sales@hackhalt.com
Free Download

Live Vulnerability Intelligence

Threat Database

Search CVEs, inspect descriptions, and open detail pages with AI-assisted technical context.

Total40,783
Critical3,170
High11,980
Medium25,054
Reset
Showing 1161-1180 of 40783 records
Threat Entry Updated 2026-10-24

Your Dress - Security Vulnerability (CVE-2026-112850)

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in AncoraThemes Your Dress your-dress allows PHP Local File Inclusion.This issue affects Your Dress: from n/a through 1.4.1.

THEME Your Dress

CVE-2026-112850

HIGH CVSS 8.1 2026-10-23
Open Full Technical Breakdown
Threat Entry Updated 2026-10-23

Advanced Custom Fields - Security Vulnerability (CVE-2026-94263)

The Advanced Custom Fields: Extended and Advanced Custom Fields: Extended PRO WordPress plugins from 0.9.2.4 to 0.9.2.7 do not consistently disable shortcode processing in the confirmation message of their front-end forms, allowing unauthenticated visitors to have arbitrary shortcodes executed server-side when they submit a form whose stored configuration does not carry the relevant setting.

PLUGIN Advanced Custom Fields

CVE-2026-94263

MEDIUM CVSS 4.8 2026-10-23
Open Full Technical Breakdown
Threat Entry Updated 2026-10-23

Profile Builder - Security Vulnerability (CVE-2026-111965)

The Profile Builder WordPress plugin from 4.0.0 to 4.0.4 does not enforce its reCAPTCHA verification on all comment submission paths, allowing authenticated users to bypass the anti-spam protection an administrator configured for the WordPress comment form.

PLUGIN Profile Builder

CVE-2026-111965

MEDIUM CVSS 4.3 2026-10-23
Open Full Technical Breakdown
Threat Entry Updated 2026-10-23

Participants Database - Security Vulnerability (CVE-2026-112860)

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in xnau webdesign Participants Database participants-database allows Blind SQL Injection.This issue affects Participants Database: from n/a through 2.7.8.5.

PLUGIN Participants Database

CVE-2026-112860

CRITICAL CVSS 9.3 2026-10-23
Open Full Technical Breakdown
Threat Entry Updated 2026-10-23

Advanced Custom Fields: Extended - Security Vulnerability (CVE-2026-94267)

The Advanced Custom Fields: Extended WordPress plugin before 0.9.2.8, Advanced Custom Fields: Extended PRO WordPress plugin before 0.9.2.8 does not perform any capability check when updating a post through one of its front-end form actions, allowing unauthenticated visitors to overwrite arbitrary posts, including the ones in which the site stores its own field definitions, which in turn leads to arbitrary code execution on the server. Exploitation requires the site to publish a form whose post-update action maps both its target and its content to visitor-submitted values.

PLUGIN Advanced Custom Fields: Extended

CVE-2026-94267

CRITICAL CVSS 9.0 2026-10-23
Open Full Technical Breakdown

WordPress security that blocks attacks before they land.

sales@hackhalt.com

Product

Resources

Company

© Hack Halt Inc. All rights reserved.