Threat Entry Updated 2026-06-17

CVE-2026-40753 - WordPress component

Unauthenticated PHP Object Injection in EasyMeals

UNKNOWN WordPress component

CVE-2026-40753

HIGH CVSS 8.1 2026-06-17

Risk Score

Open Full Technical Breakdown

Threat Entry Updated 2026-06-17

CVE-2026-40751 - WordPress component

Unauthenticated PHP Object Injection in Ashtanga

UNKNOWN WordPress component

CVE-2026-40751

HIGH CVSS 8.1 2026-06-17

Risk Score

Open Full Technical Breakdown

Threat Entry Updated 2026-06-17

CVE-2026-40739 - WordPress component

Unauthenticated PHP Object Injection in LuxeDrive

UNKNOWN WordPress component

CVE-2026-40739

HIGH CVSS 8.1 2026-06-17

Risk Score

Open Full Technical Breakdown

Threat Entry Updated 2026-06-17

CVE-2026-40725 - WordPress component

Unauthenticated PHP Object Injection in WooCommerce Product Filters < 2.0.6 versions.

UNKNOWN WordPress component

CVE-2026-40725

CRITICAL CVSS 9.8 2026-06-17

Risk Score

Open Full Technical Breakdown

Threat Entry Updated 2026-06-17

CVE-2026-40726 - WordPress component

Unauthenticated Broken Access Control in User Registration Stripe

UNKNOWN WordPress component

CVE-2026-40726

HIGH CVSS 8.2 2026-06-17

Risk Score

Open Full Technical Breakdown

Threat Entry Updated 2026-06-17

CVE-2026-40736 - WordPress component

Unauthenticated PHP Object Injection in Laurits

UNKNOWN WordPress component

CVE-2026-40736

HIGH CVSS 8.1 2026-06-17

Risk Score

Open Full Technical Breakdown

Threat Entry Updated 2026-06-17

CVE-2026-40735 - WordPress component

Unauthenticated PHP Object Injection in Reina

UNKNOWN WordPress component

CVE-2026-40735

HIGH CVSS 8.1 2026-06-17

Risk Score

Open Full Technical Breakdown

Threat Entry Updated 2026-06-17

CVE-2026-40731 - WordPress component

Unauthenticated Local File Inclusion in ChapterOne

UNKNOWN WordPress component

CVE-2026-40731

HIGH CVSS 8.1 2026-06-17

Risk Score

Open Full Technical Breakdown

Threat Entry Updated 2026-06-17

CVE-2026-40724 - WordPress component

CP Client Arbitrary File Download in Client Portal (Pro)

UNKNOWN WordPress component

CVE-2026-40724

MEDIUM CVSS 6.5 2026-06-17

Risk Score

Open Full Technical Breakdown

Threat Entry Updated 2026-06-17

CVE-2026-40722 - Yoast SEO Plugin

Missing Authorization vulnerability in Yoast BV Yoast SEO Premium allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects Yoast SEO Premium: from n/a through 26.6.

PLUGIN Yoast SEO

CVE-2026-40722

MEDIUM CVSS 5.5 2026-06-17

Risk Score

Open Full Technical Breakdown

Threat Entry Updated 2026-06-17

CVE-2026-40723 - WordPress component

Subscriber Broken Access Control in Bricks Builder

UNKNOWN WordPress component

CVE-2026-40723

MEDIUM CVSS 4.3 2026-06-17

Risk Score

Open Full Technical Breakdown

Threat Entry Updated 2026-06-17

CVE-2026-40721 - WordPress component

Contributor Local File Inclusion in Element Pack Pro

UNKNOWN WordPress component

CVE-2026-40721

HIGH CVSS 7.5 2026-06-17

Risk Score

Open Full Technical Breakdown

Threat Entry Updated 2026-06-17

CVE-2026-39598 - Academy LMS Pro Plugin

Unrestricted Upload of File with Dangerous Type vulnerability in Kodezen LLC Academy LMS Pro allows Upload a Web Shell to a Web Server. This issue affects Academy LMS Pro: from n/a before 3.5.2.

PLUGIN Academy LMS Pro

CVE-2026-39598

HIGH CVSS 8.0 2026-06-17

Risk Score

Open Full Technical Breakdown

Threat Entry Updated 2026-06-17

CVE-2026-39589 - WordPress component

Subscriber Arbitrary File Upload in Webenvo

UNKNOWN WordPress component

CVE-2026-39589

CRITICAL CVSS 9.9 2026-06-17

Risk Score

Open Full Technical Breakdown

Threat Entry Updated 2026-06-17

CVE-2026-39596 - WordPress component

Unauthenticated SQL Injection in Blocksy Companion Pro < 2.1.29 versions.

UNKNOWN WordPress component

CVE-2026-39596

CRITICAL CVSS 9.3 2026-06-17

Risk Score

Open Full Technical Breakdown

Threat Entry Updated 2026-06-17

CVE-2026-39582 - WordPress component

Unauthenticated Local File Inclusion in Hitek < 1.8.3 versions.

UNKNOWN WordPress component

CVE-2026-39582

HIGH CVSS 8.1 2026-06-17

Risk Score

Open Full Technical Breakdown

Threat Entry Updated 2026-06-17

CVE-2026-39580 - WordPress component

Unauthenticated PHP Object Injection in Micdrop

UNKNOWN WordPress component

CVE-2026-39580

HIGH CVSS 8.1 2026-06-17

Risk Score

Open Full Technical Breakdown

Threat Entry Updated 2026-06-17

CVE-2026-39597 - Elementor Plugin

Unauthenticated Cross Site Scripting (XSS) in WPZOOM Addons for Elementor

PLUGIN Elementor

CVE-2026-39597

HIGH CVSS 7.1 2026-06-17

Risk Score

Open Full Technical Breakdown

Threat Entry Updated 2026-06-17

CVE-2026-39578 - WordPress component

Unauthenticated PHP Object Injection in Valiance

UNKNOWN WordPress component

CVE-2026-39578

MEDIUM CVSS 5.5 2026-06-17

Risk Score

Open Full Technical Breakdown

Threat Entry Updated 2026-06-17

CVE-2026-39595 - WordPress component

Author Broken Access Control in W3 Total Cache

UNKNOWN WordPress component

CVE-2026-39595

MEDIUM CVSS 4.7 2026-06-17

Risk Score

Open Full Technical Breakdown