Live Vulnerability Intelligence
Threat Database
Search CVEs, inspect descriptions, and open detail pages with AI-assisted technical context.
Threat Entry
Updated 2026-10-11
Woocommerce Products Filter - Security Vulnerability (CVE-2026-95608)
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in PluginUs.Net HUSKY woocommerce-products-filter allows Reflected XSS.This issue affects HUSKY: from n/a through 1.4.3.2.
PLUGIN
Woocommerce Products Filter
CVE-2026-95608
Risk Score
Threat Entry
Updated 2026-10-09
Wplms - Security Vulnerability (CVE-2026-95607)
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in VibeThemes WPLMS wplms allows Blind SQL Injection.This issue affects WPLMS : from n/a through 4.973.
THEME
Wplms
CVE-2026-95607
Risk Score
Threat Entry
Updated 2026-10-09
Taskbuilder - Security Vulnerability (CVE-2026-95599)
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Taskbuilder Taskbuilder taskbuilder allows Blind SQL Injection.This issue affects Taskbuilder: from n/a through 6.0.5.
PLUGIN
Taskbuilder
CVE-2026-95599
Risk Score
Threat Entry
Updated 2026-10-09
Search In Place - Security Vulnerability (CVE-2026-95598)
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in codepeople Search in Place search-in-place allows Reflected XSS.This issue affects Search in Place: from n/a through 1.5.5.
PLUGIN
Search In Place
CVE-2026-95598
Risk Score
Threat Entry
Updated 2026-10-11
Shopbuilder - Security Vulnerability (CVE-2026-95596)
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Mamunur Rashid ShopBuilder – Elementor WooCommerce Builder Addons shopbuilder allows Reflected XSS.This issue affects ShopBuilder – Elementor WooCommerce Builder Addons: from n/a through 3.4.1.
PLUGIN
Shopbuilder
CVE-2026-95596
Risk Score
Threat Entry
Updated 2026-10-09
Vikbooking - Security Vulnerability (CVE-2026-95591)
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in e4jvikwp VikBooking Hotel Booking Engine & PMS vikbooking allows Reflected XSS.This issue affects VikBooking Hotel Booking Engine & PMS: from n/a through 1.8.14.
PLUGIN
Vikbooking
CVE-2026-95591
Risk Score
Threat Entry
Updated 2026-10-11
Pgall For Woocommerce - Security Vulnerability (CVE-2026-95597)
Missing Authorization vulnerability in codemstory 워드프레스 결제 심플페이 pgall-for-woocommerce allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects 워드프레스 결제 심플페이: from n/a through 5.5.17.
PLUGIN
Pgall For Woocommerce
CVE-2026-95597
Risk Score
Threat Entry
Updated 2026-10-09
Advanced Partial Payment Or Deposit For Woocommerce - Security Vulnerability (CVE-2026-95589)
Missing Authorization vulnerability in Magepeople inc. Deposits and Partial Payments for WooCommerce advanced-partial-payment-or-deposit-for-woocommerce allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Deposits and Partial Payments for WooCommerce: from n/a through 4.0.1.
PLUGIN
Advanced Partial Payment Or Deposit For Woocommerce
CVE-2026-95589
Risk Score
Threat Entry
Updated 2026-10-09
Profilegrid User Profiles Groups And Communities - Security Vulnerability (CVE-2026-94663)
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Metagauss ProfileGrid profilegrid-user-profiles-groups-and-communities allows Blind SQL Injection.This issue affects ProfileGrid: from n/a through 6.0.0.2.
PLUGIN
Profilegrid User Profiles Groups And Communities
CVE-2026-94663
Risk Score
Threat Entry
Updated 2026-10-11
Generate Pdf Using Contact Form 7 - Security Vulnerability (CVE-2026-94666)
Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in ZealousWeb Generate PDF using Contact Form 7 generate-pdf-using-contact-form-7 allows Path Traversal.This issue affects Generate PDF using Contact Form 7: from n/a through 4.2.1.
PLUGIN
Generate Pdf Using Contact Form 7
CVE-2026-94666
Risk Score
Threat Entry
Updated 2026-10-09
Pdf For Contact Form 7 - Security Vulnerability (CVE-2026-94664)
Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in add-ons.org PDF for Contact Form 7 pdf-for-contact-form-7 allows Path Traversal.This issue affects PDF for Contact Form 7: from n/a through 7.1.0.
PLUGIN
Pdf For Contact Form 7
CVE-2026-94664
Risk Score
Threat Entry
Updated 2026-10-09
Salon Booking System - Security Vulnerability (CVE-2026-94668)
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Dimitri Grassi Salon booking system salon-booking-system allows Reflected XSS.This issue affects Salon booking system: from n/a through 10.31.5.
PLUGIN
Salon Booking System
CVE-2026-94668
Risk Score
Threat Entry
Updated 2026-10-11
Jet Blog - Security Vulnerability (CVE-2026-94661)
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Crocoblock JetBlog jet-blog allows Reflected XSS.This issue affects JetBlog: from n/a through 2.4.10.
PLUGIN
Jet Blog
CVE-2026-94661
Risk Score
Threat Entry
Updated 2026-10-11
Userswp - Security Vulnerability (CVE-2026-94641)
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Stiofan UsersWP userswp allows Reflected XSS.This issue affects UsersWP: from n/a through 1.2.73.
PLUGIN
Userswp
CVE-2026-94641
Risk Score
Threat Entry
Updated 2026-10-11
Jet Reviews - Security Vulnerability (CVE-2026-94667)
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Crocoblock JetReviews jet-reviews allows Stored XSS.This issue affects JetReviews: from n/a through 3.1.2.
PLUGIN
Jet Reviews
CVE-2026-94667
Risk Score
Threat Entry
Updated 2026-10-09
Classified Listing - Security Vulnerability (CVE-2026-94665)
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Mamunur Rashid Classified Listing classified-listing allows Stored XSS.This issue affects Classified Listing: from n/a through 6.1.2.
PLUGIN
Classified Listing
CVE-2026-94665
Risk Score
Threat Entry
Updated 2026-10-09
Zombify - Security Vulnerability (CVE-2026-94503)
Unrestricted Upload of File with Dangerous Type vulnerability in PX-lab Zombify zombify allows Upload a Web Shell to a Web Server.This issue affects Zombify: from n/a through 1.7.7.
PLUGIN
Zombify
CVE-2026-94503
Risk Score
Threat Entry
Updated 2026-10-09
Woo Vipps - Security Vulnerability (CVE-2026-94568)
Deserialization of Untrusted Data vulnerability in WP Hosting AS Pay with Vipps for WooCommerce woo-vipps allows Object Injection.This issue affects Pay with Vipps for WooCommerce: from n/a through 6.2.0.
PLUGIN
Woo Vipps
CVE-2026-94568
Risk Score
Threat Entry
Updated 2026-10-09
Blockstrap Page Builder Blocks - Security Vulnerability (CVE-2026-94632)
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Stiofan BlockStrap Page Builder - Bootstrap Blocks blockstrap-page-builder-blocks allows Reflected XSS.This issue affects BlockStrap Page Builder - Bootstrap Blocks: from n/a through 0.1.58.
PLUGIN
Blockstrap Page Builder Blocks
CVE-2026-94632
Risk Score
Threat Entry
Updated 2026-10-11
Betheme - Security Vulnerability (CVE-2026-94415)
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Muffingroup Betheme betheme allows Reflected XSS.This issue affects Betheme: from n/a through 28.5.8.
THEME
Betheme
CVE-2026-94415
Risk Score