Threat Database

Threat Entry Updated 2026-10-06

U Design Core - Security Vulnerability (CVE-2026-42416)

Subscriber SQL Injection in UDesign Core

PLUGIN U Design Core

CVE-2026-42416

HIGH CVSS 8.5 2026-10-06

Risk Score

Open Full Technical Breakdown

Threat Entry Updated 2026-10-06

Listingpro Plugin - Security Vulnerability (CVE-2026-42414)

Subscriber SQL Injection in ListingPro

PLUGIN Listingpro Plugin

CVE-2026-42414

HIGH CVSS 8.5 2026-10-06

Risk Score

Open Full Technical Breakdown

Threat Entry Updated 2026-10-06

Snapshotify - Security Vulnerability (CVE-2026-42413)

Unauthenticated Sensitive Data Exposure in Snapshotify – All-in-One Backup & Restore & Migrate

PLUGIN Snapshotify

CVE-2026-42413

HIGH CVSS 7.5 2026-10-06

Risk Score

Open Full Technical Breakdown

Threat Entry Updated 2026-10-06

Norvis Backup - Security Vulnerability (CVE-2026-41562)

Unauthenticated Sensitive Data Exposure in Norvis Backup

PLUGIN Norvis Backup

CVE-2026-41562

HIGH CVSS 7.5 2026-10-06

Risk Score

Open Full Technical Breakdown

Threat Entry Updated 2026-10-07

Social Rocket - Security Vulnerability (CVE-2026-42418)

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Socialrocket Social Rocket social-rocket allows Reflected XSS.This issue affects Social Rocket: from n/a through 1.3.5.

PLUGIN Social Rocket

CVE-2026-42418

HIGH CVSS 7.1 2026-10-06

Risk Score

Open Full Technical Breakdown

Threat Entry Updated 2026-10-06

Newsletter Subscription Form - Security Vulnerability (CVE-2026-41555)

Unauthenticated SQL Injection in Newsletter Subscription Form – User Subscriptions Form, Capture Email

PLUGIN Newsletter Subscription Form

CVE-2026-41555

CRITICAL CVSS 9.3 2026-10-06

Risk Score

Open Full Technical Breakdown

Threat Entry Updated 2026-10-06

Museder Restoreone - Security Vulnerability (CVE-2026-41561)

Unauthenticated Sensitive Data Exposure in Museder RestoreOne

PLUGIN Museder Restoreone

CVE-2026-41561

HIGH CVSS 7.5 2026-10-06

Risk Score

Open Full Technical Breakdown

Threat Entry Updated 2026-10-06

Wxd Backup Lite - Security Vulnerability (CVE-2026-41560)

Unauthenticated Broken Access Control in WXD Backup Lite

PLUGIN Wxd Backup Lite

CVE-2026-41560

HIGH CVSS 7.5 2026-10-06

Risk Score

Open Full Technical Breakdown

Threat Entry Updated 2026-10-06

Safesnap - Security Vulnerability (CVE-2026-41559)

Unauthenticated Sensitive Data Exposure in SafeSnap – Verified WordPress Backup & Restore

PLUGIN Safesnap

CVE-2026-41559

HIGH CVSS 7.5 2026-10-06

Risk Score

Open Full Technical Breakdown

Threat Entry Updated 2026-10-06

Cf7 Views - Security Vulnerability (CVE-2026-40807)

Unauthenticated Cross Site Scripting (XSS) in CF7 Views – Complete Entry Management for Contact Form 7

PLUGIN Cf7 Views

CVE-2026-40807

HIGH CVSS 7.1 2026-10-06

Risk Score

Open Full Technical Breakdown

Threat Entry Updated 2026-10-06

Blog Posts And Category For Elementor - Security Vulnerability (CVE-2026-40806)

Unauthenticated Cross Site Scripting (XSS) in Blog, Posts and Category Filter for Elementor

PLUGIN Blog Posts And Category For Elementor

CVE-2026-40806

HIGH CVSS 7.1 2026-10-06

Risk Score

Open Full Technical Breakdown

Threat Entry Updated 2026-10-06

Gdpr Framework - Security Vulnerability (CVE-2026-39797)

Unauthenticated PHP Object Injection in GDPR Framework By Data443

PLUGIN Gdpr Framework

CVE-2026-39797

CRITICAL CVSS 9.8 2026-10-06

Risk Score

Open Full Technical Breakdown

Threat Entry Updated 2026-10-06

Sendpress - Security Vulnerability (CVE-2026-39795)

Unauthenticated SQL Injection in SendPress Newsletters

PLUGIN Sendpress

CVE-2026-39795

CRITICAL CVSS 9.3 2026-10-06

Risk Score

Open Full Technical Breakdown

Threat Entry Updated 2026-10-06

Simple Jwt Login - Security Vulnerability (CVE-2026-39793)

Subscriber Broken Authentication in Simple JWT Login 4.0.0 versions.

PLUGIN Simple Jwt Login

CVE-2026-39793

HIGH CVSS 8.8 2026-10-06

Risk Score

Open Full Technical Breakdown

Threat Entry Updated 2026-10-06

Simple File List - Security Vulnerability (CVE-2026-39792)

Unauthenticated Arbitrary File Deletion in Simple File List

PLUGIN Simple File List

CVE-2026-39792

HIGH CVSS 8.6 2026-10-06

Risk Score

Open Full Technical Breakdown

Threat Entry Updated 2026-10-06

Advanced Posts Listing - Security Vulnerability (CVE-2026-39796)

Unauthenticated Broken Access Control in Advanced Posts Listing – Show Post List Easily

PLUGIN Advanced Posts Listing

CVE-2026-39796

HIGH CVSS 7.5 2026-10-06

Risk Score

Open Full Technical Breakdown

Threat Entry Updated 2026-10-06

Wcfm Marketplace Rest Api - Security Vulnerability (CVE-2026-39794)

Unauthenticated Broken Access Control in WooCommerce Multivendor Marketplace – REST API

PLUGIN Wcfm Marketplace Rest Api

CVE-2026-39794

HIGH CVSS 7.5 2026-10-06

Risk Score

Open Full Technical Breakdown

Threat Entry Updated 2026-10-06

Truebooker Appointment Booking - Security Vulnerability (CVE-2026-39798)

Unauthenticated Settings Change in TrueBooker

PLUGIN Truebooker Appointment Booking

CVE-2026-39798

MEDIUM CVSS 6.5 2026-10-06

Risk Score

Open Full Technical Breakdown

Threat Entry Updated 2026-10-13

Grand Media - Security Vulnerability (CVE-2026-39785)

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Serhii Pasyuk Gmedia Photo Gallery grand-media allows Blind SQL Injection.This issue affects Gmedia Photo Gallery: from n/a through 1.25.1.

PLUGIN Grand Media

CVE-2026-39785

CRITICAL CVSS 9.3 2026-10-06

Risk Score

Open Full Technical Breakdown

Threat Entry Updated 2026-10-08

Vikrentcar - Security Vulnerability (CVE-2026-39790)

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in e4jvikwp VikRentCar vikrentcar allows Reflected XSS.This issue affects VikRentCar: from n/a through 1.4.7.

PLUGIN Vikrentcar

CVE-2026-39790

HIGH CVSS 7.1 2026-10-06

Risk Score

Open Full Technical Breakdown