Live Vulnerability Intelligence
Threat Database
Search CVEs, inspect descriptions, and open detail pages with AI-assisted technical context.
Threat Entry
Updated 2026-10-26
Advanced Post Block - Security Vulnerability (CVE-2026-115955)
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in bPlugins Advanced Post Block - Post Grid for WordPress block editor advanced-post-block allows Stored XSS.This issue affects Advanced Post Block - Post Grid for WordPress block editor: from n/a through 2.5.1.
PLUGIN
Advanced Post Block
CVE-2026-115955
Risk Score
Threat Entry
Updated 2026-10-26
Geo Mashup - Security Vulnerability (CVE-2026-115953)
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Dylan Kuhn Geo Mashup geo-mashup allows Stored XSS.This issue affects Geo Mashup: from n/a through 1.13.22.
PLUGIN
Geo Mashup
CVE-2026-115953
Risk Score
Threat Entry
Updated 2026-10-26
Geo Mashup - Security Vulnerability (CVE-2026-115954)
Missing Authorization vulnerability in Dylan Kuhn Geo Mashup geo-mashup allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Geo Mashup: from n/a through 1.13.22.
PLUGIN
Geo Mashup
CVE-2026-115954
Risk Score
Threat Entry
Updated 2026-10-26
Woosquare - Security Vulnerability (CVE-2026-115959)
Missing Authorization vulnerability in WPExperts APIExperts Square for WooCommerce woosquare allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects APIExperts Square for WooCommerce: from n/a through 4.7.5.
PLUGIN
Woosquare
CVE-2026-115959
Risk Score
Threat Entry
Updated 2026-10-26
Woosquare - Security Vulnerability (CVE-2026-115960)
Missing Authorization vulnerability in WPExperts APIExperts Square for WooCommerce woosquare allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects APIExperts Square for WooCommerce: from n/a through 4.7.5.
PLUGIN
Woosquare
CVE-2026-115960
Risk Score
Threat Entry
Updated 2026-10-26
Media Library Assistant - Security Vulnerability (CVE-2026-115948)
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in David Lingren Media LIbrary Assistant media-library-assistant allows Blind SQL Injection.This issue affects Media LIbrary Assistant: from n/a through 3.42.
PLUGIN
Media Library Assistant
CVE-2026-115948
Risk Score
Threat Entry
Updated 2026-10-26
Jet Engine - Security Vulnerability (CVE-2026-115608)
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Crocoblock JetEngine jet-engine allows SQL Injection.This issue affects JetEngine: from n/a through 3.9.0.
PLUGIN
Jet Engine
CVE-2026-115608
Risk Score
Threat Entry
Updated 2026-10-26
Lazy Load For Videos - Security Vulnerability (CVE-2026-115951)
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Kevin Weber Lazy Load for Videos lazy-load-for-videos allows Stored XSS.This issue affects Lazy Load for Videos: from n/a through 2.18.11.
PLUGIN
Lazy Load For Videos
CVE-2026-115951
Risk Score
Threat Entry
Updated 2026-10-26
Better Post Filter Widgets For Elementor - Security Vulnerability (CVE-2026-115950)
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WP Smart Widgets Better Post & Filter Widgets for Elementor better-post-filter-widgets-for-elementor allows Stored XSS.This issue affects Better Post & Filter Widgets for Elementor: from n/a through 1.9.1.
PLUGIN
Better Post Filter Widgets For Elementor
CVE-2026-115950
Risk Score
Threat Entry
Updated 2026-10-26
Media Library Assistant - Security Vulnerability (CVE-2026-115594)
Insertion of Sensitive Information Into Sent Data vulnerability in David Lingren Media LIbrary Assistant media-library-assistant allows Retrieve Embedded Sensitive Data.This issue affects Media LIbrary Assistant: from n/a through 3.42.
PLUGIN
Media Library Assistant
CVE-2026-115594
Risk Score
Threat Entry
Updated 2026-10-26
Contact Form By Supsystic - Security Vulnerability (CVE-2026-115595)
Missing Authorization vulnerability in Supsystic Contact Form by Supsystic contact-form-by-supsystic allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Contact Form by Supsystic: from n/a through 1.10.7.
PLUGIN
Contact Form By Supsystic
CVE-2026-115595
Risk Score
Threat Entry
Updated 2026-10-26
Jet Smart Filters - Security Vulnerability (CVE-2026-114708)
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Crocoblock JetSmartFilters jet-smart-filters allows Stored XSS.This issue affects JetSmartFilters: from n/a through 3.8.6.1.
PLUGIN
Jet Smart Filters
CVE-2026-114708
Risk Score
Threat Entry
Updated 2026-10-26
Jet Elements - Security Vulnerability (CVE-2026-114707)
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Crocoblock JetElements For Elementor jet-elements allows Stored XSS.This issue affects JetElements For Elementor: from n/a through 2.9.2.5.
PLUGIN
Jet Elements
CVE-2026-114707
Risk Score
Threat Entry
Updated 2026-10-26
Royal Elementor Addons - Security Vulnerability (CVE-2026-97254)
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WProyal Royal Elementor Addons royal-elementor-addons allows Stored XSS.This issue affects Royal Elementor Addons: from n/a through 1.7.1069.
PLUGIN
Royal Elementor Addons
CVE-2026-97254
Risk Score
Threat Entry
Updated 2026-10-26
Royal Elementor Addons - Security Vulnerability (CVE-2026-97255)
Authorization Bypass Through User-Controlled Key vulnerability in WProyal Royal Elementor Addons royal-elementor-addons allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Royal Elementor Addons: from n/a through 1.7.1069.
PLUGIN
Royal Elementor Addons
CVE-2026-97255
Risk Score
Threat Entry
Updated 2026-10-26
Media Library Assistant - Security Vulnerability (CVE-2026-97295)
Cross-Site Request Forgery (CSRF) vulnerability in David Lingren Media LIbrary Assistant media-library-assistant allows Cross Site Request Forgery.This issue affects Media LIbrary Assistant: from n/a through 3.42.
PLUGIN
Media Library Assistant
CVE-2026-97295
Risk Score
Threat Entry
Updated 2026-10-26
Better Post Filter Widgets For Elementor - Security Vulnerability (CVE-2026-115949)
Missing Authorization vulnerability in WP Smart Widgets Better Post & Filter Widgets for Elementor better-post-filter-widgets-for-elementor allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Better Post & Filter Widgets for Elementor: from n/a through 1.9.1.
PLUGIN
Better Post Filter Widgets For Elementor
CVE-2026-115949
Risk Score
Threat Entry
Updated 2026-10-26
Wp Discussion Board - Security Vulnerability (CVE-2026-115958)
Missing Authorization vulnerability in WP Discussion Board WP Discussion Board wp-discussion-board allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP Discussion Board: from n/a through 2.6.0.
PLUGIN
Wp Discussion Board
CVE-2026-115958
Risk Score
Threat Entry
Updated 2026-10-26
Booking And Rental Manager For Woocommerce - Security Vulnerability (CVE-2026-115614)
Missing Authorization vulnerability in Magepeople inc. Booking and Rental Manager booking-and-rental-manager-for-woocommerce allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Booking and Rental Manager: from n/a through 2.8.2.
PLUGIN
Booking And Rental Manager For Woocommerce
CVE-2026-115614
Risk Score
Threat Entry
Updated 2026-10-26
3d Image Gallery - Security Vulnerability (CVE-2026-115613)
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in bPlugins Image Gallery block – Create and display photo gallery/photo album. 3d-image-gallery allows Stored XSS.This issue affects Image Gallery block – Create and display photo gallery/photo album.: from n/a through 2.4.1.
PLUGIN
3d Image Gallery
CVE-2026-115613
Risk Score