Threat Entry Updated 2026-06-17

CVE-2026-49106 - Contact Form 7 Plugin

Unauthenticated PHP Object Injection in Integration for Contact Form 7 and Constant Contact

PLUGIN Contact Form 7

CVE-2026-49106

CRITICAL CVSS 9.8 2026-06-15

Risk Score

Open Full Technical Breakdown

Threat Entry Updated 2026-06-17

CVE-2026-49105 - Contact Form 7 Plugin

Unauthenticated PHP Object Injection in WP Zendesk for Contact Form 7, WPForms, Elementor, Formidable and Ninja Forms

PLUGIN Contact Form 7

CVE-2026-49105

CRITICAL CVSS 9.8 2026-06-15

Risk Score

Open Full Technical Breakdown

Threat Entry Updated 2026-06-17

CVE-2026-49104 - Contact Form 7 Plugin

Unauthenticated PHP Object Injection in Integration for Keap/infusionsoft and Contact Form 7, WPForms, Elementor, Formidable, Ninja Forms

PLUGIN Contact Form 7

CVE-2026-49104

CRITICAL CVSS 9.8 2026-06-15

Risk Score

Open Full Technical Breakdown

Threat Entry Updated 2026-06-17

CVE-2026-49085 - Contact Form 7 Plugin

Unauthenticated PHP Object Injection in WP Insightly for Contact Form 7, WPForms, Elementor, Formidable and Ninja Forms

PLUGIN Contact Form 7

CVE-2026-49085

CRITICAL CVSS 9.8 2026-06-15

Risk Score

Open Full Technical Breakdown

Threat Entry Updated 2026-06-17

CVE-2026-49112 - WordPress component

Unauthenticated Path Traversal in Shared Files

UNKNOWN WordPress component

CVE-2026-49112

HIGH CVSS 7.5 2026-06-15

Risk Score

Open Full Technical Breakdown

Threat Entry Updated 2026-06-17

CVE-2026-49110 - WordPress component

Unauthenticated Broken Authentication in Upsell Order Bump Offer for WooCommerce

UNKNOWN WordPress component

CVE-2026-49110

HIGH CVSS 7.5 2026-06-15

Risk Score

Open Full Technical Breakdown

Threat Entry Updated 2026-06-17

CVE-2026-49083 - WordPress component

Contributor Privilege Escalation in LatePoint

UNKNOWN WordPress component

CVE-2026-49083

HIGH CVSS 7.5 2026-06-15

Risk Score

Open Full Technical Breakdown

Threat Entry Updated 2026-06-17

CVE-2026-49082 - WordPress component

Subscriber Sensitive Data Exposure in Chatway Live Chat – AI Chatbot, Customer Support, FAQ & Helpdesk Customer Service & Chat Buttons

UNKNOWN WordPress component

CVE-2026-49082

HIGH CVSS 7.4 2026-06-15

Risk Score

Open Full Technical Breakdown

Threat Entry Updated 2026-06-17

CVE-2026-49067 - WordPress component

Unauthenticated SQL Injection in Advanced 301 and 302 Redirect

UNKNOWN WordPress component

CVE-2026-49067

CRITICAL CVSS 9.3 2026-06-15

Risk Score

Open Full Technical Breakdown

Threat Entry Updated 2026-06-17

CVE-2026-49065 - WordPress component

Unauthenticated Broken Access Control in Hippoo Mobile App for WooCommerce

UNKNOWN WordPress component

CVE-2026-49065

HIGH CVSS 8.2 2026-06-15

Risk Score

Open Full Technical Breakdown

Threat Entry Updated 2026-06-17

CVE-2026-49078 - WordPress component

Unauthenticated Other Vulnerability Type in WP Travel Engine

UNKNOWN WordPress component

CVE-2026-49078

HIGH CVSS 7.5 2026-06-15

Risk Score

Open Full Technical Breakdown

Threat Entry Updated 2026-06-17

CVE-2026-49070 - WordPress component

Unauthenticated Broken Access Control in Knit Pay

UNKNOWN WordPress component

CVE-2026-49070

HIGH CVSS 7.5 2026-06-15

Risk Score

Open Full Technical Breakdown

Threat Entry Updated 2026-06-17

CVE-2026-49068 - WordPress component

Subscriber Sensitive Data Exposure in Coupon Affiliates

UNKNOWN WordPress component

CVE-2026-49068

HIGH CVSS 7.5 2026-06-15

Risk Score

Open Full Technical Breakdown

Threat Entry Updated 2026-06-17

CVE-2026-49066 - WordPress component

Unauthenticated Sensitive Data Exposure in Conekta Payment Gateway

UNKNOWN WordPress component

CVE-2026-49066

HIGH CVSS 7.5 2026-06-15

Risk Score

Open Full Technical Breakdown

Threat Entry Updated 2026-06-17

CVE-2026-49061 - WordPress component

Unauthenticated Arbitrary File Download in WPC Product Options for WooCommerce

UNKNOWN WordPress component

CVE-2026-49061

HIGH CVSS 7.5 2026-06-15

Risk Score

Open Full Technical Breakdown

Threat Entry Updated 2026-06-17

CVE-2026-49063 - WordPress component

Unauthenticated Privilege Escalation in Listdom

UNKNOWN WordPress component

CVE-2026-49063

HIGH CVSS 7.3 2026-06-15

Risk Score

Open Full Technical Breakdown

Threat Entry Updated 2026-06-17

CVE-2026-48889 - WordPress component

Subscriber Privilege Escalation in Amelia

UNKNOWN WordPress component

CVE-2026-48889

HIGH CVSS 8.8 2026-06-15

Risk Score

Open Full Technical Breakdown

Threat Entry Updated 2026-06-17

CVE-2026-48964 - WordPress component

Subscriber SQL Injection in ELEX WordPress HelpDesk & Customer Ticketing System

UNKNOWN WordPress component

CVE-2026-48964

HIGH CVSS 8.5 2026-06-15

Risk Score

Open Full Technical Breakdown

Threat Entry Updated 2026-06-17

CVE-2026-48970 - WordPress component

Unauthenticated Broken Authentication in Really Simple SSL

UNKNOWN WordPress component

CVE-2026-48970

HIGH CVSS 8.1 2026-06-15

Risk Score

Open Full Technical Breakdown

Threat Entry Updated 2026-06-17

CVE-2026-49056 - WordPress component

Unauthenticated Sensitive Data Exposure in WooCommerce PDF Invoices, Packing Slips, Delivery Notes and Shipping Labels

UNKNOWN WordPress component

CVE-2026-49056

HIGH CVSS 7.5 2026-06-15

Risk Score

Open Full Technical Breakdown