Threat Database (40,783)

Threat Entry Updated 2026-10-06

Pdf Smart Viewer For Elementor - Security Vulnerability (CVE-2026-39719)

Unauthenticated Server Side Request Forgery (SSRF) in PDF Smart Viewer for Elementor

PLUGIN Pdf Smart Viewer For Elementor

CVE-2026-39719

HIGH CVSS 7.2 2026-10-06

Risk Score

Open Full Technical Breakdown

Threat Entry Updated 2026-11-05

Lumise Product Designer - Security Vulnerability (CVE-2026-39726)

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Lumise Lumise Product Designer lumise allows Reflected XSS.This issue affects Lumise Product Designer: from n/a before 2.1.4.1.

PLUGIN Lumise Product Designer

CVE-2026-39726

HIGH CVSS 7.1 2026-10-06

Risk Score

Open Full Technical Breakdown

Threat Entry Updated 2026-10-06

Http Requests Manager - Security Vulnerability (CVE-2026-39724)

Unauthenticated Cross Site Scripting (XSS) in HTTP Requests Manager

PLUGIN Http Requests Manager

CVE-2026-39724

HIGH CVSS 7.1 2026-10-06

Risk Score

Open Full Technical Breakdown

Threat Entry Updated 2026-10-06

Wplms - Security Vulnerability (CVE-2026-39722)

Unauthenticated Cross Site Scripting (XSS) in WPLMS

THEME Wplms

CVE-2026-39722

HIGH CVSS 7.1 2026-10-06

Risk Score

Open Full Technical Breakdown

Threat Entry Updated 2026-10-06

Mapster Wp Maps - Security Vulnerability (CVE-2026-39720)

Unauthenticated Cross Site Scripting (XSS) in Mapster WP Maps

PLUGIN Mapster Wp Maps

CVE-2026-39720

HIGH CVSS 7.1 2026-10-06

Risk Score

Open Full Technical Breakdown

Threat Entry Updated 2026-10-06

Wc Fields Factory - Security Vulnerability (CVE-2026-39727)

Subscriber Cross Site Scripting (XSS) in WC Fields Factory

PLUGIN Wc Fields Factory

CVE-2026-39727

MEDIUM CVSS 6.5 2026-10-06

Risk Score

Open Full Technical Breakdown

Threat Entry Updated 2026-10-06

Chatbot Chatgpt - Security Vulnerability (CVE-2026-32579)

Unauthenticated Arbitrary File Upload in Kognetiks Chatbot for WordPress

PLUGIN Chatbot Chatgpt

CVE-2026-32579

CRITICAL CVSS 10.0 2026-10-06

Risk Score

Open Full Technical Breakdown

Threat Entry Updated 2026-10-06

Wc Lottery - Security Vulnerability (CVE-2026-32580)

Unauthenticated SQL Injection in WooCommerce Lottery

PLUGIN Wc Lottery

CVE-2026-32580

HIGH CVSS 7.5 2026-10-06

Risk Score

Open Full Technical Breakdown

Threat Entry Updated 2026-10-06

Mooberry Book Manager - Security Vulnerability (CVE-2026-32581)

Subscriber SQL Injection in Mooberry Book Manager 4.16.2 versions.

PLUGIN Mooberry Book Manager

CVE-2026-32581

HIGH CVSS 7.1 2026-10-06

Risk Score

Open Full Technical Breakdown

Threat Entry Updated 2026-10-06

Ecpay Ecommerce For Woocommerce - Security Vulnerability (CVE-2026-32578)

Subscriber Broken Access Control in ECPay Ecommerce for WooCommerce

PLUGIN Ecpay Ecommerce For Woocommerce

CVE-2026-32578

HIGH CVSS 7.1 2026-10-06

Risk Score

Open Full Technical Breakdown

Threat Entry Updated 2026-10-06

Nmedia User File Uploader - Security Vulnerability (CVE-2026-32577)

Unauthenticated Cross Site Scripting (XSS) in Frontend File Manager

PLUGIN Nmedia User File Uploader

CVE-2026-32577

HIGH CVSS 7.1 2026-10-06

Risk Score

Open Full Technical Breakdown

Threat Entry Updated 2026-10-06

Affs - Security Vulnerability (CVE-2026-32575)

Unauthenticated Cross Site Scripting (XSS) in SUMO Affiliates Pro

PLUGIN Affs

CVE-2026-32575

HIGH CVSS 7.1 2026-10-06

Risk Score

Open Full Technical Breakdown

Threat Entry Updated 2026-10-13

Smart Forms - Security Vulnerability (CVE-2026-32574)

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in EDGARROJAS Smart Forms smart-forms allows DOM-Based XSS.This issue affects Smart Forms: from n/a through 2.6.104.

PLUGIN Smart Forms

CVE-2026-32574

HIGH CVSS 7.1 2026-10-06

Risk Score

Open Full Technical Breakdown

Threat Entry Updated 2026-10-06

Wc Designer Pro - Security Vulnerability (CVE-2026-32568)

Subscriber Remote Code Execution (RCE) in WooCommerce Designer Pro

PLUGIN Wc Designer Pro

CVE-2026-32568

CRITICAL CVSS 9.9 2026-10-06

Risk Score

Open Full Technical Breakdown

Threat Entry Updated 2026-10-29

Woocommerce Appointments - Security Vulnerability (CVE-2026-32557)

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in BookingWP WooCommerce Appointments woocommerce-appointments allows Blind SQL Injection.This issue affects WooCommerce Appointments: from n/a through 5.3.2.

PLUGIN Woocommerce Appointments

CVE-2026-32557

CRITICAL CVSS 9.3 2026-10-06

Risk Score

Open Full Technical Breakdown

Threat Entry Updated 2026-10-06

Wp User Frontend Pro - Security Vulnerability (CVE-2026-32572)

Unauthenticated Cross Site Scripting (XSS) in WP User Frontend Pro

PLUGIN Wp User Frontend Pro

CVE-2026-32572

HIGH CVSS 7.1 2026-10-06

Risk Score

Open Full Technical Breakdown

Threat Entry Updated 2026-10-06

Daftplug Progressify - Security Vulnerability (CVE-2026-32570)

Unauthenticated Cross Site Scripting (XSS) in Progressify - Progressive Web App (PWA)

PLUGIN Daftplug Progressify

CVE-2026-32570

HIGH CVSS 7.1 2026-10-06

Risk Score

Open Full Technical Breakdown

Threat Entry Updated 2026-10-06

Wp Media Folder - Security Vulnerability (CVE-2026-32569)

Unauthenticated Cross Site Scripting (XSS) in WP Media folder

PLUGIN Wp Media Folder

CVE-2026-32569

HIGH CVSS 7.1 2026-10-06

Risk Score

Open Full Technical Breakdown

Threat Entry Updated 2026-10-06

Ohio Extra - Security Vulnerability (CVE-2026-32571)

Subscriber Cross Site Scripting (XSS) in Ohio Extra

PLUGIN Ohio Extra

CVE-2026-32571

MEDIUM CVSS 6.5 2026-10-06

Risk Score

Open Full Technical Breakdown

Threat Entry Updated 2026-10-06

Paid Member Subscriptions - Security Vulnerability (CVE-2026-105317)

Subscriber SQL Injection in Paid Member Subscriptions

PLUGIN Paid Member Subscriptions

CVE-2026-105317

HIGH CVSS 8.5 2026-10-06

Risk Score

Open Full Technical Breakdown