Live Vulnerability Intelligence
Threat Database
Search CVEs, inspect descriptions, and open detail pages with AI-assisted technical context.
CVE-2026-39584 - WordPress component
Subscriber Broken Access Control in RepairBuddy
CVE-2026-39584
CVE-2026-39540 - WordPress component
Subscriber Cross Site Scripting (XSS) in Shipment Tracker for Woocommerce
CVE-2026-39540
CVE-2026-39530 - WordPress component
Unauthenticated SQL Injection in SpeakOut! Email Petitions
CVE-2026-39530
CVE-2026-39519 - WordPress component
Unauthenticated SQL Injection in GeekyBot
CVE-2026-39519
CVE-2026-39524 - WordPress component
Unauthenticated Broken Access Control in Masteriyo - LMS
CVE-2026-39524
CVE-2026-39518 - WordPress component
Subscriber Insecure Direct Object References (IDOR) in EventPrime
CVE-2026-39518
CVE-2026-39514 - WordPress component
Unauthenticated Cross Site Scripting (XSS) in Paid Member Subscriptions
CVE-2026-39514
CVE-2026-39525 - WordPress component
Unauthenticated Broken Access Control in Booking Activities
CVE-2026-39525
CVE-2026-39515 - WordPress component
Subscriber Broken Access Control in Motors < 1.4.107 versions.
CVE-2026-39515
CVE-2026-39527 - WordPress component
Subscriber Arbitrary File Upload in WpStream < 4.11.2 versions.
CVE-2026-39527
CVE-2026-39512 - WordPress component
Unauthenticated SQL Injection in GeoDirectory
CVE-2026-39512
CVE-2026-39511 - WordPress component
Unauthenticated SQL Injection in WP Photo Album Plus
CVE-2026-39511
CVE-2026-39502 - WordPress component
Unauthenticated SQL Injection in Form Maker by 10Web
CVE-2026-39502
CVE-2026-39513 - WordPress component
Unauthenticated Broken Access Control in Easy Appointments
CVE-2026-39513
CVE-2026-39503 - WordPress component
Unauthenticated Broken Access Control in Easy Digital Downloads
CVE-2026-39503
CVE-2026-39499 - WordPress component
Shop manager PHP Object Injection in Advanced Product Fields (Product Addons) for WooCommerce
CVE-2026-39499
CVE-2026-39498 - WordPress component
Shop manager PHP Object Injection in YayMail
CVE-2026-39498
CVE-2026-39507 - WordPress component
Unauthenticated Cross Site Scripting (XSS) in Social Slider Feed
CVE-2026-39507
CVE-2026-39493 - WordPress component
Unauthenticated SQL Injection in Simply Schedule Appointments
CVE-2026-39493
CVE-2026-39492 - WordPress component
Unauthenticated SQL Injection in WP Maps
CVE-2026-39492
