sales@hackhalt.com
Free Download

Live Vulnerability Intelligence

Threat Database

Search CVEs, inspect descriptions, and open detail pages with AI-assisted technical context.

Total40,783
Critical3,170
High11,980
Medium25,054
Reset
Showing 1561-1580 of 40783 records
Threat Entry Updated 2026-10-10

Bookly Responsive Appointment Booking Tool - Security Vulnerability (CVE-2026-104898)

The Online Scheduling and Appointment Booking System – Bookly plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 28.4 via the 'id, wp_user_id' parameter due to missing validation on a user controlled key. This makes it possible for authenticated attackers, with subscriber-level access and above, to overwrite the WordPress account binding of any Bookly staff record, including those owned by administrators, effectively hijacking a higher-privileged staff member's account association and escalating privileges. Exploitation requires the attacking user to be linked to at…

PLUGIN Bookly Responsive Appointment Booking Tool

CVE-2026-104898

MEDIUM CVSS 6.8 2026-10-10
Open Full Technical Breakdown
Threat Entry Updated 2026-10-10

Bookly Responsive Appointment Booking Tool - Security Vulnerability (CVE-2026-103365)

The Bookly – Online Scheduling and Appointment Booking System plugin for WordPress is vulnerable to Sensitive Information Exposure in versions up to, and including, 28.4 via the classic booking form's Details step. The endpoint bookly_render_details is registered for both wp_ajax and wp_ajax_nopriv, the module overrides csrfTokenValid() to always return true, and Bookly\Frontend\Components\Booking\InfoText::getCodes() calls UserBookingData::getCustomer() to load the persisted Customer entity keyed solely by the attacker-supplied phone (or email) with no invocation of the plugin's own customerIdentityConfirmed() predicate. When a site owner has placed the supported {client_name}, {client_email}, {client_phone}, or {client_note}…

PLUGIN Bookly Responsive Appointment Booking Tool

CVE-2026-103365

MEDIUM CVSS 5.3 2026-10-10
Open Full Technical Breakdown
Threat Entry Updated 2026-10-11

Advanced Classifieds And Directory Pro - Security Vulnerability (CVE-2026-93883)

The Advanced Classifieds & Directory Pro plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'phone' parameter in all versions up to, and including, 3.4.4 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with custom-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. This vulnerability is only exploitable on sites where the 'Force Bootstrap' miscellaneous setting (acadp_misc_settings['force_bootstrap']) is enabled and the 'ACADP Listing Address' widget is placed on a…

PLUGIN Advanced Classifieds And Directory Pro

CVE-2026-93883

MEDIUM CVSS 6.4 2026-10-10
Open Full Technical Breakdown
Threat Entry Updated 2026-10-10

Academy - Security Vulnerability (CVE-2026-104915)

The Academy LMS – AI Course Builder, Quizzes, Certificates & eLearning plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 4.0.3. This is due to the plugin not properly verifying that a user is authorized to perform an action. This makes it possible for authenticated attackers, with custom-level access and above, to permanently delete arbitrary Academy lesson comments and their replies authored by any user, including administrators, across courses they do not instruct. This is exploitable by any user registered as an Academy instructor…

PLUGIN Academy

CVE-2026-104915

MEDIUM CVSS 6.5 2026-10-10
Open Full Technical Breakdown
Threat Entry Updated 2026-10-10

Academy - Security Vulnerability (CVE-2026-104022)

The Academy LMS – AI Course Builder, Quizzes, Certificates & eLearning plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 4.0.3. This is due to the `add_child()` function calling `add_role('academy_student')` on any existing account resolved from the attacker-supplied `email` parameter before `Store::link()` validates the guardian-ward relationship, and failing to roll back that role write when `Store::link()` returns a `WP_Error`. This makes it possible for authenticated attackers with the `academy_guardian` role or higher to elevate any existing WordPress account — including their own — to…

PLUGIN Academy

CVE-2026-104022

MEDIUM CVSS 5.4 2026-10-10
Open Full Technical Breakdown
Threat Entry Updated 2026-10-11

Fv Wordpress Flowplayer - Security Vulnerability (CVE-2026-42695)

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in FolioVision FV Flowplayer Video Player fv-wordpress-flowplayer allows Stored XSS.This issue affects FV Flowplayer Video Player: from n/a through 7.5.54.7212.

PLUGIN Fv Wordpress Flowplayer

CVE-2026-42695

MEDIUM CVSS 6.5 2026-10-09
Open Full Technical Breakdown
Threat Entry Updated 2026-10-09

Thevoux Wp - Security Vulnerability (CVE-2026-94067)

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Fuelthemes The Voux thevoux-wp allows PHP Local File Inclusion.This issue affects The Voux: from n/a through 6.9.5.

THEME Thevoux Wp

CVE-2026-94067

HIGH CVSS 8.1 2026-10-09
Open Full Technical Breakdown
Threat Entry Updated 2026-10-09

Education - Security Vulnerability (CVE-2026-94063)

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in ThemeREX Education Center education allows Reflected XSS.This issue affects Education Center: from n/a through 3.6.12.

THEME Education

CVE-2026-94063

HIGH CVSS 7.1 2026-10-09
Open Full Technical Breakdown
Threat Entry Updated 2026-10-09

Werkstatt - Security Vulnerability (CVE-2026-94062)

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Fuelthemes Werkstatt werkstatt allows PHP Local File Inclusion.This issue affects Werkstatt: from n/a through 4.8.3.

THEME Werkstatt

CVE-2026-94062

HIGH CVSS 8.1 2026-10-09
Open Full Technical Breakdown
Threat Entry Updated 2026-10-11

Before After Image Compare - Security Vulnerability (CVE-2026-62028)

Missing Authorization vulnerability in bPlugins Before After Image Comparison – Image comparison for WP before-after-image-compare allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Before After Image Comparison – Image comparison for WP: from n/a through 1.1.21.

PLUGIN Before After Image Compare

CVE-2026-62028

MEDIUM CVSS 5.4 2026-10-09
Open Full Technical Breakdown

WordPress security that blocks attacks before they land.

sales@hackhalt.com

Product

Resources

Company

© Hack Halt Inc. All rights reserved.