Live Vulnerability Intelligence
Threat Database
Search CVEs, inspect descriptions, and open detail pages with AI-assisted technical context.
Threat Entry
Updated 2026-10-11
Eduadmin Booking - Security Vulnerability (CVE-2026-96809)
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in MultiNet Interactive AB EduAdmin Booking eduadmin-booking allows Blind SQL Injection.This issue affects EduAdmin Booking: from n/a before 6.0.0.
PLUGIN
Eduadmin Booking
CVE-2026-96809
Risk Score
Threat Entry
Updated 2026-10-09
Featured Image From Url - Security Vulnerability (CVE-2026-96671)
Cross-Site Request Forgery (CSRF) vulnerability in fifu.app Featured Image from URL featured-image-from-url allows Cross Site Request Forgery.This issue affects Featured Image from URL: from n/a through 6.0.7.
PLUGIN
Featured Image From Url
CVE-2026-96671
Risk Score
Threat Entry
Updated 2026-10-09
Ameliabooking - Security Vulnerability (CVE-2026-96461)
Missing Authorization vulnerability in TMS Amelia ameliabooking allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Amelia: from n/a through 2.4.10.
PLUGIN
Ameliabooking
CVE-2026-96461
Risk Score
Threat Entry
Updated 2026-10-09
Usc E Shop - Security Vulnerability (CVE-2026-96761)
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Welcart Welcart e-Commerce usc-e-shop allows Reflected XSS.This issue affects Welcart e-Commerce: from n/a through 2.12.3.
PLUGIN
Usc E Shop
CVE-2026-96761
Risk Score
Threat Entry
Updated 2026-10-09
Nex Forms Express Wp Form Builder - Security Vulnerability (CVE-2026-96607)
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Basix NEX-Forms nex-forms-express-wp-form-builder allows Reflected XSS.This issue affects NEX-Forms: from n/a through 9.3.1.
PLUGIN
Nex Forms Express Wp Form Builder
CVE-2026-96607
Risk Score
Threat Entry
Updated 2026-10-11
Ajax Search For Woocommerce - Security Vulnerability (CVE-2026-96553)
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Damian Góra FiboSearch ajax-search-for-woocommerce allows Reflected XSS.This issue affects FiboSearch: from n/a through 1.34.1.
PLUGIN
Ajax Search For Woocommerce
CVE-2026-96553
Risk Score
Threat Entry
Updated 2026-10-09
Wp User Avatar - Security Vulnerability (CVE-2026-96518)
Missing Authorization vulnerability in properfraction ProfilePress wp-user-avatar allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects ProfilePress: from n/a through 4.17.3.
PLUGIN
Wp User Avatar
CVE-2026-96518
Risk Score
Threat Entry
Updated 2026-10-11
Ultimate Member - Security Vulnerability (CVE-2026-96539)
Incorrect Privilege Assignment vulnerability in Ultimate Member Ultimate Member ultimate-member allows Privilege Escalation.This issue affects Ultimate Member: from n/a through 2.13.1.
PLUGIN
Ultimate Member
CVE-2026-96539
Risk Score
Threat Entry
Updated 2026-10-09
Ajax Search Pro - Security Vulnerability (CVE-2026-96331)
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in wpdreams Ajax Search Pro ajax-search-pro allows Blind SQL Injection.This issue affects Ajax Search Pro: from n/a through 4.29.1.
PLUGIN
Ajax Search Pro
CVE-2026-96331
Risk Score
Threat Entry
Updated 2026-10-11
Forminator - Security Vulnerability (CVE-2026-96336)
Authentication Bypass by Spoofing vulnerability in WPMU DEV Forminator forminator allows Identity Spoofing.This issue affects Forminator: from n/a through 1.57.2.
PLUGIN
Forminator
CVE-2026-96336
Risk Score
Threat Entry
Updated 2026-10-09
Give - Security Vulnerability (CVE-2026-96333)
Authentication Bypass by Spoofing vulnerability in Liquid Web / StellarWP GiveWP give allows Identity Spoofing.This issue affects GiveWP: from n/a through 4.16.8.1.
PLUGIN
Give
CVE-2026-96333
Risk Score
Threat Entry
Updated 2026-10-09
Simple Payment - Security Vulnerability (CVE-2026-96332)
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in yalla ya! Simple Payment simple-payment allows Reflected XSS.This issue affects Simple Payment: from n/a through 2.5.4.
PLUGIN
Simple Payment
CVE-2026-96332
Risk Score
Threat Entry
Updated 2026-10-09
Wp User Avatar - Security Vulnerability (CVE-2026-96337)
Missing Authorization vulnerability in properfraction ProfilePress wp-user-avatar allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects ProfilePress: from n/a through 4.17.3.
PLUGIN
Wp User Avatar
CVE-2026-96337
Risk Score
Threat Entry
Updated 2026-10-11
User Registration - Security Vulnerability (CVE-2026-96334)
Missing Authorization vulnerability in ThemeGrill User Registration user-registration allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects User Registration: from n/a through 5.2.7.
PLUGIN
User Registration
CVE-2026-96334
Risk Score
Threat Entry
Updated 2026-10-11
Td Subscription - Security Vulnerability (CVE-2026-96330)
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in tagDiv tagDiv Opt-In Builder td-subscription allows Blind SQL Injection.This issue affects tagDiv Opt-In Builder: from n/a through 1.7.6.
PLUGIN
Td Subscription
CVE-2026-96330
Risk Score
Threat Entry
Updated 2026-10-09
Jnews Pay Writer - Security Vulnerability (CVE-2026-96328)
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in jegtheme JNews - Pay Writer jnews-pay-writer allows Blind SQL Injection.This issue affects JNews - Pay Writer: from n/a through 12.0.1.
PLUGIN
Jnews Pay Writer
CVE-2026-96328
Risk Score
Threat Entry
Updated 2026-10-09
WPLMS - Security Vulnerability (CVE-2026-96327)
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in VibeThemes WPLMS wplms_plugin allows Blind SQL Injection.This issue affects WPLMS: from n/a before 1.9.9.8.2.
PLUGIN
WPLMS
CVE-2026-96327
Risk Score
Threat Entry
Updated 2026-10-11
Td Subscription - Security Vulnerability (CVE-2026-96329)
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in tagDiv tagDiv Opt-In Builder td-subscription allows Blind SQL Injection.This issue affects tagDiv Opt-In Builder: from n/a through 1.7.6.
PLUGIN
Td Subscription
CVE-2026-96329
Risk Score
Threat Entry
Updated 2026-10-09
Us Core - Security Vulnerability (CVE-2026-95610)
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in UpSolution UpSolution Core us-core allows Blind SQL Injection.This issue affects UpSolution Core: from n/a through 9.3.
PLUGIN
Us Core
CVE-2026-95610
Risk Score
Threat Entry
Updated 2026-10-11
Media Library Assistant - Security Vulnerability (CVE-2026-95609)
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in David Lingren Media LIbrary Assistant media-library-assistant allows Stored XSS.This issue affects Media LIbrary Assistant: from n/a through 3.41.
PLUGIN
Media Library Assistant
CVE-2026-95609
Risk Score