Live Vulnerability Intelligence
Threat Database
Search CVEs, inspect descriptions, and open detail pages with AI-assisted technical context.
Threat Entry
Updated 2026-10-06
Ecommerce Product Catalog - Security Vulnerability (CVE-2026-105056)
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in impleCode eCommerce Product Catalog ecommerce-product-catalog allows Stored XSS.This issue affects eCommerce Product Catalog: from n/a through 3.6.2.
PLUGIN
Ecommerce Product Catalog
CVE-2026-105056
Risk Score
Threat Entry
Updated 2026-10-06
Wp Mailster - Security Vulnerability (CVE-2026-105055)
Missing Authorization vulnerability in WP Mailster WP Mailster wp-mailster allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP Mailster: from n/a through 1.9.0.0.
PLUGIN
Wp Mailster
CVE-2026-105055
Risk Score
Threat Entry
Updated 2026-10-06
Event Tickets - Security Vulnerability (CVE-2026-104675)
Missing Authorization vulnerability in Liquid Web / StellarWP Event Tickets event-tickets allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Event Tickets: from n/a through 5.30.0.
PLUGIN
Event Tickets
CVE-2026-104675
Risk Score
Threat Entry
Updated 2026-10-06
Groundhogg - Security Vulnerability (CVE-2026-104408)
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Groundhogg Groundhogg groundhogg allows Blind SQL Injection.This issue affects Groundhogg: from n/a through 4.8.3.
PLUGIN
Groundhogg
CVE-2026-104408
Risk Score
Threat Entry
Updated 2026-10-06
Powerpress - Security Vulnerability (CVE-2026-104407)
Cross-Site Request Forgery (CSRF) vulnerability in Blubrry Podcasting PowerPress Podcasting powerpress allows Cross Site Request Forgery.This issue affects PowerPress Podcasting: from n/a through 11.17.9.
PLUGIN
Powerpress
CVE-2026-104407
Risk Score
Threat Entry
Updated 2026-10-06
Mp3 Music Player By Sonaar - Security Vulnerability (CVE-2026-104673)
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Sonaar MP3 Audio Player for Music, Radio & Podcast by Sonaar mp3-music-player-by-sonaar allows Stored XSS.This issue affects MP3 Audio Player for Music, Radio & Podcast by Sonaar: from n/a through 5.14.2.
PLUGIN
Mp3 Music Player By Sonaar
CVE-2026-104673
Risk Score
Threat Entry
Updated 2026-10-06
Final Tiles Grid Gallery Lite - Security Vulnerability (CVE-2026-104409)
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WP Chill Image Photo Gallery Final Tiles Grid final-tiles-grid-gallery-lite allows Stored XSS.This issue affects Image Photo Gallery Final Tiles Grid: from n/a through 3.6.13.
PLUGIN
Final Tiles Grid Gallery Lite
CVE-2026-104409
Risk Score
Threat Entry
Updated 2026-10-06
Give - Security Vulnerability (CVE-2026-104404)
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Liquid Web / StellarWP GiveWP give allows Stored XSS.This issue affects GiveWP: from n/a through 4.17.0.
PLUGIN
Give
CVE-2026-104404
Risk Score
Threat Entry
Updated 2026-10-06
B Blocks - Security Vulnerability (CVE-2026-104400)
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in bPlugins B Blocks b-blocks allows Stored XSS.This issue affects B Blocks: from n/a through 2.1.8.
PLUGIN
B Blocks
CVE-2026-104400
Risk Score
Threat Entry
Updated 2026-10-06
Memberful Wp - Security Vulnerability (CVE-2026-104401)
Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in Memberful Memberful - Membership Plugin memberful-wp allows Retrieve Embedded Sensitive Data.This issue affects Memberful - Membership Plugin: from n/a through 1.81.2.
PLUGIN
Memberful Wp
CVE-2026-104401
Risk Score
Threat Entry
Updated 2026-10-06
Sirv - Security Vulnerability (CVE-2026-104389)
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Sirv Sirv sirv allows Blind SQL Injection.This issue affects Sirv: from n/a through 8.2.5.
PLUGIN
Sirv
CVE-2026-104389
Risk Score
Threat Entry
Updated 2026-10-06
Name Directory - Security Vulnerability (CVE-2026-104396)
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Jeroen Peters Name Directory name-directory allows Stored XSS.This issue affects Name Directory: from n/a through 1.34.2.
PLUGIN
Name Directory
CVE-2026-104396
Risk Score
Threat Entry
Updated 2026-10-06
Wpvr - Security Vulnerability (CVE-2026-104386)
Missing Authorization vulnerability in WPFunnels Team WP VR wpvr allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP VR: from n/a through 9.1.3.
PLUGIN
Wpvr
CVE-2026-104386
Risk Score
Threat Entry
Updated 2026-10-06
Name Directory - Security Vulnerability (CVE-2026-104397)
Missing Authorization vulnerability in Jeroen Peters Name Directory name-directory allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Name Directory: from n/a through 1.34.2.
PLUGIN
Name Directory
CVE-2026-104397
Risk Score
Threat Entry
Updated 2026-10-06
Powerpress - Security Vulnerability (CVE-2026-104388)
Missing Authorization vulnerability in Blubrry Podcasting PowerPress Podcasting powerpress allows Retrieve Embedded Sensitive Data.This issue affects PowerPress Podcasting: from n/a through 11.17.9.
PLUGIN
Powerpress
CVE-2026-104388
Risk Score
Threat Entry
Updated 2026-10-06
Premium Addons For Elementor - Security Vulnerability (CVE-2026-103084)
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in LeapWorx Premium Addons for Elementor premium-addons-for-elementor allows Stored XSS.This issue affects Premium Addons for Elementor: from n/a through 4.11.109.
PLUGIN
Premium Addons For Elementor
CVE-2026-103084
Risk Score
Threat Entry
Updated 2026-10-06
Presto Player - Security Vulnerability (CVE-2026-102914)
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Brainstorm Force Presto Player presto-player allows Stored XSS.This issue affects Presto Player: from n/a through 4.5.2.
PLUGIN
Presto Player
CVE-2026-102914
Risk Score
Threat Entry
Updated 2026-10-06
Js Support Ticket - Security Vulnerability (CVE-2026-103079)
Authorization Bypass Through User-Controlled Key vulnerability in Ahmad JS Help Desk js-support-ticket allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects JS Help Desk: from n/a through 4.0.0.
PLUGIN
Js Support Ticket
CVE-2026-103079
Risk Score
Threat Entry
Updated 2026-10-06
Ecab Taxi Booking Manager - Security Vulnerability (CVE-2026-103351)
Improper Validation of Specified Quantity in Input vulnerability in Magepeople inc. Taxi Booking Manager for WooCommerce ecab-taxi-booking-manager allows Input Data Manipulation.This issue affects Taxi Booking Manager for WooCommerce: from n/a through 2.1.1.
PLUGIN
Ecab Taxi Booking Manager
CVE-2026-103351
Risk Score
Threat Entry
Updated 2026-10-06
Video Conferencing With Zoom Api - Security Vulnerability (CVE-2026-103335)
Insertion of Sensitive Information Into Sent Data vulnerability in Deepen Bajracharya Video Conferencing with Zoom video-conferencing-with-zoom-api allows Retrieve Embedded Sensitive Data.This issue affects Video Conferencing with Zoom: from n/a through 4.6.10.
PLUGIN
Video Conferencing With Zoom Api
CVE-2026-103335
Risk Score