL Injection in JetSearch

UNKNOWN WordPress component

CVE-2026-49079

CRITICAL CVSS 9.3 2026-06-17

Risk Score

Open Full Technical Breakdown

Threat Entry Updated 2026-06-17

CVE-2026-49076 - WordPress component

Unauthenticated SQL Injection in JetEngine

UNKNOWN WordPress component

CVE-2026-49076

CRITICAL CVSS 9.3 2026-06-17

Risk Score

Open Full Technical Breakdown

Threat Entry Updated 2026-06-17

CVE-2026-49073 - Directorist Booking Plugin

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in wpWax Directorist Booking allows Blind SQL Injection. This issue affects Directorist Booking: from n/a through 3.0.3.

PLUGIN Directorist Booking

CVE-2026-49073

HIGH CVSS 8.5 2026-06-17

Risk Score

Open Full Technical Breakdown

Threat Entry Updated 2026-06-17

CVE-2026-49074 - WordPress component

Unauthenticated Cross Site Scripting (XSS) in JetEngine

UNKNOWN WordPress component

CVE-2026-49074

HIGH CVSS 7.1 2026-06-17

Risk Score

Open Full Technical Breakdown

Threat Entry Updated 2026-06-17

CVE-2026-49072 - WordPress component

Unauthenticated Broken Access Control in WooCommerce Anti-Fraud

UNKNOWN WordPress component

CVE-2026-49072

MEDIUM CVSS 6.5 2026-06-17

Risk Score

Open Full Technical Breakdown

Threat Entry Updated 2026-06-17

CVE-2026-49071 - WordPress component

Unauthenticated Broken Authentication in WooCommerce Dropshipping

UNKNOWN WordPress component

CVE-2026-49071

MEDIUM CVSS 6.5 2026-06-17

Risk Score

Open Full Technical Breakdown

Threat Entry Updated 2026-06-17

CVE-2026-49058 - WordPress component

Unauthenticated Privilege Escalation in LoginPress Pro

UNKNOWN WordPress component

CVE-2026-49058

CRITICAL CVSS 9.8 2026-06-17

Risk Score

Open Full Technical Breakdown

Threat Entry Updated 2026-06-17

CVE-2026-48875 - WordPress component

Unauthenticated SQL Injection in JetSmartFilters

UNKNOWN WordPress component

CVE-2026-48875

CRITICAL CVSS 9.3 2026-06-17

Risk Score

Open Full Technical Breakdown

Threat Entry Updated 2026-06-17

CVE-2026-48967 - WordPress component

Subscriber SQL Injection in Geo Mashup

UNKNOWN WordPress component

CVE-2026-48967

HIGH CVSS 8.5 2026-06-17

Risk Score

Open Full Technical Breakdown