Threat Database (40,783)

Threat Entry Updated 2026-10-11

Fv Player - Security Vulnerability (CVE-2026-42699)

Unauthenticated Cross Site Scripting (XSS) in FV Player 8

PLUGIN Fv Player

CVE-2026-42699

HIGH CVSS 7.1 2026-10-10

Risk Score

Open Full Technical Breakdown

Threat Entry Updated 2026-10-11

Ultimate Social Media Plus - Security Vulnerability (CVE-2026-42697)

Unauthenticated Cross Site Scripting (XSS) in Social Share Icons & Social Share Buttons

PLUGIN Ultimate Social Media Plus

CVE-2026-42697

HIGH CVSS 7.1 2026-10-10

Risk Score

Open Full Technical Breakdown

Threat Entry Updated 2026-10-29

Jannah - Security Vulnerability (CVE-2026-42693)

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in TieLabs Jannah jannah allows Reflected XSS.This issue affects Jannah: from n/a before 7.6.8.

PLUGIN Jannah

CVE-2026-42693

HIGH CVSS 7.1 2026-10-10

Risk Score

Open Full Technical Breakdown

Threat Entry Updated 2026-10-11

Peepso - Security Vulnerability (CVE-2026-40805)

Subscriber Arbitrary File Deletion in PeepSo

PLUGIN Peepso

CVE-2026-40805

HIGH CVSS 7.7 2026-10-10

Risk Score

Open Full Technical Breakdown

Threat Entry Updated 2026-11-06

Pubjet | پاب‌جت - Security Vulnerability (CVE-2026-40802)

Missing Authorization vulnerability in pubjet Pubjet | پاب‌جت pubjet allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Pubjet | پاب‌جت: from n/a through 5.4.8.

PLUGIN Pubjet | پاب‌جت

CVE-2026-40802

HIGH CVSS 7.6 2026-10-10

Risk Score

Open Full Technical Breakdown

Threat Entry Updated 2026-10-11

Web Plura Backup Restore Manager - Security Vulnerability (CVE-2026-42630)

Unauthenticated Sensitive Data Exposure in Web Plura Backup & Restore Manager

PLUGIN Web Plura Backup Restore Manager

CVE-2026-42630

HIGH CVSS 7.5 2026-10-10

Risk Score

Open Full Technical Breakdown

Threat Entry Updated 2026-10-11

Qode Real Estate - Security Vulnerability (CVE-2026-42632)

Unauthenticated Cross Site Scripting (XSS) in Qode Real Estate

PLUGIN Qode Real Estate

CVE-2026-42632

HIGH CVSS 7.1 2026-10-10

Risk Score

Open Full Technical Breakdown

Threat Entry Updated 2026-10-11

Qode Music - Security Vulnerability (CVE-2026-42631)

Unauthenticated Cross Site Scripting (XSS) in Qode Music

PLUGIN Qode Music

CVE-2026-42631

HIGH CVSS 7.1 2026-10-10

Risk Score

Open Full Technical Breakdown

Threat Entry Updated 2026-10-11

Jotform Ai Chatbot - Security Vulnerability (CVE-2026-40803)

Unauthenticated Cross Site Scripting (XSS) in Jotform – AI Chatbot

PLUGIN Jotform Ai Chatbot

CVE-2026-40803

HIGH CVSS 7.1 2026-10-10

Risk Score

Open Full Technical Breakdown

Threat Entry Updated 2026-10-11

Jetpack Videopress - Security Vulnerability (CVE-2026-40808)

Subscriber Broken Access Control in Jetpack VideoPress

PLUGIN Jetpack Videopress

CVE-2026-40808

MEDIUM CVSS 6.5 2026-10-10

Risk Score

Open Full Technical Breakdown

Threat Entry Updated 2026-10-11

Swish Migrate And Backup - Security Vulnerability (CVE-2026-42419)

Unauthenticated Sensitive Data Exposure in Swish Migrate and Backup

PLUGIN Swish Migrate And Backup

CVE-2026-42419

MEDIUM CVSS 5.9 2026-10-10

Risk Score

Open Full Technical Breakdown

Threat Entry Updated 2026-10-11

Ai Copilot Content Generator - Security Vulnerability (CVE-2026-39801)

Subscriber Privilege Escalation in AIWU

PLUGIN Ai Copilot Content Generator

CVE-2026-39801

CRITICAL CVSS 9.8 2026-10-10

Risk Score

Open Full Technical Breakdown

Threat Entry Updated 2026-10-11

Elex Bulk Edit Products Prices Attributes For Woocommerce Basic - Security Vulnerability (CVE-2026-40800)

Subscriber SQL Injection in ELEX WooCommerce Advanced Bulk Edit Products, Prices & Attributes

PLUGIN Elex Bulk Edit Products Prices Attributes For Woocommerce Basic

CVE-2026-40800

CRITICAL CVSS 9.3 2026-10-10

Risk Score

Open Full Technical Breakdown

Threat Entry Updated 2026-10-11

Wordable - Security Vulnerability (CVE-2026-40801)

Subscriber Broken Access Control in Wordable

PLUGIN Wordable

CVE-2026-40801

HIGH CVSS 8.1 2026-10-10

Risk Score

Open Full Technical Breakdown

Threat Entry Updated 2026-10-11

Wpsection - Security Vulnerability (CVE-2026-40777)

Subscriber Broken Access Control in WPSection

PLUGIN Wpsection

CVE-2026-40777

HIGH CVSS 8.1 2026-10-10

Risk Score

Open Full Technical Breakdown

Threat Entry Updated 2026-10-11

Everest Backup - Security Vulnerability (CVE-2026-39802)

Unauthenticated Remote Code Execution (RCE) in Everest Backup

PLUGIN Everest Backup

CVE-2026-39802

HIGH CVSS 8.1 2026-10-10

Risk Score

Open Full Technical Breakdown

Threat Entry Updated 2026-10-11

Builderius - Security Vulnerability (CVE-2026-27350)

Server-Side Request Forgery (SSRF) vulnerability in Builderius.io Builderius allows Server Side Request Forgery. This issue affects Builderius: from 1.4 through 1.4-beta.

PLUGIN Builderius

CVE-2026-27350

HIGH CVSS 7.2 2026-10-10

Risk Score

Open Full Technical Breakdown

Threat Entry Updated 2026-10-11

Additional Order Filters For Woocommerce - Security Vulnerability (CVE-2026-39800)

Unauthenticated Cross Site Scripting (XSS) in Additional Order Filters for WooCommerce

PLUGIN Additional Order Filters For Woocommerce

CVE-2026-39800

HIGH CVSS 7.1 2026-10-10

Risk Score

Open Full Technical Breakdown

Threat Entry Updated 2026-10-11

Wp File Download - Security Vulnerability (CVE-2026-39799)

Unauthenticated Cross Site Scripting (XSS) in WP File Download

PLUGIN Wp File Download

CVE-2026-39799

HIGH CVSS 7.1 2026-10-10

Risk Score

Open Full Technical Breakdown

Threat Entry Updated 2026-10-11

Paid Membership - Security Vulnerability (CVE-2026-107434)

Subscriber Bypass Vulnerability in MicroPayments

PLUGIN Paid Membership

CVE-2026-107434

MEDIUM CVSS 5.4 2026-10-10

Risk Score

Open Full Technical Breakdown