Threat Entry Updated 2026-06-17

CVE-2026-40772 - WordPress component

Unauthenticated Arbitrary File Upload in GeekyBot

UNKNOWN WordPress component

CVE-2026-40772

CRITICAL CVSS 10.0 2026-06-15

Risk Score

Open Full Technical Breakdown

Threat Entry Updated 2026-06-17

CVE-2026-40771 - WordPress component

Unauthenticated SQL Injection in Contest Gallery

UNKNOWN WordPress component

CVE-2026-40771

CRITICAL CVSS 9.3 2026-06-15

Risk Score

Open Full Technical Breakdown

Threat Entry Updated 2026-06-17

CVE-2026-40769 - WordPress component

Unauthenticated Arbitrary File Deletion in Contact Form Extender for Divi – Save Entries, File Upload & Country Code Field

UNKNOWN WordPress component

CVE-2026-40769

HIGH CVSS 8.6 2026-06-15

Risk Score

Open Full Technical Breakdown

Threat Entry Updated 2026-06-17

CVE-2026-40766 - WordPress component

Subscriber SQL Injection in MasterStudy LMS

UNKNOWN WordPress component

CVE-2026-40766

HIGH CVSS 8.5 2026-06-15

Risk Score

Open Full Technical Breakdown

Threat Entry Updated 2026-06-17

CVE-2026-40767 - WordPress component

Unauthenticated Broken Access Control in wpForo Forum < 3.0.2 versions.

UNKNOWN WordPress component

CVE-2026-40767

HIGH CVSS 7.5 2026-06-15

Risk Score

Open Full Technical Breakdown

Threat Entry Updated 2026-06-17

CVE-2026-40762 - WordPress component

Unauthenticated SQL Injection in WPGraphQL < 2.11.1 versions.

UNKNOWN WordPress component

CVE-2026-40762

HIGH CVSS 7.5 2026-06-15

Risk Score

Open Full Technical Breakdown

Threat Entry Updated 2026-06-17

CVE-2026-40770 - WordPress component

Unauthenticated Cross Site Scripting (XSS) in Coupon Affiliates

UNKNOWN WordPress component

CVE-2026-40770

HIGH CVSS 7.1 2026-06-15

Risk Score

Open Full Technical Breakdown

Threat Entry Updated 2026-06-17

CVE-2026-40773 - WordPress Core

Subscriber Broken Access Control in rtMedia for WordPress, BuddyPress and bbPress

CORE WordPress Core

CVE-2026-40773

MEDIUM CVSS 6.5 2026-06-15

Risk Score

Open Full Technical Breakdown

Threat Entry Updated 2026-06-17

CVE-2026-40743 - WordPress component

Unauthenticated Broken Access Control in Tutor LMS

UNKNOWN WordPress component

CVE-2026-40743

MEDIUM CVSS 6.5 2026-06-15

Risk Score

Open Full Technical Breakdown

Threat Entry Updated 2026-06-17

CVE-2026-39591 - WordPress component

Subscriber Arbitrary File Upload in WP-BusinessDirectory

UNKNOWN WordPress component

CVE-2026-39591

CRITICAL CVSS 9.9 2026-06-15

Risk Score

Open Full Technical Breakdown

Threat Entry Updated 2026-06-17

CVE-2026-40727 - WordPress component

Sales Representative Arbitrary File Deletion in Groundhogg

UNKNOWN WordPress component

CVE-2026-40727

HIGH CVSS 7.7 2026-06-15

Risk Score

Open Full Technical Breakdown

Threat Entry Updated 2026-06-17

CVE-2026-40741 - WordPress component

Unauthenticated Broken Access Control in Redsys for WooCommerce Light

UNKNOWN WordPress component

CVE-2026-40741

HIGH CVSS 7.5 2026-06-15

Risk Score

Open Full Technical Breakdown

Threat Entry Updated 2026-06-17

CVE-2026-40732 - WordPress component

Unauthenticated Cross Site Scripting (XSS) in Notification for Telegram

UNKNOWN WordPress component

CVE-2026-40732

HIGH CVSS 7.1 2026-06-15

Risk Score

Open Full Technical Breakdown

Threat Entry Updated 2026-06-17

CVE-2026-39594 - WPForms Plugin

Subscriber Broken Access Control in Ultra Addons for WPForms

PLUGIN WPForms

CVE-2026-39594

MEDIUM CVSS 6.4 2026-06-15

Risk Score

Open Full Technical Breakdown

Threat Entry Updated 2026-06-17

CVE-2026-39583 - WordPress component

Unauthenticated Privilege Escalation in Datalogics Ecommerce Delivery

UNKNOWN WordPress component

CVE-2026-39583

CRITICAL CVSS 9.8 2026-06-15

Risk Score

Open Full Technical Breakdown

Threat Entry Updated 2026-06-17

CVE-2026-39579 - WordPress component

Contributor Privilege Escalation in B Blocks

UNKNOWN WordPress component

CVE-2026-39579

HIGH CVSS 8.8 2026-06-15

Risk Score

Open Full Technical Breakdown

Threat Entry Updated 2026-06-17

CVE-2026-39532 - WordPress component

Contributor PHP Object Injection in Events Calendar for GeoDirectory

UNKNOWN WordPress component

CVE-2026-39532

HIGH CVSS 8.8 2026-06-15

Risk Score

Open Full Technical Breakdown

Threat Entry Updated 2026-06-17

CVE-2026-39587 - WordPress component

Unauthenticated Privilege Escalation in WP BASE Booking

UNKNOWN WordPress component

CVE-2026-39587

HIGH CVSS 8.1 2026-06-15

Risk Score

Open Full Technical Breakdown

Threat Entry Updated 2026-06-17

CVE-2026-39534 - WordPress component

Unauthenticated Broken Access Control in WP Directory Kit

UNKNOWN WordPress component

CVE-2026-39534

HIGH CVSS 7.5 2026-06-15

Risk Score

Open Full Technical Breakdown

Threat Entry Updated 2026-06-17

CVE-2026-39533 - WordPress component

Unauthenticated Broken Access Control in AWP Classifieds

UNKNOWN WordPress component

CVE-2026-39533

HIGH CVSS 7.5 2026-06-15

Risk Score

Open Full Technical Breakdown