Threat Database

Threat Entry Updated 2026-10-06

Autoship Cloud - Security Vulnerability (CVE-2026-39762)

Missing Authorization vulnerability in Patterns In The Cloud Autoship Cloud for WooCommerce Subscription Products autoship-cloud allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Autoship Cloud for WooCommerce Subscription Products: from n/a through 2.17.1.

PLUGIN Autoship Cloud

CVE-2026-39762

MEDIUM CVSS 6.5 2026-10-06

Risk Score

Open Full Technical Breakdown

Threat Entry Updated 2026-10-06

WordPress component - Security Vulnerability (CVE-2026-39759)

Employer / Sales Representative Arbitrary File Upload in Workreap Core

UNKNOWN WordPress component

CVE-2026-39759

CRITICAL CVSS 9.9 2026-10-06

Risk Score

Open Full Technical Breakdown

Threat Entry Updated 2026-10-06

Taskbot - Security Vulnerability (CVE-2026-39757)

Subscriber Arbitrary File Upload in Taskbot

PLUGIN Taskbot

CVE-2026-39757

CRITICAL CVSS 9.9 2026-10-06

Risk Score

Open Full Technical Breakdown

Threat Entry Updated 2026-10-06

WP Duplicate - Security Vulnerability (CVE-2026-39755)

Subscriber Arbitrary File Upload in WP Duplicate

PLUGIN WP Duplicate

CVE-2026-39755

CRITICAL CVSS 9.9 2026-10-06

Risk Score

Open Full Technical Breakdown

Threat Entry Updated 2026-10-06

Midtrans Woocommerce - Security Vulnerability (CVE-2026-39758)

Unauthenticated Cross Site Scripting (XSS) in Midtrans-WooCommerce

PLUGIN Midtrans Woocommerce

CVE-2026-39758

HIGH CVSS 7.1 2026-10-06

Risk Score

Open Full Technical Breakdown

Threat Entry Updated 2026-10-06

Wappointment - Security Vulnerability (CVE-2026-39756)

Unauthenticated Insecure Direct Object References (IDOR) in Wappointment

PLUGIN Wappointment

CVE-2026-39756

MEDIUM CVSS 6.5 2026-10-06

Risk Score

Open Full Technical Breakdown

Threat Entry Updated 2026-10-06

Piotnet Addons For Elementor - Security Vulnerability (CVE-2026-39754)

Contributor Arbitrary File Download in Piotnet Addons For Elementor

PLUGIN Piotnet Addons For Elementor

CVE-2026-39754

MEDIUM CVSS 6.5 2026-10-06

Risk Score

Open Full Technical Breakdown

Threat Entry Updated 2026-10-06

Taskbot - Security Vulnerability (CVE-2026-39753)

Unauthenticated Privilege Escalation in Taskbot

PLUGIN Taskbot

CVE-2026-39753

CRITICAL CVSS 9.8 2026-10-06

Risk Score

Open Full Technical Breakdown

Threat Entry Updated 2026-11-05

Woffice - Security Vulnerability (CVE-2026-39747)

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in WofficeIO Woffice woffice allows SQL Injection.This issue affects Woffice: from n/a before 5.4.43.

PLUGIN Woffice

CVE-2026-39747

HIGH CVSS 8.5 2026-10-06

Risk Score

Open Full Technical Breakdown

Threat Entry Updated 2026-10-06

Job Postings - Security Vulnerability (CVE-2026-39752)

Contributor Arbitrary File Deletion in Jobs for WordPress

PLUGIN Job Postings

CVE-2026-39752

HIGH CVSS 7.7 2026-10-06

Risk Score

Open Full Technical Breakdown

Threat Entry Updated 2026-10-06

Payplug - Security Vulnerability (CVE-2026-39751)

Unauthenticated Broken Access Control in PayPlug for WooCommerce (Official)

PLUGIN Payplug

CVE-2026-39751

HIGH CVSS 7.5 2026-10-06

Risk Score

Open Full Technical Breakdown

Threat Entry Updated 2026-10-06

Storegrowth Sales Booster - Security Vulnerability (CVE-2026-39750)

Unauthenticated Cross Site Scripting (XSS) in StoreGrowth: Smart Sales Booster for WooCommerce | BOGO, Upsells, Direct Checkout, Quick View, Side Cart

PLUGIN Storegrowth Sales Booster

CVE-2026-39750

HIGH CVSS 7.1 2026-10-06

Risk Score

Open Full Technical Breakdown

Threat Entry Updated 2026-10-06

Edumall - Security Vulnerability (CVE-2026-39748)

Unauthenticated Cross Site Scripting (XSS) in EduMall

THEME Edumall

CVE-2026-39748

HIGH CVSS 7.1 2026-10-06

Risk Score

Open Full Technical Breakdown

Threat Entry Updated 2026-10-06

App For Cf - Security Vulnerability (CVE-2026-39749)

Subscriber Broken Access Control in App for Cloudflare®

PLUGIN App For Cf

CVE-2026-39749

MEDIUM CVSS 6.5 2026-10-06

Risk Score

Open Full Technical Breakdown

Threat Entry Updated 2026-10-29

Booknetic - Security Vulnerability (CVE-2026-39746)

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Booknetic Booknetic booknetic allows Blind SQL Injection.This issue affects Booknetic: from n/a before 5.10.3.

PLUGIN Booknetic

CVE-2026-39746

CRITICAL CVSS 9.3 2026-10-06

Risk Score

Open Full Technical Breakdown

Threat Entry Updated 2026-10-06

Edwiser Bridge - Security Vulnerability (CVE-2026-39729)

Unauthenticated Sensitive Data Exposure in Edwiser Bridge

PLUGIN Edwiser Bridge

CVE-2026-39729

HIGH CVSS 7.2 2026-10-06

Risk Score

Open Full Technical Breakdown

Threat Entry Updated 2026-10-06

Instapage - Security Vulnerability (CVE-2026-39728)

Unauthenticated Server Side Request Forgery (SSRF) in Instapage Plugin

PLUGIN Instapage

CVE-2026-39728

HIGH CVSS 7.2 2026-10-06

Risk Score

Open Full Technical Breakdown

Threat Entry Updated 2026-10-06

Contact Form To Db - Security Vulnerability (CVE-2026-39745)

Unauthenticated Cross Site Scripting (XSS) in Contact Form to DB by BestWebSoft

PLUGIN Contact Form To Db

CVE-2026-39745

HIGH CVSS 7.1 2026-10-06

Risk Score

Open Full Technical Breakdown

Threat Entry Updated 2026-10-06

Database For Cf7 - Security Vulnerability (CVE-2026-39731)

Unauthenticated Cross Site Scripting (XSS) in Database for CF7

PLUGIN Database For Cf7

CVE-2026-39731

HIGH CVSS 7.1 2026-10-06

Risk Score

Open Full Technical Breakdown

Threat Entry Updated 2026-10-07

Wise Chat - Security Vulnerability (CVE-2026-39730)

Missing Authorization vulnerability in Marcin Wise Chat wise-chat allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Wise Chat: from n/a through 3.4.3.

PLUGIN Wise Chat

CVE-2026-39730

HIGH CVSS 7.1 2026-10-06

Risk Score

Open Full Technical Breakdown