Threat Entry Updated 2026-06-17

CVE-2026-6964 - Video Conferencing With Zoom Api Plugin

The Video Conferencing with Zoom plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 4.6.7. This is due to the plugin not properly verifying that a user is authorized to perform an action. This makes it possible for unauthenticated attackers to obtain the site's Zoom SDK API key and a freshly-signed JWT that can be used with the Zoom Web SDK to join any Zoom meeting associated with those credentials without a legitimate invitation.

PLUGIN Video Conferencing With Zoom Api

CVE-2026-6964

MEDIUM CVSS 5.3 2026-06-16

Risk Score

Open Full Technical Breakdown

Threat Entry Updated 2026-06-17

CVE-2026-9691 - Contact Form 7 Plugin

Unauthenticated PHP Object Injection in Integration for ActiveCampaign and Contact Form 7, WPForms, Elementor, Ninja Forms

PLUGIN Contact Form 7

CVE-2026-9691

CRITICAL CVSS 9.8 2026-06-15

Risk Score

Open Full Technical Breakdown

Threat Entry Updated 2026-06-17

CVE-2026-52703 - WordPress component

Unauthenticated Path Traversal in FastDup

UNKNOWN WordPress component

CVE-2026-52703

CRITICAL CVSS 9.6 2026-06-15

Risk Score

Open Full Technical Breakdown

Threat Entry Updated 2026-06-17

CVE-2026-52700 - WordPress component

Subscriber SQL Injection in WCMultiShipping

UNKNOWN WordPress component

CVE-2026-52700

HIGH CVSS 8.5 2026-06-15

Risk Score

Open Full Technical Breakdown

Threat Entry Updated 2026-06-17

CVE-2026-52697 - WordPress component

Subscriber SQL Injection in Taskbuilder

UNKNOWN WordPress component

CVE-2026-52697

HIGH CVSS 8.5 2026-06-15

Risk Score

Open Full Technical Breakdown

Threat Entry Updated 2026-06-17

CVE-2026-52699 - WordPress component

Unauthenticated Insecure Direct Object References (IDOR) in VikRentCar

UNKNOWN WordPress component

CVE-2026-52699

HIGH CVSS 7.5 2026-06-15

Risk Score

Open Full Technical Breakdown

Threat Entry Updated 2026-06-17

CVE-2026-52695 - WordPress component

Unauthenticated Sensitive Data Exposure in ABC Crypto Checkout

UNKNOWN WordPress component

CVE-2026-52695

HIGH CVSS 7.5 2026-06-15

Risk Score

Open Full Technical Breakdown

Threat Entry Updated 2026-06-17

CVE-2026-52694 - WordPress component

Unauthenticated Sensitive Data Exposure in Signature Add-On for WooCommerce

UNKNOWN WordPress component

CVE-2026-52694

HIGH CVSS 7.5 2026-06-15

Risk Score

Open Full Technical Breakdown

Threat Entry Updated 2026-06-17

CVE-2026-52702 - WordPress component

Unauthenticated Cross Site Scripting (XSS) in SEO Redirection

UNKNOWN WordPress component

CVE-2026-52702

HIGH CVSS 7.1 2026-06-15

Risk Score

Open Full Technical Breakdown

Threat Entry Updated 2026-06-17

CVE-2026-52693 - WordPress component

Unauthenticated SQL Injection in eCommerce Product Catalog

UNKNOWN WordPress component

CVE-2026-52693

CRITICAL CVSS 9.3 2026-06-15

Risk Score

Open Full Technical Breakdown

Threat Entry Updated 2026-06-17

CVE-2026-52692 - WordPress component

Unauthenticated Sensitive Data Exposure in Affiliates Manager

UNKNOWN WordPress component

CVE-2026-52692

HIGH CVSS 7.5 2026-06-15

Risk Score

Open Full Technical Breakdown

Threat Entry Updated 2026-06-17

CVE-2026-49781 - WordPress component

Unauthenticated PHP Object Injection in OttoKit

UNKNOWN WordPress component

CVE-2026-49781

CRITICAL CVSS 9.8 2026-06-15

Risk Score

Open Full Technical Breakdown

Threat Entry Updated 2026-06-17

CVE-2026-49770 - WordPress component

Unauthenticated PHP Object Injection in WP Travel Engine

UNKNOWN WordPress component

CVE-2026-49770

CRITICAL CVSS 9.8 2026-06-15

Risk Score

Open Full Technical Breakdown

Threat Entry Updated 2026-06-17

CVE-2026-49776 - WordPress component

Unauthenticated SQL Injection in GPTranslate – Multilingual AI Translation for WordPress: Automatically Translate Websites

UNKNOWN WordPress component

CVE-2026-49776

CRITICAL CVSS 9.3 2026-06-15

Risk Score

Open Full Technical Breakdown

Threat Entry Updated 2026-06-17

CVE-2026-49780 - WordPress component

Customer Privilege Escalation in Dokan

UNKNOWN WordPress component

CVE-2026-49780

HIGH CVSS 8.8 2026-06-15

Risk Score

Open Full Technical Breakdown

Threat Entry Updated 2026-06-17

CVE-2026-49775 - WordPress component

Unauthenticated Broken Access Control in Welcart e-Commerce

UNKNOWN WordPress component

CVE-2026-49775

MEDIUM CVSS 6.5 2026-06-15

Risk Score

Open Full Technical Breakdown

Threat Entry Updated 2026-06-17

CVE-2026-49773 - WordPress component

Subscriber Cross Site Scripting (XSS) in FV Flowplayer Video Player < 7.5.51.7212 versions.

UNKNOWN WordPress component

CVE-2026-49773

MEDIUM CVSS 6.5 2026-06-15

Risk Score

Open Full Technical Breakdown

Threat Entry Updated 2026-06-17

CVE-2026-49766 - WordPress component

Subscriber Arbitrary File Deletion in WP User Manager

UNKNOWN WordPress component

CVE-2026-49766

CRITICAL CVSS 9.9 2026-06-15

Risk Score

Open Full Technical Breakdown

Threat Entry Updated 2026-06-17

CVE-2026-49769 - WordPress component

Unauthenticated PHP Object Injection in wpForo Forum

UNKNOWN WordPress component

CVE-2026-49769

CRITICAL CVSS 9.8 2026-06-15

Risk Score

Open Full Technical Breakdown

Threat Entry Updated 2026-06-17

CVE-2026-49768 - WordPress component

Unauthenticated PHP Object Injection in Happyforms

UNKNOWN WordPress component

CVE-2026-49768

CRITICAL CVSS 9.8 2026-06-15

Risk Score

Open Full Technical Breakdown