Live Vulnerability Intelligence
Threat Database
Search CVEs, inspect descriptions, and open detail pages with AI-assisted technical context.
Threat Entry
Updated 2026-07-13
CVE-2026-61952 - WooCommerce Bulk Edit Products – WP Sheet Editor Plugin
Missing Authorization vulnerability in Jose Vega WooCommerce Bulk Edit Products – WP Sheet Editor woo-bulk-edit-products allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WooCommerce Bulk Edit Products – WP Sheet Editor: from n/a through
PLUGIN
WooCommerce Bulk Edit Products – WP Sheet Editor
CVE-2026-61952
Risk Score
Threat Entry
Updated 2026-07-13
CVE-2026-57811 - Realtyna Organic IDX plugin
Improper Control of Generation of Code ('Code Injection') vulnerability in Realtyna Realtyna Organic IDX plugin real-estate-listing-realtyna-wpl allows Remote Code Inclusion.This issue affects Realtyna Organic IDX plugin: from n/a through
PLUGIN
Realtyna Organic IDX plugin
CVE-2026-57811
Risk Score
Threat Entry
Updated 2026-07-13
CVE-2026-59518 - Directorist Plugin
Deserialization of Untrusted Data vulnerability in wpWax Directorist directorist allows Object Injection.This issue affects Directorist: from n/a through
PLUGIN
Directorist
CVE-2026-59518
Risk Score
Threat Entry
Updated 2026-07-13
CVE-2026-57813 - MailOptin Plugin
Incorrect Privilege Assignment vulnerability in properfraction MailOptin mailoptin allows Privilege Escalation.This issue affects MailOptin: from n/a through
PLUGIN
MailOptin
CVE-2026-57813
Risk Score
Threat Entry
Updated 2026-07-13
CVE-2026-59515 - AIWU Plugin
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Sergey AIWU ai-copilot-content-generator allows Blind SQL Injection.This issue affects AIWU: from n/a through
PLUGIN
AIWU
CVE-2026-59515
Risk Score
Threat Entry
Updated 2026-07-13
CVE-2026-57815 - Forminator Plugin
Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in WPMU DEV - Your All-in-One WordPress Platform Forminator forminator allows Path Traversal.This issue affects Forminator: from n/a through
PLUGIN
Forminator
CVE-2026-57815
Risk Score
Threat Entry
Updated 2026-07-13
CVE-2026-59516 - ICS Calendar Plugin
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Room 34 Creative Services, LLC ICS Calendar ics-calendar allows Reflected XSS.This issue affects ICS Calendar: from n/a through
PLUGIN
ICS Calendar
CVE-2026-59516
Risk Score
Threat Entry
Updated 2026-07-13
CVE-2026-57816 - Funnel Builder by FunnelKit Plugin
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in FunnelKit Funnel Builder by FunnelKit funnel-builder allows Reflected XSS.This issue affects Funnel Builder by FunnelKit: from n/a through
PLUGIN
Funnel Builder by FunnelKit
CVE-2026-57816
Risk Score
Threat Entry
Updated 2026-07-13
CVE-2026-57814 - Forminator Plugin
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WPMU DEV - Your All-in-One WordPress Platform Forminator forminator allows DOM-Based XSS.This issue affects Forminator: from n/a through
PLUGIN
Forminator
CVE-2026-57814
Risk Score
Threat Entry
Updated 2026-07-13
CVE-2026-57812 - Simply Schedule Appointments Plugin
Missing Authorization vulnerability in NSquared Simply Schedule Appointments simply-schedule-appointments allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Simply Schedule Appointments: from n/a through
PLUGIN
Simply Schedule Appointments
CVE-2026-57812
Risk Score
Threat Entry
Updated 2026-07-13
CVE-2026-57810 - APIExperts Square for WooCommerce Plugin
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Saad Iqbal APIExperts Square for WooCommerce woosquare allows Blind SQL Injection.This issue affects APIExperts Square for WooCommerce: from n/a through
PLUGIN
APIExperts Square for WooCommerce
CVE-2026-57810
Risk Score
Threat Entry
Updated 2026-07-13
CVE-2026-57805 - Tonda Plugin
Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Select-Themes Tonda tonda allows PHP Local File Inclusion.This issue affects Tonda: from n/a through
PLUGIN
Tonda
CVE-2026-57805
Risk Score
Threat Entry
Updated 2026-07-13
CVE-2026-57804 - Elementor Plugin
Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in CodexThemes TheGem Theme Elements (for Elementor) thegem-elements-elementor allows PHP Local File Inclusion.This issue affects TheGem Theme Elements (for Elementor): from n/a through
PLUGIN
Elementor
CVE-2026-57804
Risk Score
Threat Entry
Updated 2026-07-13
CVE-2026-57803 - Struktur Core Plugin
Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Select-Themes Struktur Core struktur-core allows PHP Local File Inclusion.This issue affects Struktur Core: from n/a through
PLUGIN
Struktur Core
CVE-2026-57803
Risk Score
Threat Entry
Updated 2026-07-13
CVE-2026-57802 - Struktur Plugin
Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Select-Themes Struktur struktur allows PHP Local File Inclusion.This issue affects Struktur: from n/a through
PLUGIN
Struktur
CVE-2026-57802
Risk Score
Threat Entry
Updated 2026-07-13
CVE-2026-57801 - SetSail Plugin
Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Select-Themes SetSail setsail allows PHP Local File Inclusion.This issue affects SetSail: from n/a through
PLUGIN
SetSail
CVE-2026-57801
Risk Score
Threat Entry
Updated 2026-07-13
CVE-2026-57800 - Overworld Plugin
Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Edge-Themes Overworld overworld allows PHP Local File Inclusion.This issue affects Overworld: from n/a through
PLUGIN
Overworld
CVE-2026-57800
Risk Score
Threat Entry
Updated 2026-07-13
CVE-2026-57799 - Nuss Plugin
Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in uxper Nuss nuss allows PHP Local File Inclusion.This issue affects Nuss: from n/a through
PLUGIN
Nuss
CVE-2026-57799
Risk Score
Threat Entry
Updated 2026-07-13
CVE-2026-57798 - NewsPlus Shortcodes Plugin
Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in SaurabhSharma NewsPlus Shortcodes newsplus-shortcodes allows PHP Local File Inclusion.This issue affects NewsPlus Shortcodes: from n/a through
PLUGIN
NewsPlus Shortcodes
CVE-2026-57798
Risk Score
Threat Entry
Updated 2026-07-13
CVE-2026-57796 - Leedo Plugin
Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in VLThemes Leedo leedo allows PHP Local File Inclusion.This issue affects Leedo: from n/a through
PLUGIN
Leedo
CVE-2026-57796
Risk Score