Threat Entry Updated 2026-06-17

CVE-2026-34895 - WordPress component

Unauthenticated Local File Inclusion in Softlab Core < 1.2.11 versions.

UNKNOWN WordPress component

CVE-2026-34895

HIGH CVSS 8.1 2026-06-17

Risk Score

Open Full Technical Breakdown

Threat Entry Updated 2026-06-17

CVE-2026-34894 - WordPress component

Unauthenticated Local File Inclusion in Integrio Core < 1.2.8 versions.

UNKNOWN WordPress component

CVE-2026-34894

HIGH CVSS 8.1 2026-06-17

Risk Score

Open Full Technical Breakdown

Threat Entry Updated 2026-06-17

CVE-2026-34893 - WordPress component

Unauthenticated Local File Inclusion in Thegov Core < 2.0.23 versions.

UNKNOWN WordPress component

CVE-2026-34893

HIGH CVSS 8.1 2026-06-17

Risk Score

Open Full Technical Breakdown

Threat Entry Updated 2026-06-17

CVE-2026-34888 - WordPress component

Unauthenticated Sensitive Data Exposure in Bricksforge

UNKNOWN WordPress component

CVE-2026-34888

HIGH CVSS 7.5 2026-06-17

Risk Score

Open Full Technical Breakdown

Threat Entry Updated 2026-06-17

CVE-2026-27429 - WordPress component

Unauthenticated PHP Object Injection in Nifty

UNKNOWN WordPress component

CVE-2026-27429

CRITICAL CVSS 9.8 2026-06-17

Risk Score

Open Full Technical Breakdown

Threat Entry Updated 2026-06-17

CVE-2026-27041 - Elementor Plugin

Contributor Arbitrary File Upload in Unlimited Elements for Elementor (Premium)

PLUGIN Elementor

CVE-2026-27041

CRITICAL CVSS 9.9 2026-06-17

Risk Score

Open Full Technical Breakdown

Threat Entry Updated 2026-06-17

CVE-2026-27395 - WordPress component

Unauthenticated Privilege Escalation in Support Board < 3.8.9 versions.

UNKNOWN WordPress component

CVE-2026-27395

CRITICAL CVSS 9.8 2026-06-17

Risk Score

Open Full Technical Breakdown

Threat Entry Updated 2026-06-17

CVE-2026-27400 - WordPress component

Unauthenticated Arbitrary File Deletion in BookPro

UNKNOWN WordPress component

CVE-2026-27400

HIGH CVSS 8.6 2026-06-17

Risk Score

Open Full Technical Breakdown

Threat Entry Updated 2026-06-17

CVE-2026-27410 - WordPress component

Unauthenticated Deserialization of untrusted data in Slimstat Analytics < 5.4.0 versions.

UNKNOWN WordPress component

CVE-2026-27410

MEDIUM CVSS 6.5 2026-06-17

Risk Score

Open Full Technical Breakdown

Threat Entry Updated 2026-06-17

CVE-2026-25470 - Custom Post Types Plugin

Improper Control of Generation of Code ('Code Injection') vulnerability in ACPT ACPT (Pro) - Custom Post Types Plugin for WordPress allows Remote Code Inclusion. This issue affects ACPT (Pro) - Custom Post Types Plugin for WordPress: from n/a through 2.0.47.

PLUGIN Custom Post Types

CVE-2026-25470

CRITICAL CVSS 10.0 2026-06-17

Risk Score

Open Full Technical Breakdown

Threat Entry Updated 2026-06-17

CVE-2026-25446 - WordPress component

Subscriber Arbitrary File Upload in WishList Member X

UNKNOWN WordPress component

CVE-2026-25446

CRITICAL CVSS 9.9 2026-06-17

Risk Score

Open Full Technical Breakdown

Threat Entry Updated 2026-06-17

CVE-2026-25439 - WordPress component

Unauthenticated Broken Authentication in Booknetic

UNKNOWN WordPress component

CVE-2026-25439

HIGH CVSS 8.1 2026-06-17

Risk Score

Open Full Technical Breakdown

Threat Entry Updated 2026-06-17

CVE-2026-24611 - WordPress component

Unauthenticated Broken Access Control in MetForm Pro

UNKNOWN WordPress component

CVE-2026-24611

CRITICAL CVSS 9.1 2026-06-17

Risk Score

Open Full Technical Breakdown

Threat Entry Updated 2026-06-17

CVE-2026-24610 - WordPress component

Subscriber Broken Access Control in MetForm Pro

UNKNOWN WordPress component

CVE-2026-24610

MEDIUM CVSS 4.3 2026-06-17

Risk Score

Open Full Technical Breakdown

Threat Entry Updated 2026-06-17

CVE-2026-24575 - WordPress component

Subscriber Broken Access Control in WishList Member X

UNKNOWN WordPress component

CVE-2026-24575

MEDIUM CVSS 4.3 2026-06-17

Risk Score

Open Full Technical Breakdown

Threat Entry Updated 2026-06-17

CVE-2026-22343 - WordPress component

Unauthenticated Broken Access Control in WordPress Dating Theme

UNKNOWN WordPress component

CVE-2026-22343

HIGH CVSS 8.6 2026-06-17

Risk Score

Open Full Technical Breakdown

Threat Entry Updated 2026-06-17

CVE-2026-22340 - WordPress component

Unauthenticated SQL Injection in WPJobster

UNKNOWN WordPress component

CVE-2026-22340

CRITICAL CVSS 9.3 2026-06-17

Risk Score

Open Full Technical Breakdown

Threat Entry Updated 2026-06-17

CVE-2026-22332 - WordPress component

Unauthenticated SQL Injection in Tutor LMS Pro

UNKNOWN WordPress component

CVE-2026-22332

CRITICAL CVSS 9.3 2026-06-17

Risk Score

Open Full Technical Breakdown

Threat Entry Updated 2026-06-17

CVE-2026-22342 - WordPress component

Unauthenticated Cross Site Request Forgery (CSRF) in WordPress Dating Theme

UNKNOWN WordPress component

CVE-2026-22342

HIGH CVSS 8.8 2026-06-17

Risk Score

Open Full Technical Breakdown

Threat Entry Updated 2026-06-17

CVE-2026-22335 - WordPress component

Subscriber SQL Injection in WooCommerce Frontend Manager – Ultimate < 6.7.7 versions.

UNKNOWN WordPress component

CVE-2026-22335

HIGH CVSS 8.5 2026-06-17

Risk Score

Open Full Technical Breakdown