Threat database

811 threats

Threat database
Severity	CVSS	Signals	Threat	Source	Published
Critical	9.8	EPSS 0.5%	CVE-2026-39761Meta Box AIO · Incorrect Privilege Assignment Critical9.8EPSS 0.5%2026-10-06CVE Database V5CVE-2026-39761 Unauthenticated Privilege Escalation in Meta Box AIO <= 3.7.1 versions. EPSS 0.5%Vulnerability eLightUp #cwe-266	CVE Database V5	2026-10-06
Critical	9.9	EPSS 0.5%	CVE-2026-39759Workreap Core · Unrestricted Upload of File with Dangerous Type Critical9.9EPSS 0.5%2026-10-06CVE Database V5CVE-2026-39759 Employer / Sales Representative Arbitrary File Upload in Workreap Core <= 3.4.5 versions. EPSS 0.5%Vulnerability AmentoTech #cwe-434	CVE Database V5	2026-10-06
High	7.1	EPSS 0.3%	CVE-2026-39758Midtrans-WooCommerce · Cross-site Scripting High7.1EPSS 0.3%2026-10-06CVE Database V5CVE-2026-39758 Unauthenticated Cross Site Scripting (XSS) in Midtrans-WooCommerce <= 2.32.3 versions. EPSS 0.3%Vulnerability Midtrans #cwe-79	CVE Database V5	2026-10-06
Critical	9.9	EPSS 0.5%	CVE-2026-39757Taskbot · Unrestricted Upload of File with Dangerous Type Critical9.9EPSS 0.5%2026-10-06CVE Database V5CVE-2026-39757 Subscriber Arbitrary File Upload in Taskbot <= 6.6 versions. EPSS 0.5%Vulnerability AmentoTech #cwe-434	CVE Database V5	2026-10-06
Medium	6.5	EPSS 0.3%	CVE-2026-39756Wappointment · Authorization Bypass Through User-Controlled Key Medium6.5EPSS 0.3%2026-10-06CVE Database V5CVE-2026-39756 Unauthenticated Insecure Direct Object References (IDOR) in Wappointment <= 2.7.7 versions. EPSS 0.3%Vulnerability Wappointment team #cwe-639	CVE Database V5	2026-10-06
Critical	9.9	EPSS 0.4%	CVE-2026-39755WP Duplicate · Unrestricted Upload of File with Dangerous Type Critical9.9EPSS 0.4%2026-10-06CVE Database V5CVE-2026-39755 Subscriber Arbitrary File Upload in WP Duplicate <= 1.1.11 versions. EPSS 0.4%Vulnerability revmakx #cwe-434	CVE Database V5	2026-10-06
Medium	6.5	EPSS 0.3%	CVE-2026-39754Piotnet Addons For Elementor · Path Traversal Medium6.5EPSS 0.3%2026-10-06CVE Database V5CVE-2026-39754 Contributor Arbitrary File Download in Piotnet Addons For Elementor <= 7.1.71 versions. EPSS 0.3%Vulnerability About Piotnet #cwe-22	CVE Database V5	2026-10-06
Critical	9.8	EPSS 0.4%	CVE-2026-39753Taskbot · Incorrect Privilege Assignment Critical9.8EPSS 0.4%2026-10-06CVE Database V5CVE-2026-39753 Unauthenticated Privilege Escalation in Taskbot <= 6.6 versions. EPSS 0.4%Vulnerability AmentoTech #cwe-266	CVE Database V5	2026-10-06
High	7.7	EPSS 0.4%	CVE-2026-39752Jobs for WordPress · Path Traversal High7.7EPSS 0.4%2026-10-06CVE Database V5CVE-2026-39752 Contributor Arbitrary File Deletion in Jobs for WordPress <= 2.8.2 versions. EPSS 0.4%Vulnerability BlueGlass Interactive AG #cwe-22	CVE Database V5	2026-10-06
High	7.5	EPSS 0.3%	CVE-2026-39751PayPlug for WooCommerce (Official) · Missing Authorization High7.5EPSS 0.3%2026-10-06CVE Database V5CVE-2026-39751 Unauthenticated Broken Access Control in PayPlug for WooCommerce (Official) <= 3.1.0 versions. EPSS 0.3%Vulnerability Payplug #cwe-862	CVE Database V5	2026-10-06
High	7.1	EPSS 0.2%	CVE-2026-39750StoreGrowth: Smart Sales Booster for WooCommerce \| BOGO, Upsells, Direct Checkout, Quick View, Side Cart · Cross-site Scripting High7.1EPSS 0.2%2026-10-06CVE Database V5CVE-2026-39750 Unauthenticated Cross Site Scripting (XSS) in StoreGrowth: Smart Sales Booster for WooCommerce \| BOGO, Upsells, Direct Checkout, Quick View, Side Cart <= 2.0.6 versions. EPSS 0.2%Vulnerability weDevs #cwe-79	CVE Database V5	2026-10-06
Medium	6.5	EPSS 0.3%	CVE-2026-39749App for Cloudflare® · Missing Authorization Medium6.5EPSS 0.3%2026-10-06CVE Database V5CVE-2026-39749 Subscriber Broken Access Control in App for Cloudflare® <= 1.10.1 versions. EPSS 0.3%Vulnerability digitalpoint #cwe-862	CVE Database V5	2026-10-06
High	7.1	EPSS 0.2%	CVE-2026-39748EduMall · Cross-site Scripting High7.1EPSS 0.2%2026-10-06CVE Database V5CVE-2026-39748 Unauthenticated Cross Site Scripting (XSS) in EduMall <= 4.5.3 versions. EPSS 0.2%Vulnerability ThemeMove #cwe-79	CVE Database V5	2026-10-06
High	8.5	EPSS 0.3%	CVE-2026-39747Woffice · SQL Injection High8.5EPSS 0.3%2026-10-06CVE Database V5CVE-2026-39747 Subscriber SQL Injection in Woffice <= 5.4.35 versions. EPSS 0.3%Vulnerability WofficeIO #cwe-89	CVE Database V5	2026-10-06
Critical	9.3	EPSS 0.4%	CVE-2026-39746Booknetic · SQL Injection Critical9.3EPSS 0.4%2026-10-06CVE Database V5CVE-2026-39746 Unauthenticated SQL Injection in Booknetic <= 4.8.5 versions. EPSS 0.4%Vulnerability fs-code #cwe-89	CVE Database V5	2026-10-06
High	7.1	EPSS 0.2%	CVE-2026-39745Contact Form to DB by BestWebSoft · Cross-site Scripting High7.1EPSS 0.2%2026-10-06CVE Database V5CVE-2026-39745 Unauthenticated Cross Site Scripting (XSS) in Contact Form to DB by BestWebSoft <= 1.7.6 versions. EPSS 0.2%Vulnerability bestweblayout #cwe-79	CVE Database V5	2026-10-06
High	7.1	EPSS 0.2%	CVE-2026-39731Database for CF7 · Cross-site Scripting High7.1EPSS 0.2%2026-10-06CVE Database V5CVE-2026-39731 Unauthenticated Cross Site Scripting (XSS) in Database for CF7 <= 1.2.6 versions. EPSS 0.2%Vulnerability code4life #cwe-79	CVE Database V5	2026-10-06
High	7.1	EPSS 0.3%	CVE-2026-39730Wise Chat · Missing Authorization High7.1EPSS 0.3%2026-10-06CVE Database V5CVE-2026-39730 CVE-2026-39730 is a Missing Authorization vulnerability in Marcin Wise Chat that affects versions up to and including 3.4.3. The flaw allows exploitation of incorrectly configured access control security levels, potentially leading to unauthorized actions that impact integrity and availability. The vulnerability has a high severity rating with a CVSS score of 7.1. There is no information about an available patch or vendor advisory, and no known exploits in the wild have been reported. EPSS 0.3%Vulnerability Marcin #cwe-862	CVE Database V5	2026-10-06
High	7.2	EPSS 0.3%	CVE-2026-39729Edwiser Bridge · Insertion of Sensitive Information Into Sent Data High7.2EPSS 0.3%2026-10-06CVE Database V5CVE-2026-39729 Unauthenticated Sensitive Data Exposure in Edwiser Bridge <= 4.3.4 versions. EPSS 0.3%Vulnerability WisdmLabs #cwe-201	CVE Database V5	2026-10-06
High	7.2	EPSS 0.3%	CVE-2026-39728Instapage Plugin · Server-Side Request Forgery (SSRF) High7.2EPSS 0.3%2026-10-06CVE Database V5CVE-2026-39728 Unauthenticated Server Side Request Forgery (SSRF) in Instapage Plugin <= 3.7.2 versions. EPSS 0.3%Vulnerability instapagedev #cwe-918	CVE Database V5	2026-10-06

Showing 661–680 of 811 results