Live Vulnerability Intelligence
Threat Database
Search CVEs, inspect descriptions, and open detail pages with AI-assisted technical context.
Threat Entry
Updated 2026-10-06
Userswp - Security Vulnerability (CVE-2026-103086)
Missing Authorization vulnerability in Stiofan UsersWP userswp allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects UsersWP: from n/a through 1.2.74.
PLUGIN
Userswp
CVE-2026-103086
Risk Score
Threat Entry
Updated 2026-10-06
Wp User Manager - Security Vulnerability (CVE-2026-103085)
Improper Access Control vulnerability in WP User Manager WP User Manager wp-user-manager allows Privilege Abuse.This issue affects WP User Manager: from n/a through 2.9.20.
PLUGIN
Wp User Manager
CVE-2026-103085
Risk Score
Threat Entry
Updated 2026-10-06
Woo Photo Reviews - Security Vulnerability (CVE-2026-100515)
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in VillaTheme Photo Reviews for WooCommerce woo-photo-reviews allows Reflected XSS.This issue affects Photo Reviews for WooCommerce: from n/a through 1.2.30.
PLUGIN
Woo Photo Reviews
CVE-2026-100515
Risk Score
Threat Entry
Updated 2026-10-06
Woo Lookbook - Security Vulnerability (CVE-2026-102383)
Missing Authorization vulnerability in VillaTheme Lookzy woo-lookbook allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Lookzy: from n/a through 1.1.14.
PLUGIN
Woo Lookbook
CVE-2026-102383
Risk Score
Threat Entry
Updated 2026-10-06
Computer Repair Shop - Security Vulnerability (CVE-2026-100509)
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Webful Creations RepairBuddy computer-repair-shop allows Stored XSS.This issue affects RepairBuddy: from n/a through 4.1225.
PLUGIN
Computer Repair Shop
CVE-2026-100509
Risk Score
Threat Entry
Updated 2026-10-06
Image Slider Widget - Security Vulnerability (CVE-2026-42700)
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in GhozyLab Image Slider Widget image-slider-widget allows Stored XSS.This issue affects Image Slider Widget: from n/a through 1.1.130.
PLUGIN
Image Slider Widget
CVE-2026-42700
Risk Score
Threat Entry
Updated 2026-10-07
Learnpress - Security Vulnerability (CVE-2026-105397)
LearnPress plugin for WordPress through 4.4.9.1 contains a stored cross-site scripting vulnerability that allows authenticated instructors to inject scripts via quiz question hint and explanation fields. Attackers with the Instructor role can submit unsanitized payloads through the update_question AJAX handler that execute in the session of every student taking the quiz.
PLUGIN
Learnpress
CVE-2026-105397
Risk Score
Threat Entry
Updated 2026-10-06
Convertkit For Woocommerce - Security Vulnerability (CVE-2026-105421)
Missing Authorization vulnerability in Kit Kit (formerly ConvertKit) for WooCommerce convertkit-for-woocommerce allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Kit (formerly ConvertKit) for WooCommerce: from n/a through 2.2.0.
PLUGIN
Convertkit For Woocommerce
CVE-2026-105421
Risk Score
Threat Entry
Updated 2026-10-06
Wp Event Solution - Security Vulnerability (CVE-2026-105073)
Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in Arraytics WP Event Solution wp-event-solution allows Retrieve Embedded Sensitive Data.This issue affects WP Event Solution: from n/a through 4.1.25.
PLUGIN
Wp Event Solution
CVE-2026-105073
Risk Score
Threat Entry
Updated 2026-10-06
Polylang - Security Vulnerability (CVE-2026-39783)
Missing Authorization vulnerability in WP SYNTEX Polylang polylang allows Retrieve Embedded Sensitive Data.This issue affects Polylang: from n/a through 3.8.7.
PLUGIN
Polylang
CVE-2026-39783
Risk Score
Threat Entry
Updated 2026-10-06
Wp Event Solution - Security Vulnerability (CVE-2026-103684)
Missing Authorization vulnerability in Arraytics WP Event Solution wp-event-solution allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP Event Solution: from n/a through 4.1.25.
PLUGIN
Wp Event Solution
CVE-2026-103684
Risk Score
Threat Entry
Updated 2026-10-06
Fluentformpro - Security Vulnerability (CVE-2026-94669)
Missing Authorization vulnerability in WP ManageNinja LLC Fluent Forms Pro Add On Pack fluentformpro allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Fluent Forms Pro Add On Pack: from n/a through 6.2.13.
PLUGIN
Fluentformpro
CVE-2026-94669
Risk Score
Threat Entry
Updated 2026-10-06
Wp Dummy Content Generator - Security Vulnerability (CVE-2026-39763)
Missing Authorization vulnerability in Deepak Anand WP Dummy Content Generator wp-dummy-content-generator allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP Dummy Content Generator: from n/a through 4.0.0.
PLUGIN
Wp Dummy Content Generator
CVE-2026-39763
Risk Score
Threat Entry
Updated 2026-10-06
Astra Sites - Security Vulnerability (CVE-2026-39721)
Missing Authorization vulnerability in Brainstorm Force Starter Templates astra-sites allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Starter Templates: from n/a through 4.7.7.
PLUGIN
Astra Sites
CVE-2026-39721
Risk Score
Threat Entry
Updated 2026-10-06
Woo Multi Currency - Security Vulnerability (CVE-2026-97071)
Incorrect Calculation vulnerability in VillaTheme CURCY woo-multi-currency allows Integer Attacks.This issue affects CURCY: from n/a through 2.2.17.
PLUGIN
Woo Multi Currency
CVE-2026-97071
Risk Score
Threat Entry
Updated 2026-10-06
Qr Redirector - Security Vulnerability (CVE-2026-105069)
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Nikki Blight QR Redirector qr-redirector allows Stored XSS.This issue affects QR Redirector: from n/a through 2.0.5.
PLUGIN
Qr Redirector
CVE-2026-105069
Risk Score
Threat Entry
Updated 2026-10-06
Unlimited Elements For Elementor - Security Vulnerability (CVE-2026-105064)
Use of Externally-Controlled Input to Select Classes or Code ('Unsafe Reflection') vulnerability in Unlimited Elements Unlimited Elements For Elementor (Free Widgets, Addons, Templates) unlimited-elements-for-elementor allows Parameter Injection.This issue affects Unlimited Elements For Elementor (Free Widgets, Addons, Templates): from n/a through 2.0.22.
PLUGIN
Unlimited Elements For Elementor
CVE-2026-105064
Risk Score
Threat Entry
Updated 2026-10-06
Events Manager - Security Vulnerability (CVE-2026-105068)
Insertion of Sensitive Information Into Sent Data vulnerability in Pixelite Events Manager events-manager allows Retrieve Embedded Sensitive Data.This issue affects Events Manager: from n/a through 7.4.5.
PLUGIN
Events Manager
CVE-2026-105068
Risk Score
Threat Entry
Updated 2026-10-06
Wp Admin Audit - Security Vulnerability (CVE-2026-105062)
Missing Authorization vulnerability in Brandtoss WP Admin Audit wp-admin-audit allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP Admin Audit: from n/a through 1.2.17.
PLUGIN
Wp Admin Audit
CVE-2026-105062
Risk Score
Threat Entry
Updated 2026-10-06
Logo Showcase - Security Vulnerability (CVE-2026-105060)
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Themepoints Logo Showcase logo-showcase allows Stored XSS.This issue affects Logo Showcase: from n/a through 4.0.4.
PLUGIN
Logo Showcase
CVE-2026-105060
Risk Score