Live Vulnerability Intelligence
Threat Database
Search CVEs, inspect descriptions, and open detail pages with AI-assisted technical context.
Threat Entry
Updated 2026-10-11
Cryptocurrency Payments Using Metamask For Woocommerce - Security Vulnerability (CVE-2026-107420)
Unauthenticated Bypass Vulnerability in Pay With MetaMask For WooCommerce – Cryptocurrency Payment Gateway
PLUGIN
Cryptocurrency Payments Using Metamask For Woocommerce
CVE-2026-107420
Risk Score
Threat Entry
Updated 2026-10-11
Woo Alidropship - Security Vulnerability (CVE-2026-103685)
Missing Authorization vulnerability in VillaTheme ALD – Dropshipping and Fulfillment for AliExpress and WooCommerce woo-alidropship allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects ALD – Dropshipping and Fulfillment for AliExpress and WooCommerce: from n/a through 2.2.4.
PLUGIN
Woo Alidropship
CVE-2026-103685
Risk Score
Threat Entry
Updated 2026-10-11
Forminator - Security Vulnerability (CVE-2026-96341)
Incorrect Privilege Assignment vulnerability in WPMU DEV Forminator forminator allows Privilege Escalation.This issue affects Forminator: from n/a through 1.57.3.
PLUGIN
Forminator
CVE-2026-96341
Risk Score
Threat Entry
Updated 2026-10-11
martfury allows Reflected XSS - Security Vulnerability (CVE-2026-57806)
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in drfuri Martfury - WooCommerce Marketplace WordPress Theme martfury allows Reflected XSS.This issue affects Martfury - WooCommerce Marketplace WordPress Theme: from n/a through 3.3.9.
THEME
martfury allows Reflected XSS
CVE-2026-57806
Risk Score
Threat Entry
Updated 2026-10-11
Sell Downloads - Security Vulnerability (CVE-2026-94590)
Improper Verification of Source of a Communication Channel vulnerability in CodePeople2 Sell Downloads sell-downloads allows Exploitation of Trusted Credentials.This issue affects Sell Downloads: from n/a through 1.2.3.
PLUGIN
Sell Downloads
CVE-2026-94590
Risk Score
Threat Entry
Updated 2026-10-11
Miniorange Otp Verification - Security Vulnerability (CVE-2026-106610)
Incorrect Privilege Assignment vulnerability in miniOrange miniorange otp verification miniorange-otp-verification allows Privilege Escalation.This issue affects miniorange otp verification: from n/a through 5.5.7.
PLUGIN
Miniorange Otp Verification
CVE-2026-106610
Risk Score
Threat Entry
Updated 2026-10-11
Buddypress Media - Security Vulnerability (CVE-2026-105892)
Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in rtCamp Inc. rtMedia for WordPress, BuddyPress and bbPress buddypress-media allows Path Traversal.This issue affects rtMedia for WordPress, BuddyPress and bbPress: from n/a through 4.7.13.
PLUGIN
Buddypress Media
CVE-2026-105892
Risk Score
Threat Entry
Updated 2026-10-11
Themestek Labtechco Extras - Security Vulnerability (CVE-2026-94160)
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in themeStek ThemeStek Extras for LabtechCO Theme themestek-labtechco-extras allows Reflected XSS.This issue affects ThemeStek Extras for LabtechCO Theme: from n/a through 8.4.
PLUGIN
Themestek Labtechco Extras
CVE-2026-94160
Risk Score
Threat Entry
Updated 2026-10-11
Tickera Event Ticketing System - Security Vulnerability (CVE-2026-105889)
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Tickera Tickera tickera-event-ticketing-system allows Blind SQL Injection.This issue affects Tickera: from n/a through 3.6.0.6.
PLUGIN
Tickera Event Ticketing System
CVE-2026-105889
Risk Score
Threat Entry
Updated 2026-10-11
Bayarcash Wc - Security Vulnerability (CVE-2026-106609)
Missing Authorization vulnerability in Web Impian Bayarcash WooCommerce bayarcash-wc allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Bayarcash WooCommerce: from n/a through 4.4.2.
PLUGIN
Bayarcash Wc
CVE-2026-106609
Risk Score
Threat Entry
Updated 2026-10-11
Woocommerce - Security Vulnerability (CVE-2026-106608)
Incorrect Privilege Assignment vulnerability in Automattic WooCommerce woocommerce allows Privilege Escalation.This issue affects WooCommerce: from 9.8.0 through 11.1.2.
PLUGIN
Woocommerce
CVE-2026-106608
Risk Score
Threat Entry
Updated 2026-10-11
Super Video Player - Security Vulnerability (CVE-2026-62044)
Deserialization of Untrusted Data vulnerability in bPlugins Super Video Player super-video-player allows Object Injection.This issue affects Super Video Player: from n/a through 1.8.13.
PLUGIN
Super Video Player
CVE-2026-62044
Risk Score
Threat Entry
Updated 2026-10-11
Affi Affiliate Marketing For Woo - Security Vulnerability (CVE-2026-104398)
Deserialization of Untrusted Data vulnerability in VillaTheme AFFI – Affiliate Marketing for WooCommerce affi-affiliate-marketing-for-woo allows Object Injection.This issue affects AFFI – Affiliate Marketing for WooCommerce: from n/a through 1.0.10.
PLUGIN
Affi Affiliate Marketing For Woo
CVE-2026-104398
Risk Score
Threat Entry
Updated 2026-10-11
Woo Thank You Page Customizer - Security Vulnerability (CVE-2026-103071)
Improper Control of Generation of Code ('Code Injection') vulnerability in VillaTheme Thank You Page Customizer for WooCommerce woo-thank-you-page-customizer allows Code Injection.This issue affects Thank You Page Customizer for WooCommerce: from n/a through 1.2.3.
PLUGIN
Woo Thank You Page Customizer
CVE-2026-103071
Risk Score
Threat Entry
Updated 2026-10-11
Gift4u Gift Cards All In One For Woo - Security Vulnerability (CVE-2026-103357)
Missing Authorization vulnerability in VillaTheme GIFT4U gift4u-gift-cards-all-in-one-for-woo allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects GIFT4U: from n/a through 1.1.3.
PLUGIN
Gift4u Gift Cards All In One For Woo
CVE-2026-103357
Risk Score
Threat Entry
Updated 2026-10-11
Tainacan - Security Vulnerability (CVE-2026-94676)
Deserialization of Untrusted Data vulnerability in Tainacan Community Tainacan tainacan allows Object Injection.This issue affects Tainacan: from n/a through 1.3.0.
PLUGIN
Tainacan
CVE-2026-94676
Risk Score
Threat Entry
Updated 2026-10-11
Wpadverts - Security Vulnerability (CVE-2026-97264)
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Greg Winiarski WPAdverts wpadverts allows Reflected XSS.This issue affects WPAdverts: from n/a through 2.3.4.
PLUGIN
Wpadverts
CVE-2026-97264
Risk Score
Threat Entry
Updated 2026-10-11
Wpadverts - Security Vulnerability (CVE-2026-97263)
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Greg Winiarski WPAdverts wpadverts allows Stored XSS.This issue affects WPAdverts: from n/a through 2.3.4.
PLUGIN
Wpadverts
CVE-2026-97263
Risk Score
Threat Entry
Updated 2026-10-11
Wp Rollback - Security Vulnerability (CVE-2026-66435)
Insertion of Sensitive Information Into Sent Data vulnerability in Devin Walker WP Rollback wp-rollback allows Retrieve Embedded Sensitive Data.This issue affects WP Rollback: from n/a through 3.1.2.
PLUGIN
Wp Rollback
CVE-2026-66435
Risk Score
Threat Entry
Updated 2026-10-11
Slider Wd - Security Vulnerability (CVE-2026-105885)
Deserialization of Untrusted Data vulnerability in 10Web Slider by 10Web slider-wd allows Object Injection.This issue affects Slider by 10Web: from n/a through 1.2.62.
PLUGIN
Slider Wd
CVE-2026-105885
Risk Score