Live Vulnerability Intelligence
Threat Database
Search CVEs, inspect descriptions, and open detail pages with AI-assisted technical context.
Threat Entry
Updated 2026-10-06
Wp2leads - Security Vulnerability (CVE-2026-25434)
Subscriber SQL Injection in WP2LEADS
PLUGIN
Wp2leads
CVE-2026-25434
Risk Score
Threat Entry
Updated 2026-10-06
Wp2leads - Security Vulnerability (CVE-2026-25433)
Subscriber Broken Access Control in WP2LEADS
PLUGIN
Wp2leads
CVE-2026-25433
Risk Score
Threat Entry
Updated 2026-10-06
Jet Elements - Security Vulnerability (CVE-2026-105879)
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Crocoblock JetElements For Elementor jet-elements allows Stored XSS.This issue affects JetElements For Elementor: from n/a through 2.9.2.2.
PLUGIN
Jet Elements
CVE-2026-105879
Risk Score
Threat Entry
Updated 2026-10-06
Salon Booking System - Security Vulnerability (CVE-2026-105070)
Unauthenticated Privilege Escalation in Salon booking system
PLUGIN
Salon Booking System
CVE-2026-105070
Risk Score
Threat Entry
Updated 2026-10-06
Wp User Profiles - Security Vulnerability (CVE-2026-105058)
Subscriber Privilege Escalation in WP User Profiles
PLUGIN
Wp User Profiles
CVE-2026-105058
Risk Score
Threat Entry
Updated 2026-10-06
Sitevault Backup Restore Migration - Security Vulnerability (CVE-2026-105071)
Unauthenticated Sensitive Data Exposure in SiteVault – Backup, Restore, Migration & Cloning
PLUGIN
Sitevault Backup Restore Migration
CVE-2026-105071
Risk Score
Threat Entry
Updated 2026-10-06
Wp Mailster - Security Vulnerability (CVE-2026-105061)
Unauthenticated Cross Site Scripting (XSS) in WP Mailster
PLUGIN
Wp Mailster
CVE-2026-105061
Risk Score
Threat Entry
Updated 2026-10-12
Delete All Comments Of Website - Security Vulnerability (CVE-2026-105059)
Missing Authorization vulnerability in royalnavneet Delete All Comments of wordpress delete-all-comments-of-website allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Delete All Comments of wordpress: from n/a through 7.1.
PLUGIN
Delete All Comments Of Website
CVE-2026-105059
Risk Score
Threat Entry
Updated 2026-10-06
Zero Spam - Security Vulnerability (CVE-2026-105057)
Unauthenticated Bypass Vulnerability in Zero Spam
PLUGIN
Zero Spam
CVE-2026-105057
Risk Score
Threat Entry
Updated 2026-10-06
Haaken - Security Vulnerability (CVE-2026-104747)
Unauthenticated PHP Object Injection in Haaken
THEME
Haaken
CVE-2026-104747
Risk Score
Threat Entry
Updated 2026-10-06
Give - Security Vulnerability (CVE-2026-104405)
Unauthenticated Privilege Escalation in GiveWP
PLUGIN
Give
CVE-2026-104405
Risk Score
Threat Entry
Updated 2026-10-06
Picu - Security Vulnerability (CVE-2026-104406)
Unauthenticated Broken Access Control in picu
PLUGIN
Picu
CVE-2026-104406
Risk Score
Threat Entry
Updated 2026-10-06
Import Users From Csv With Meta - Security Vulnerability (CVE-2026-104757)
Editor Privilege Escalation in Import and export users and customers
PLUGIN
Import Users From Csv With Meta
CVE-2026-104757
Risk Score
Threat Entry
Updated 2026-10-06
Form Block - Security Vulnerability (CVE-2026-104814)
Unauthenticated Cross Site Scripting (XSS) in Form Block
PLUGIN
Form Block
CVE-2026-104814
Risk Score
Threat Entry
Updated 2026-10-06
Give - Security Vulnerability (CVE-2026-104672)
Unauthenticated Cross Site Scripting (XSS) in GiveWP
PLUGIN
Give
CVE-2026-104672
Risk Score
Threat Entry
Updated 2026-10-06
Learnpress - Security Vulnerability (CVE-2026-104670)
Unauthenticated Cross Site Scripting (XSS) in LearnPress
PLUGIN
Learnpress
CVE-2026-104670
Risk Score
Threat Entry
Updated 2026-10-06
Powerpress - Security Vulnerability (CVE-2026-104387)
Unauthenticated Broken Access Control in PowerPress Podcasting
PLUGIN
Powerpress
CVE-2026-104387
Risk Score
Threat Entry
Updated 2026-10-06
Picu - Security Vulnerability (CVE-2026-104395)
Unauthenticated Cross Site Scripting (XSS) in picu
PLUGIN
Picu
CVE-2026-104395
Risk Score
Threat Entry
Updated 2026-10-06
Charitable - Security Vulnerability (CVE-2026-104394)
Unauthenticated Cross Site Scripting (XSS) in Charitable
PLUGIN
Charitable
CVE-2026-104394
Risk Score
Threat Entry
Updated 2026-10-06
Motors Car Dealership Classified Listings - Security Vulnerability (CVE-2026-104399)
Insertion of Sensitive Information Into Sent Data vulnerability in StylemixThemes Motors allows Retrieve Embedded Sensitive Data. This issue affects Motors: from n/a through 1.4.124.
PLUGIN
Motors Car Dealership Classified Listings
CVE-2026-104399
Risk Score