Threat Database (40,783)

Threat Entry Updated 2026-10-06

Front End Pm - Security Vulnerability (CVE-2026-39788)

Subscriber Cross Site Scripting (XSS) in Front End PM

PLUGIN Front End Pm

CVE-2026-39788

MEDIUM CVSS 6.5 2026-10-06

Risk Score

Open Full Technical Breakdown

Threat Entry Updated 2026-10-06

Wd Instagram Feed - Security Vulnerability (CVE-2026-39787)

Unauthenticated Broken Access Control in 10Web Social Photo Feed

PLUGIN Wd Instagram Feed

CVE-2026-39787

MEDIUM CVSS 6.5 2026-10-06

Risk Score

Open Full Technical Breakdown

Threat Entry Updated 2026-10-06

Mailjet For Wordpress - Security Vulnerability (CVE-2026-39791)

Unauthenticated Sensitive Data Exposure in Mailjet Email Marketing

PLUGIN Mailjet For Wordpress

CVE-2026-39791

MEDIUM CVSS 5.3 2026-10-06

Risk Score

Open Full Technical Breakdown

Threat Entry Updated 2026-10-06

Subscriber Privilege Escalation in JobZilla - Security Vulnerability (CVE-2026-39775)

Subscriber Privilege Escalation in JobZilla - Job Board WordPress Theme

THEME Subscriber Privilege Escalation in JobZilla

CVE-2026-39775

HIGH CVSS 8.8 2026-10-06

Risk Score

Open Full Technical Breakdown

Threat Entry Updated 2026-10-06

Tourfic Pro - Security Vulnerability (CVE-2026-39774)

Unauthenticated Privilege Escalation in Tourfic Pro

PLUGIN Tourfic Pro

CVE-2026-39774

HIGH CVSS 8.8 2026-10-06

Risk Score

Open Full Technical Breakdown

Threat Entry Updated 2026-10-06

Tabs Responsive - Security Vulnerability (CVE-2026-39776)

Editor Remote Code Execution (RCE) in Tabs

PLUGIN Tabs Responsive

CVE-2026-39776

HIGH CVSS 8.0 2026-10-06

Risk Score

Open Full Technical Breakdown

Threat Entry Updated 2026-10-06

Nd Booking - Security Vulnerability (CVE-2026-39784)

Unauthenticated Cross Site Scripting (XSS) in Hotel Booking

PLUGIN Nd Booking

CVE-2026-39784

HIGH CVSS 7.1 2026-10-06

Risk Score

Open Full Technical Breakdown

Threat Entry Updated 2026-10-15

Document Gallery - Security Vulnerability (CVE-2026-39781)

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Dan Rossiter Document Gallery document-gallery allows Reflected XSS.This issue affects Document Gallery: from n/a through 5.1.1.

PLUGIN Document Gallery

CVE-2026-39781

HIGH CVSS 7.1 2026-10-06

Risk Score

Open Full Technical Breakdown

Threat Entry Updated 2026-10-06

Youzify - Security Vulnerability (CVE-2026-39780)

Unauthenticated Cross Site Scripting (XSS) in Youzify

PLUGIN Youzify

CVE-2026-39780

HIGH CVSS 7.1 2026-10-06

Risk Score

Open Full Technical Breakdown

Threat Entry Updated 2026-10-06

Ansar Import - Security Vulnerability (CVE-2026-39778)

Unauthenticated Cross Site Scripting (XSS) in Ansar Import – One Click Starter Sites – for Elementor & Themes

PLUGIN Ansar Import

CVE-2026-39778

HIGH CVSS 7.1 2026-10-06

Risk Score

Open Full Technical Breakdown

Threat Entry Updated 2026-10-06

Doctreat Core - Security Vulnerability (CVE-2026-39773)

Unauthenticated Privilege Escalation in Doctreat Core

PLUGIN Doctreat Core

CVE-2026-39773

CRITICAL CVSS 10.0 2026-10-06

Risk Score

Open Full Technical Breakdown

Threat Entry Updated 2026-10-06

Doctreat - Security Vulnerability (CVE-2026-39770)

Unauthenticated Arbitrary File Upload in Doctreat

THEME Doctreat

CVE-2026-39770

CRITICAL CVSS 10.0 2026-10-06

Risk Score

Open Full Technical Breakdown

Threat Entry Updated 2026-10-06

Buddyboss Platform - Security Vulnerability (CVE-2026-39771)

Subscriber SQL Injection in Buddyboss Platform

PLUGIN Buddyboss Platform

CVE-2026-39771

HIGH CVSS 8.5 2026-10-06

Risk Score

Open Full Technical Breakdown

Threat Entry Updated 2026-10-06

Graphina Elementor Charts And Graphs - Security Vulnerability (CVE-2026-39769)

Unauthenticated Broken Authentication in Graphina

PLUGIN Graphina Elementor Charts And Graphs

CVE-2026-39769

HIGH CVSS 7.5 2026-10-06

Risk Score

Open Full Technical Breakdown

Threat Entry Updated 2026-10-06

Captcha Bws - Security Vulnerability (CVE-2026-39772)

Unauthenticated Bypass Vulnerability in Captcha by BestWebSoft

PLUGIN Captcha Bws

CVE-2026-39772

MEDIUM CVSS 5.3 2026-10-06

Risk Score

Open Full Technical Breakdown

Threat Entry Updated 2026-10-06

Meta Box Aio - Security Vulnerability (CVE-2026-39761)

Unauthenticated Privilege Escalation in Meta Box AIO

PLUGIN Meta Box Aio

CVE-2026-39761

CRITICAL CVSS 9.8 2026-10-06

Risk Score

Open Full Technical Breakdown

Threat Entry Updated 2026-10-06

Radius Booking - Security Vulnerability (CVE-2026-39764)

Unauthenticated SQL Injection in Radius Booking — Booking Calendar for Appointments & Services

PLUGIN Radius Booking

CVE-2026-39764

CRITICAL CVSS 9.3 2026-10-06

Risk Score

Open Full Technical Breakdown

Threat Entry Updated 2026-10-06

Webappick Pdf Invoice For Woocommerce - Security Vulnerability (CVE-2026-39765)

Shop Manager Privilege Escalation in Challan

PLUGIN Webappick Pdf Invoice For Woocommerce

CVE-2026-39765

HIGH CVSS 7.2 2026-10-06

Risk Score

Open Full Technical Breakdown

Threat Entry Updated 2026-10-06

Arforms - Security Vulnerability (CVE-2026-39766)

Unauthenticated Cross Site Scripting (XSS) in ARForms

PLUGIN Arforms

CVE-2026-39766

HIGH CVSS 7.1 2026-10-06

Risk Score

Open Full Technical Breakdown

Threat Entry Updated 2026-10-06

Wpbase Cache - Security Vulnerability (CVE-2026-39767)

Subscriber Denial of Service Attack in WPBase Cache

PLUGIN Wpbase Cache

CVE-2026-39767

MEDIUM CVSS 6.5 2026-10-06

Risk Score

Open Full Technical Breakdown