Threat Entry Updated 2026-06-17

CVE-2026-42688 - WordPress component

Subscriber Cross Site Scripting (XSS) in Modula Image Gallery

UNKNOWN WordPress component

CVE-2026-42688

MEDIUM CVSS 6.5 2026-06-15

Risk Score

Open Full Technical Breakdown

Threat Entry Updated 2026-06-17

CVE-2026-42663 - WordPress component

Unauthenticated Cross Site Scripting (XSS) in Simple Membership

UNKNOWN WordPress component

CVE-2026-42663

MEDIUM CVSS 6.5 2026-06-15

Risk Score

Open Full Technical Breakdown

Threat Entry Updated 2026-06-17

CVE-2026-42661 - WordPress component

Custom role Path Traversal in WP Customer Area

UNKNOWN WordPress component

CVE-2026-42661

HIGH CVSS 8.8 2026-06-15

Risk Score

Open Full Technical Breakdown

Threat Entry Updated 2026-06-17

CVE-2026-42658 - WordPress component

Unauthenticated Cross Site Scripting (XSS) in Classified Listing

UNKNOWN WordPress component

CVE-2026-42658

HIGH CVSS 7.1 2026-06-15

Risk Score

Open Full Technical Breakdown

Threat Entry Updated 2026-06-17

CVE-2026-42662 - WordPress component

Unauthenticated Bypass Vulnerability in Event Tickets

UNKNOWN WordPress component

CVE-2026-42662

MEDIUM CVSS 6.5 2026-06-15

Risk Score

Open Full Technical Breakdown

Threat Entry Updated 2026-06-17

CVE-2026-42660 - WordPress component

Subscriber Sensitive Data Exposure in Contest Gallery

UNKNOWN WordPress component

CVE-2026-42660

MEDIUM CVSS 6.5 2026-06-15

Risk Score

Open Full Technical Breakdown

Threat Entry Updated 2026-06-17

CVE-2026-42659 - WordPress component

Subscriber Broken Access Control in Advanced Form Integration

UNKNOWN WordPress component

CVE-2026-42659

MEDIUM CVSS 6.5 2026-06-15

Risk Score

Open Full Technical Breakdown

Threat Entry Updated 2026-06-17

CVE-2026-42656 - WordPress component

Subscriber Cross Site Scripting (XSS) in Contest Gallery

UNKNOWN WordPress component

CVE-2026-42656

MEDIUM CVSS 6.5 2026-06-15

Risk Score

Open Full Technical Breakdown

Threat Entry Updated 2026-06-17

CVE-2026-42655 - WordPress component

Unauthenticated Bypass Vulnerability in Best Payments Plugin for WP

UNKNOWN WordPress component

CVE-2026-42655

MEDIUM CVSS 5.9 2026-06-15

Risk Score

Open Full Technical Breakdown

Threat Entry Updated 2026-06-17

CVE-2026-42657 - WordPress component

Unauthenticated Other Vulnerability Type in Contest Gallery

UNKNOWN WordPress component

CVE-2026-42657

MEDIUM CVSS 5.3 2026-06-15

Risk Score

Open Full Technical Breakdown

Threat Entry Updated 2026-06-17

CVE-2026-42639 - WordPress component

Unauthenticated SQL Injection in GD Rating System

UNKNOWN WordPress component

CVE-2026-42639

CRITICAL CVSS 9.3 2026-06-15

Risk Score

Open Full Technical Breakdown

Threat Entry Updated 2026-06-17

CVE-2026-42386 - WordPress component

Unauthenticated SQL Injection in Order Delivery Date for WooCommerce

UNKNOWN WordPress component

CVE-2026-42386

CRITICAL CVSS 9.3 2026-06-15

Risk Score

Open Full Technical Breakdown

Threat Entry Updated 2026-06-17

CVE-2026-42411 - WordPress component

Unauthenticated Broken Authentication in CloudSecure WP Security

UNKNOWN WordPress component

CVE-2026-42411

HIGH CVSS 8.1 2026-06-15

Risk Score

Open Full Technical Breakdown

Threat Entry Updated 2026-06-17

CVE-2026-42384 - WordPress component

Unauthenticated Sensitive Data Exposure in Simply Schedule Appointments < 1.6.11.2 versions.

UNKNOWN WordPress component

CVE-2026-42384

HIGH CVSS 7.5 2026-06-15

Risk Score

Open Full Technical Breakdown

Threat Entry Updated 2026-06-17

CVE-2026-42650 - WordPress component

Unauthenticated Cross Site Scripting (XSS) in AutomatorWP

UNKNOWN WordPress component

CVE-2026-42650

HIGH CVSS 7.2 2026-06-15

Risk Score

Open Full Technical Breakdown

Threat Entry Updated 2026-06-17

CVE-2026-42649 - WordPress component

Unauthenticated Cross Site Scripting (XSS) in Favicon Rotator

UNKNOWN WordPress component

CVE-2026-42649

HIGH CVSS 7.1 2026-06-15

Risk Score

Open Full Technical Breakdown

Threat Entry Updated 2026-06-17

CVE-2026-42640 - WordPress component

Unauthenticated Broken Access Control in Classified Listing

UNKNOWN WordPress component

CVE-2026-42640

MEDIUM CVSS 6.5 2026-06-15

Risk Score

Open Full Technical Breakdown

Threat Entry Updated 2026-06-17

CVE-2026-42651 - WordPress component

Subscriber Broken Access Control in Classified Listing

UNKNOWN WordPress component

CVE-2026-42651

MEDIUM CVSS 6.3 2026-06-15

Risk Score

Open Full Technical Breakdown

Threat Entry Updated 2026-06-17

CVE-2026-42381 - WordPress component

Unauthenticated SQL Injection in Funnel Builder by FunnelKit

UNKNOWN WordPress component

CVE-2026-42381

CRITICAL CVSS 9.3 2026-06-15

Risk Score

Open Full Technical Breakdown

Threat Entry Updated 2026-06-17

CVE-2026-42378 - WordPress component

Subscriber Broken Authentication in WP Full Stripe Free

UNKNOWN WordPress component

CVE-2026-42378

MEDIUM CVSS 6.5 2026-06-15

Risk Score

Open Full Technical Breakdown