Threat database

1,404 threats

Severity	CVSS	Signals	Threat	Source	Published
High	7.5	EPSS 0.3%	CVE-2026-96823Customer Reviews for WooCommerce (WordPress plugin) · Missing Authorization High7.5EPSS 0.3%2026-09-30CVE Database V5CVE-2026-96823 Unauthenticated Arbitrary Content Deletion in Customer Reviews for WooCommerce <= 5.120.0 versions. EPSS 0.3%Vulnerability CusRev CWE-862	CVE Database V5	2026-09-30
Critical	9.3	EPSS 0.3%	CVE-2026-96822Books Gallery (WordPress plugin) · SQL Injection Critical9.3EPSS 0.3%2026-09-30CVE Database V5CVE-2026-96822 Unauthenticated SQL Injection in Books Gallery <= 4.8.3 versions. EPSS 0.3%Vulnerability Hossni Mubarak CWE-89	CVE Database V5	2026-09-30
Medium	6.3	EPSS 0.2%	CVE-2026-96821FluentBoards (WordPress plugin) · Incorrect Privilege Assignment Medium6.3EPSS 0.2%2026-09-30CVE Database V5CVE-2026-96821 Subscriber Privilege Escalation in FluentBoards <= 2.0.12 versions. EPSS 0.2%Vulnerability Mahmudul Hasan Arif CWE-266	CVE Database V5	2026-09-30
High	7.1	EPSS 0.2%	CVE-2026-96820Awesome Support (WordPress plugin) · Cross-site Scripting High7.1EPSS 0.2%2026-09-30CVE Database V5CVE-2026-96820 Subscriber Cross Site Scripting (XSS) in Awesome Support <= 6.3.9 versions. EPSS 0.2%Vulnerability awesomesupport CWE-79	CVE Database V5	2026-09-30
High	7.1	EPSS 0.2%	CVE-2026-96819oik (WordPress plugin) · Cross-site Scripting High7.1EPSS 0.2%2026-09-30CVE Database V5CVE-2026-96819 Subscriber Cross Site Scripting (XSS) in oik <= 4.15.4 versions. EPSS 0.2%Vulnerability bobbingwide CWE-79	CVE Database V5	2026-09-30
High	7.5	EPSS 0.2%	CVE-2026-96818mra13 / Team Tips and Tricks HQ WP Express Checkout (Accept PayPal Payments) · Missing Authorization High7.5EPSS 0.2%2026-09-30CVE Database V5CVE-2026-96818 Unauthenticated Broken Access Control in WP Express Checkout (Accept PayPal Payments) <= 2.4.9 versions. EPSS 0.2%Vulnerability CWE-862	CVE Database V5	2026-09-30
High	8.2	EPSS 0.4%	CVE-2026-96817MakeCommerce for WooCommerce (WordPress plugin) · Missing Authorization High8.2EPSS 0.4%2026-09-30CVE Database V5CVE-2026-96817 Subscriber Broken Access Control in MakeCommerce for WooCommerce <= 4.1.0 versions. EPSS 0.4%Vulnerability MakeCommerce.net CWE-862	CVE Database V5	2026-09-30
High	7.1	EPSS 0.2%	CVE-2026-96816Trusted Shops Easy Integration for WooCommerce (WordPress plugin) · Cross-site Scripting High7.1EPSS 0.2%2026-09-30CVE Database V5CVE-2026-96816 Unauthenticated Cross Site Scripting (XSS) in Trusted Shops Easy Integration for WooCommerce <= 2.0.6 versions. EPSS 0.2%Vulnerability vendidero CWE-79	CVE Database V5	2026-09-30
High	7.2	EPSS 0.3%	CVE-2026-96815Vitepos (WordPress plugin) · Incorrect Privilege Assignment High7.2EPSS 0.3%2026-09-30CVE Database V5CVE-2026-96815 Custom role Privilege Escalation in Vitepos <= 3.5.0 versions. EPSS 0.3%Vulnerability appsbd CWE-266	CVE Database V5	2026-09-30
High	7.1	EPSS 0.2%	CVE-2026-96814WooCommerce Product Table Lite (WordPress plugin) · Cross-site Scripting High7.1EPSS 0.2%2026-09-30CVE Database V5CVE-2026-96814 Unauthenticated Cross Site Scripting (XSS) in WooCommerce Product Table Lite <= 5.6.7 versions. EPSS 0.2%Vulnerability WP Titan Labs CWE-79	CVE Database V5	2026-09-30
Medium	5.4	EPSS 0.2%	CVE-2026-96450pixfort Core (WordPress plugin) · Cross-site Scripting Medium5.4EPSS 0.2%2026-09-30CVE Database V5CVE-2026-96450 Contributor Cross Site Scripting (XSS) in pixfort Core < 4.3.3 versions. EPSS 0.2%Vulnerability CWE-79	CVE Database V5	2026-09-30
High	7.1	EPSS 0.2%	CVE-2026-96352YITH WooCommerce Ajax Search (WordPress plugin) · Cross-site Scripting High7.1EPSS 0.2%2026-09-30CVE Database V5CVE-2026-96352 Unauthenticated Cross Site Scripting (XSS) in YITH WooCommerce Ajax Search <= 2.28.0 versions. EPSS 0.2%Vulnerability YITHEMES CWE-79	CVE Database V5	2026-09-30
High	7.1	EPSS 0.2%	CVE-2026-96351Classified Listing (WordPress plugin) · Cross-site Scripting High7.1EPSS 0.2%2026-09-30CVE Database V5CVE-2026-96351 Unauthenticated Cross Site Scripting (XSS) in Classified Listing <= 6.1.3 versions. EPSS 0.2%Vulnerability RadiusTheme CWE-79	CVE Database V5	2026-09-30
High	7.6	EPSS 0.3%	CVE-2026-96346weDevs WP ERP · SQL Injection High7.6EPSS 0.3%2026-09-30CVE Database V5CVE-2026-96346 Author SQL Injection in WP ERP <= 1.17.9 versions. EPSS 0.3%Vulnerability CWE-89	CVE Database V5	2026-09-30
High	7.2	EPSS 0.4%	CVE-2026-96344eCommerce Product Catalog (WordPress plugin) · Deserialization of Untrusted Data High7.2EPSS 0.4%2026-09-30CVE Database V5CVE-2026-96344 Custom role PHP Object Injection in eCommerce Product Catalog <= 3.6.0 versions. EPSS 0.4%Vulnerability impleCode CWE-502	CVE Database V5	2026-09-30
High	7.2	EPSS 0.4%	CVE-2026-96343weDevs WP ERP · Deserialization of Untrusted Data High7.2EPSS 0.4%2026-09-30CVE Database V5CVE-2026-96343 Custom role PHP Object Injection in WP ERP <= 1.17.9 versions. EPSS 0.4%Vulnerability CWE-502	CVE Database V5	2026-09-30
Medium	6.5	EPSS 0.2%	CVE-2026-96338Profile Builder (WordPress plugin) · Cross-site Scripting Medium6.5EPSS 0.2%2026-09-30CVE Database V5CVE-2026-96338 Subscriber Cross Site Scripting (XSS) in Profile Builder <= 4.0.2 versions. EPSS 0.2%Vulnerability Cozmoslabs CWE-79	CVE Database V5	2026-09-30
High	7.5	EPSS 0.3%	CVE-2026-95587Hostinger Migrator (WordPress plugin) · Missing Authorization High7.5EPSS 0.3%2026-09-30CVE Database V5CVE-2026-95587 Unauthenticated Broken Access Control in Hostinger Migrator <= 1.0 versions. EPSS 0.3%Vulnerability CWE-862	CVE Database V5	2026-09-30
High	8.8	EPSS 0.5%	CVE-2026-95531Conversational Forms for ChatBot (WordPress plugin) · Deserialization of Untrusted Data High8.8EPSS 0.5%2026-09-30CVE Database V5CVE-2026-95531 Subscriber PHP Object Injection in Conversational Forms for ChatBot <= 1.5.0 versions. EPSS 0.5%Vulnerability QuantumCloud CWE-502	CVE Database V5	2026-09-30
High	8.8	EPSS 0.3%	CVE-2026-94683DesignSetGo (WordPress plugin) · Deserialization of Untrusted Data High8.8EPSS 0.3%2026-09-30CVE Database V5CVE-2026-94683 Contributor PHP Object Injection in DesignSetGo <= 2.8.0 versions. EPSS 0.3%Vulnerability Justin Nealey CWE-502	CVE Database V5	2026-09-30

Page 25 of 72