Threat database

811 threats

Threat database
Severity	CVSS	Signals	Threat	Source	Published
Critical	9.3	EPSS 0.3%	CVE-2026-42417ARMember Premium · SQL Injection Critical9.3EPSS 0.3%2026-10-06CVE Database V5CVE-2026-42417 Unauthenticated SQL Injection in ARMember Premium <= 7.8 versions. EPSS 0.3%Vulnerability reputeinfosystems #cwe-89	CVE Database V5	2026-10-06
High	8.5	EPSS 0.3%	CVE-2026-42416UDesign Core · SQL Injection High8.5EPSS 0.3%2026-10-06CVE Database V5CVE-2026-42416 Subscriber SQL Injection in UDesign Core <= 4.15.0 versions. EPSS 0.3%Vulnerability AndonDesign #cwe-89	CVE Database V5	2026-10-06
Critical	9.3	EPSS 0.2%	CVE-2026-42415Porto Theme - Functionality · SQL Injection Critical9.3EPSS 0.2%2026-10-06CVE Database V5CVE-2026-42415 Unauthenticated SQL Injection in Porto Theme - Functionality <= 3.9.3 versions. EPSS 0.2%Vulnerability p-themes #cwe-89	CVE Database V5	2026-10-06
High	8.5	EPSS 0.3%	CVE-2026-42414ListingPro · SQL Injection High8.5EPSS 0.3%2026-10-06CVE Database V5CVE-2026-42414 Subscriber SQL Injection in ListingPro <= 2.9.12 versions. EPSS 0.3%Vulnerability CridioStudio #cwe-89	CVE Database V5	2026-10-06
High	7.5	EPSS 0.3%	CVE-2026-42413Snapshotify – All-in-One Backup & Restore & Migrate · Insertion of Sensitive Information Into Sent Data High7.5EPSS 0.3%2026-10-06CVE Database V5CVE-2026-42413 Unauthenticated Sensitive Data Exposure in Snapshotify – All-in-One Backup & Restore & Migrate <= 1.3.2 versions. EPSS 0.3%Vulnerability DaftPlug #cwe-201	CVE Database V5	2026-10-06
High	7.5	EPSS 0.3%	CVE-2026-41562Norvis Backup · Insertion of Sensitive Information Into Sent Data High7.5EPSS 0.3%2026-10-06CVE Database V5CVE-2026-41562 Unauthenticated Sensitive Data Exposure in Norvis Backup <= 1.1.0 versions. EPSS 0.3%Vulnerability norvisgabriel #cwe-201	CVE Database V5	2026-10-06
High	7.5	EPSS 0.3%	CVE-2026-41561Museder RestoreOne · Insertion of Sensitive Information Into Sent Data High7.5EPSS 0.3%2026-10-06CVE Database V5CVE-2026-41561 Unauthenticated Sensitive Data Exposure in Museder RestoreOne <= 2.7.276 versions. EPSS 0.3%Vulnerability Adrian Lin #cwe-201	CVE Database V5	2026-10-06
High	7.5	EPSS 0.3%	CVE-2026-41560WXD Backup Lite · Missing Authorization High7.5EPSS 0.3%2026-10-06CVE Database V5CVE-2026-41560 Unauthenticated Broken Access Control in WXD Backup Lite <= 1.0.2 versions. EPSS 0.3%Vulnerability wxdlabs #cwe-862	CVE Database V5	2026-10-06
High	7.5	EPSS 0.3%	CVE-2026-41559SafeSnap – Verified WordPress Backup & Restore · Insertion of Sensitive Information Into Sent Data High7.5EPSS 0.3%2026-10-06CVE Database V5CVE-2026-41559 Unauthenticated Sensitive Data Exposure in SafeSnap – Verified WordPress Backup & Restore <= 2.1.2 versions. EPSS 0.3%Vulnerability Pluginjoy #cwe-201	CVE Database V5	2026-10-06
Critical	9.3	EPSS 0.2%	CVE-2026-41555Newsletter Subscription Form – User Subscriptions Form, Capture Email · SQL Injection Critical9.3EPSS 0.2%2026-10-06CVE Database V5CVE-2026-41555 Unauthenticated SQL Injection in Newsletter Subscription Form – User Subscriptions Form, Capture Email <= 1.5.9 versions. EPSS 0.2%Vulnerability Weblizar – WordPress Themes & Plugin #cwe-89	CVE Database V5	2026-10-06
High	7.1	EPSS 0.2%	CVE-2026-40807CF7 Views – Complete Entry Management for Contact Form 7 · Cross-site Scripting High7.1EPSS 0.2%2026-10-06CVE Database V5CVE-2026-40807 Unauthenticated Cross Site Scripting (XSS) in CF7 Views – Complete Entry Management for Contact Form 7 <= 3.2.6 versions. EPSS 0.2%Vulnerability Aman #cwe-79	CVE Database V5	2026-10-06
High	7.1	EPSS 0.2%	CVE-2026-40806Blog, Posts and Category Filter for Elementor · Cross-site Scripting High7.1EPSS 0.2%2026-10-06CVE Database V5CVE-2026-40806 Unauthenticated Cross Site Scripting (XSS) in Blog, Posts and Category Filter for Elementor <= 2.1.0 versions. EPSS 0.2%Vulnerability Plugin Devs #cwe-79	CVE Database V5	2026-10-06
Medium	6.5	EPSS 0.3%	CVE-2026-39798TrueBooker · Missing Authorization Medium6.5EPSS 0.3%2026-10-06CVE Database V5CVE-2026-39798 Unauthenticated Settings Change in TrueBooker <= 1.2.9 versions. EPSS 0.3%Vulnerability ThemetechMount #cwe-862	CVE Database V5	2026-10-06
Critical	9.8	EPSS 0.3%	CVE-2026-39797GDPR Framework By Data443 · Deserialization of Untrusted Data Critical9.8EPSS 0.3%2026-10-06CVE Database V5CVE-2026-39797 Unauthenticated PHP Object Injection in GDPR Framework By Data443 <= 2.5.0 versions. EPSS 0.3%Vulnerability Data443 Risk Mitigation, Inc.#cwe-502	CVE Database V5	2026-10-06
High	7.5	EPSS 0.3%	CVE-2026-39796Advanced Posts Listing – Show Post List Easily · Missing Authorization High7.5EPSS 0.3%2026-10-06CVE Database V5CVE-2026-39796 Unauthenticated Broken Access Control in Advanced Posts Listing – Show Post List Easily <= 1.0.8 versions. EPSS 0.3%Vulnerability Flipper Code – WordPress Development Company #cwe-862	CVE Database V5	2026-10-06
Critical	9.3	EPSS 0.3%	CVE-2026-39795SendPress Newsletters · SQL Injection Critical9.3EPSS 0.3%2026-10-06CVE Database V5CVE-2026-39795 Unauthenticated SQL Injection in SendPress Newsletters <= 1.26.1.20 versions. EPSS 0.3%Vulnerability brewlabs #cwe-89	CVE Database V5	2026-10-06
High	7.5	EPSS 0.4%	CVE-2026-39794WooCommerce Multivendor Marketplace – REST API · Missing Authorization High7.5EPSS 0.4%2026-10-06CVE Database V5CVE-2026-39794 Unauthenticated Broken Access Control in WooCommerce Multivendor Marketplace – REST API <= 1.6.3 versions. EPSS 0.4%Vulnerability WC Lovers #cwe-862	CVE Database V5	2026-10-06
High	8.8	EPSS 0.4%	CVE-2026-39793Simple JWT Login · Authentication Bypass Using an Alternate Path or Channel High8.8EPSS 0.4%2026-10-06CVE Database V5CVE-2026-39793 Subscriber Broken Authentication in Simple JWT Login 4.0.0 versions. EPSS 0.4%Vulnerability Nicu Micle #cwe-288	CVE Database V5	2026-10-06
High	8.6	EPSS 0.4%	CVE-2026-39792Simple File List · Path Traversal High8.6EPSS 0.4%2026-10-06CVE Database V5CVE-2026-39792 Unauthenticated Arbitrary File Deletion in Simple File List <= 6.3.11 versions. EPSS 0.4%Vulnerability Mitchell Bennis #cwe-22	CVE Database V5	2026-10-06
Medium	5.3	EPSS 0.3%	CVE-2026-39791Mailjet Email Marketing · Insertion of Sensitive Information Into Sent Data Medium5.3EPSS 0.3%2026-10-06CVE Database V5CVE-2026-39791 Unauthenticated Sensitive Data Exposure in Mailjet Email Marketing <= 6.2.3 versions. EPSS 0.3%Vulnerability Mailjet #cwe-201	CVE Database V5	2026-10-06

Showing 621–640 of 811 results