Threat Entry Updated 2026-06-17

CVE-2026-41556 - WordPress component

Subscriber Cross Site Scripting (XSS) in ProfilePress

UNKNOWN WordPress component

CVE-2026-41556

MEDIUM CVSS 6.5 2026-06-15

Risk Score

Open Full Technical Breakdown

Threat Entry Updated 2026-06-17

CVE-2026-40798 - WordPress component

Unauthenticated SQL Injection in wpForo Forum

UNKNOWN WordPress component

CVE-2026-40798

CRITICAL CVSS 9.3 2026-06-15

Risk Score

Open Full Technical Breakdown

Threat Entry Updated 2026-06-17

CVE-2026-40796 - WordPress component

Subscriber Sensitive Data Exposure in WPPizza

UNKNOWN WordPress component

CVE-2026-40796

MEDIUM CVSS 6.5 2026-06-15

Risk Score

Open Full Technical Breakdown

Threat Entry Updated 2026-06-17

CVE-2026-40799 - WordPress component

Unauthenticated Broken Authentication in Simple Cloudflare Turnstile

UNKNOWN WordPress component

CVE-2026-40799

MEDIUM CVSS 5.3 2026-06-15

Risk Score

Open Full Technical Breakdown

Threat Entry Updated 2026-06-17

CVE-2026-40789 - WordPress component

Unauthenticated Sensitive Data Exposure in Amelia

UNKNOWN WordPress component

CVE-2026-40789

HIGH CVSS 7.5 2026-06-15

Risk Score

Open Full Technical Breakdown

Threat Entry Updated 2026-06-17

CVE-2026-40791 - WordPress component

Unauthenticated Cross Site Scripting (XSS) in WP Time Slots Booking Form

UNKNOWN WordPress component

CVE-2026-40791

HIGH CVSS 7.1 2026-06-15

Risk Score

Open Full Technical Breakdown

Threat Entry Updated 2026-06-17

CVE-2026-40788 - WordPress component

Subscriber Broken Access Control in ChatBot

UNKNOWN WordPress component

CVE-2026-40788

HIGH CVSS 7.1 2026-06-15

Risk Score

Open Full Technical Breakdown

Threat Entry Updated 2026-06-17

CVE-2026-40795 - WordPress component

Subscriber Broken Access Control in Amelia

UNKNOWN WordPress component

CVE-2026-40795

MEDIUM CVSS 6.5 2026-06-15

Risk Score

Open Full Technical Breakdown

Threat Entry Updated 2026-06-17

CVE-2026-40794 - WordPress component

Subscriber Broken Access Control in myCred

UNKNOWN WordPress component

CVE-2026-40794

MEDIUM CVSS 6.5 2026-06-15

Risk Score

Open Full Technical Breakdown

Threat Entry Updated 2026-06-17

CVE-2026-40793 - WordPress component

Subscriber Broken Access Control in Groundhogg < 4.4.1 versions.

UNKNOWN WordPress component

CVE-2026-40793

MEDIUM CVSS 6.5 2026-06-15

Risk Score

Open Full Technical Breakdown

Threat Entry Updated 2026-06-17

CVE-2026-40790 - WordPress component

Subscriber Sensitive Data Exposure in WP SMS

UNKNOWN WordPress component

CVE-2026-40790

MEDIUM CVSS 6.5 2026-06-15

Risk Score

Open Full Technical Breakdown

Threat Entry Updated 2026-06-17

CVE-2026-40792 - WordPress component

Subscriber Insecure Direct Object References (IDOR) in KiviCare

UNKNOWN WordPress component

CVE-2026-40792

MEDIUM CVSS 6.3 2026-06-15

Risk Score

Open Full Technical Breakdown

Threat Entry Updated 2026-06-17

CVE-2026-40779 - WordPress component

Contributor Arbitrary File Deletion in Link Library

UNKNOWN WordPress component

CVE-2026-40779

HIGH CVSS 7.7 2026-06-15

Risk Score

Open Full Technical Breakdown

Threat Entry Updated 2026-06-17

CVE-2026-40781 - WordPress component

Unauthenticated Broken Authentication in ReviewX

UNKNOWN WordPress component

CVE-2026-40781

HIGH CVSS 7.5 2026-06-15

Risk Score

Open Full Technical Breakdown

Threat Entry Updated 2026-06-17

CVE-2026-40776 - WordPress component

Unauthenticated Broken Access Control in WP Event SOlution

UNKNOWN WordPress component

CVE-2026-40776

HIGH CVSS 7.5 2026-06-15

Risk Score

Open Full Technical Breakdown

Threat Entry Updated 2026-06-17

CVE-2026-40774 - WordPress component

Unauthenticated Broken Access Control in Booking Package

UNKNOWN WordPress component

CVE-2026-40774

HIGH CVSS 7.5 2026-06-15

Risk Score

Open Full Technical Breakdown

Threat Entry Updated 2026-06-17

CVE-2026-40775 - WordPress component

Unauthenticated Broken Access Control in Royal MCP

UNKNOWN WordPress component

CVE-2026-40775

HIGH CVSS 7.3 2026-06-15

Risk Score

Open Full Technical Breakdown

Threat Entry Updated 2026-06-17

CVE-2026-40787 - WordPress component

Unauthenticated Cross Site Scripting (XSS) in Quiz And Survey Master

UNKNOWN WordPress component

CVE-2026-40787

HIGH CVSS 7.1 2026-06-15

Risk Score

Open Full Technical Breakdown

Threat Entry Updated 2026-06-17

CVE-2026-40785 - WordPress component

Subscriber Broken Authentication in AutomatorWP

UNKNOWN WordPress component

CVE-2026-40785

HIGH CVSS 7.1 2026-06-15

Risk Score

Open Full Technical Breakdown

Threat Entry Updated 2026-06-17

CVE-2026-40782 - WordPress component

Unauthenticated Broken Access Control in WPAdverts

UNKNOWN WordPress component

CVE-2026-40782

MEDIUM CVSS 6.5 2026-06-15

Risk Score

Open Full Technical Breakdown