Threat database

1,404 threats

Severity	CVSS	Signals	Threat	Source	Published
Medium	4.3	EPSS 0.3%	CVE-2026-97079Webba Booking (WordPress plugin) · Insecure Direct Object Reference Medium4.3EPSS 0.3%2026-09-30CVE Database V5CVE-2026-97079 Subscriber Insecure Direct Object References (IDOR) in Webba Booking <= 6.5.0 versions. EPSS 0.3%Vulnerability Webba Appointment Booking CWE-639	CVE Database V5	2026-09-30
Medium	5.3	EPSS 0.2%	CVE-2026-97078Client Invoicing by Sprout Invoices (WordPress plugin) · Insecure Direct Object Reference Medium5.3EPSS 0.2%2026-09-30CVE Database V5CVE-2026-97078 Unauthenticated Insecure Direct Object References (IDOR) in Client Invoicing by Sprout Invoices <= 20.8.17 versions. EPSS 0.2%Vulnerability BoldGrid CWE-639	CVE Database V5	2026-09-30
High	7.1	EPSS 0.2%	CVE-2026-97077Ad Inserter (WordPress plugin) · Cross-site Scripting High7.1EPSS 0.2%2026-09-30CVE Database V5CVE-2026-97077 Unauthenticated Cross Site Scripting (XSS) in Ad Inserter <= 2.8.18 versions. EPSS 0.2%Vulnerability Spacetime CWE-79	CVE Database V5	2026-09-30
Medium	4.3	EPSS 0.2%	CVE-2026-97074Newsletters, Email Marketing, SMS and Popups by Omnisend (WordPress plugin) · Insecure Direct Object Reference Medium4.3EPSS 0.2%2026-09-30CVE Database V5CVE-2026-97074 Subscriber Insecure Direct Object References (IDOR) in Newsletters, Email Marketing, SMS and Popups by Omnisend <= 1.9.0 versions. EPSS 0.2%Vulnerability CWE-639	CVE Database V5	2026-09-30
Medium	6.5	EPSS 0.2%	CVE-2026-97067EWWW Image Optimizer (WordPress plugin) · Cross-site Scripting Medium6.5EPSS 0.2%2026-09-30CVE Database V5CVE-2026-97067 Contributor Cross Site Scripting (XSS) in EWWW Image Optimizer <= 8.7.7 versions. EPSS 0.2%Vulnerability Shane Bishop CWE-79	CVE Database V5	2026-09-30
Medium	5.3	EPSS 0.2%	CVE-2026-97066GiveWP (WordPress plugin) · Insecure Direct Object Reference Medium5.3EPSS 0.2%2026-09-30CVE Database V5CVE-2026-97066 Unauthenticated Insecure Direct Object References (IDOR) in GiveWP <= 4.16.9 versions. EPSS 0.2%Vulnerability Nexcess CWE-639	CVE Database V5	2026-09-30
High	8.8	EPSS 0.1%	CVE-2026-96838Blacklist Manager – WooCommerce Anti-Fraud, Blacklist & Checkout Verification (WordPress plugin) · Cross-Site Request Forgery (CSRF) High8.8EPSS 0.1%2026-09-30CVE Database V5CVE-2026-96838 Unauthenticated Cross Site Request Forgery (CSRF) in Blacklist Manager – WooCommerce Anti-Fraud, Blacklist & Checkout Verification <= 2.3.1 versions. EPSS 0.1%Vulnerability YoOhw Studio CWE-352	CVE Database V5	2026-09-30
High	8.8	EPSS 0.5%	CVE-2026-96837CartFlows (WordPress plugin) · PHP Remote File Inclusion High8.8EPSS 0.5%2026-09-30CVE Database V5CVE-2026-96837 Contributor Remote Code Execution (RCE) in CartFlows <= 3.2.0 versions. EPSS 0.5%Vulnerability Brainstorm Force CWE-98	CVE Database V5	2026-09-30
High	7.1	EPSS 0.2%	CVE-2026-96836Parsi Date (WordPress plugin) · Cross-site Scripting High7.1EPSS 0.2%2026-09-30CVE Database V5CVE-2026-96836 Unauthenticated Cross Site Scripting (XSS) in Parsi Date <= 6.3 versions. EPSS 0.2%Vulnerability Morteza Geransayeh CWE-79	CVE Database V5	2026-09-30
Medium	6.5	EPSS 0.2%	CVE-2026-96835King Addons for Elementor (WordPress plugin) · Cross-site Scripting Medium6.5EPSS 0.2%2026-09-30CVE Database V5CVE-2026-96835 Contributor Cross Site Scripting (XSS) in King Addons for Elementor <= 51.1.85 versions. EPSS 0.2%Vulnerability KingAddons.com CWE-79	CVE Database V5	2026-09-30
Medium	6.5	EPSS 0.3%	CVE-2026-96834GiveWP (WordPress plugin) · Missing Authorization Medium6.5EPSS 0.3%2026-09-30CVE Database V5CVE-2026-96834 Subscriber Sensitive Data Exposure in GiveWP <= 4.16.9 versions. EPSS 0.3%Vulnerability Nexcess CWE-862	CVE Database V5	2026-09-30
High	7.2	EPSS 0.4%	CVE-2026-96833Ultimate Addons for Contact Form 7 (WordPress plugin) · Deserialization of Untrusted Data High7.2EPSS 0.4%2026-09-30CVE Database V5CVE-2026-96833 Editor PHP Object Injection in Ultimate Addons for Contact Form 7 <= 3.5.51 versions. EPSS 0.4%Vulnerability Themefic CWE-502	CVE Database V5	2026-09-30
High	7.2	EPSS 0.4%	CVE-2026-96832Content Egg (WordPress plugin) · Deserialization of Untrusted Data High7.2EPSS 0.4%2026-09-30CVE Database V5CVE-2026-96832 Shop manager PHP Object Injection in Content Egg <= 6.3.1 versions. EPSS 0.4%Vulnerability keywordrush CWE-502	CVE Database V5	2026-09-30
High	8.8	EPSS 0.3%	CVE-2026-96831Themify Builder (WordPress plugin) · Deserialization of Untrusted Data High8.8EPSS 0.3%2026-09-30CVE Database V5CVE-2026-96831 Contributor PHP Object Injection in Themify Builder <= 7.8.1 versions. EPSS 0.3%Vulnerability themifyme CWE-502	CVE Database V5	2026-09-30
High	7.1	EPSS 0.2%	CVE-2026-96830GiveWP (WordPress plugin) · Cross-site Scripting High7.1EPSS 0.2%2026-09-30CVE Database V5CVE-2026-96830 Unauthenticated Cross Site Scripting (XSS) in GiveWP <= 4.16.9 versions. EPSS 0.2%Vulnerability Nexcess CWE-79	CVE Database V5	2026-09-30
Medium	6.5	EPSS 0.2%	CVE-2026-96829The Plus Addons for Elementor Page Builder Lite (WordPress plugin) · Cross-site Scripting Medium6.5EPSS 0.2%2026-09-30CVE Database V5CVE-2026-96829 Contributor Cross Site Scripting (XSS) in The Plus Addons for Elementor Page Builder Lite <= 6.5.1 versions. EPSS 0.2%Vulnerability POSIMYTH CWE-79	CVE Database V5	2026-09-30
High	7.6	EPSS 0.3%	CVE-2026-96828Category Discount Woocommerce (WordPress plugin) · SQL Injection High7.6EPSS 0.3%2026-09-30CVE Database V5CVE-2026-96828 Administrator SQL Injection in Category Discount Woocommerce <= 5.18 versions. EPSS 0.3%Vulnerability Vidish CWE-89	CVE Database V5	2026-09-30
High	7.6	EPSS 0.3%	CVE-2026-96827Admin Notices Manager (WordPress plugin) · SQL Injection High7.6EPSS 0.3%2026-09-30CVE Database V5CVE-2026-96827 Administrator SQL Injection in Admin Notices Manager <= 1.6.0 versions. EPSS 0.3%Vulnerability Melapress CWE-89	CVE Database V5	2026-09-30
Medium	4.2	EPSS 0.2%	CVE-2026-96825David Anderson / Team Updraft All In One WP Security & Firewall · Authentication Bypass by Spoofing Medium4.2EPSS 0.2%2026-09-30CVE Database V5CVE-2026-96825 Subscriber Bypass Vulnerability in All In One WP Security & Firewall <= 5.4.8 versions. EPSS 0.2%Vulnerability CWE-290	CVE Database V5	2026-09-30
Medium	6.8	EPSS 0.4%	CVE-2026-96824Template Kit (WordPress plugin) · Path Traversal Medium6.8EPSS 0.4%2026-09-30CVE Database V5CVE-2026-96824 Editor Arbitrary File Deletion in Template Kit – Import <= 1.0.16 versions. EPSS 0.4%Vulnerability envato CWE-22	CVE Database V5	2026-09-30

Page 24 of 72