Threat database

811 threats

Threat database
Severity	CVSS	Signals	Threat	Source	Published
Medium	6.5	EPSS 0.2%	CVE-2026-39727WC Fields Factory · Cross-site Scripting Medium6.5EPSS 0.2%2026-10-06CVE Database V5CVE-2026-39727 Subscriber Cross Site Scripting (XSS) in WC Fields Factory <= 4.1.12 versions. EPSS 0.2%Vulnerability Saravana Kumar K #cwe-79	CVE Database V5	2026-10-06
High	7.1	EPSS 0.2%	CVE-2026-39726Lumise Product Designer · Cross-site Scripting High7.1EPSS 0.2%2026-10-06CVE Database V5CVE-2026-39726 Unauthenticated Cross Site Scripting (XSS) in Lumise Product Designer <= 2.1.1 versions. EPSS 0.2%Vulnerability Lumise NEO #cwe-79	CVE Database V5	2026-10-06
High	7.1	EPSS 0.2%	CVE-2026-39724HTTP Requests Manager · Cross-site Scripting High7.1EPSS 0.2%2026-10-06CVE Database V5CVE-2026-39724 Unauthenticated Cross Site Scripting (XSS) in HTTP Requests Manager <= 1.3.11 versions. EPSS 0.2%Vulnerability veppa #cwe-79	CVE Database V5	2026-10-06
High	7.1	EPSS 0.2%	CVE-2026-39722WPLMS · Cross-site Scripting High7.1EPSS 0.2%2026-10-06CVE Database V5CVE-2026-39722 Unauthenticated Cross Site Scripting (XSS) in WPLMS <= 4.972 versions. EPSS 0.2%Vulnerability VibeThemes #cwe-79	CVE Database V5	2026-10-06
High	7.1	EPSS 0.2%	CVE-2026-39720Mapster WP Maps · Cross-site Scripting High7.1EPSS 0.2%2026-10-06CVE Database V5CVE-2026-39720 Unauthenticated Cross Site Scripting (XSS) in Mapster WP Maps <= 2.0.4 versions. EPSS 0.2%Vulnerability mapster #cwe-79	CVE Database V5	2026-10-06
High	7.2	EPSS 0.3%	CVE-2026-39719PDF Smart Viewer for Elementor · Server-Side Request Forgery (SSRF) High7.2EPSS 0.3%2026-10-06CVE Database V5CVE-2026-39719 Unauthenticated Server Side Request Forgery (SSRF) in PDF Smart Viewer for Elementor <= 1.0.4 versions. EPSS 0.3%Vulnerability DeKnows #cwe-918	CVE Database V5	2026-10-06
High	7.1	EPSS 0.3%	CVE-2026-32581Mooberry Book Manager · SQL Injection High7.1EPSS 0.3%2026-10-06CVE Database V5CVE-2026-32581 Subscriber SQL Injection in Mooberry Book Manager 4.16.2 versions. EPSS 0.3%Vulnerability mooberrydreams #cwe-89	CVE Database V5	2026-10-06
High	7.5	EPSS 0.3%	CVE-2026-32580WooCommerce Lottery · SQL Injection High7.5EPSS 0.3%2026-10-06CVE Database V5CVE-2026-32580 Unauthenticated SQL Injection in WooCommerce Lottery <= 2.2.9 versions. EPSS 0.3%Vulnerability wpgenie #cwe-89	CVE Database V5	2026-10-06
Critical	10.0	EPSS 0.5%	CVE-2026-32579Kognetiks Chatbot for WordPress · Unrestricted Upload of File with Dangerous Type Critical10.0EPSS 0.5%2026-10-06CVE Database V5CVE-2026-32579 Unauthenticated Arbitrary File Upload in Kognetiks Chatbot for WordPress <= 2.4.9 versions. EPSS 0.5%Vulnerability kognetiks #cwe-434	CVE Database V5	2026-10-06
High	7.1	EPSS 0.3%	CVE-2026-32578ECPay Ecommerce for WooCommerce · Missing Authorization High7.1EPSS 0.3%2026-10-06CVE Database V5CVE-2026-32578 Subscriber Broken Access Control in ECPay Ecommerce for WooCommerce <= 1.1.2606090 versions. EPSS 0.3%Vulnerability techsupport #cwe-862	CVE Database V5	2026-10-06
High	7.1	EPSS 0.2%	CVE-2026-32577Frontend File Manager · Cross-site Scripting High7.1EPSS 0.2%2026-10-06CVE Database V5CVE-2026-32577 Unauthenticated Cross Site Scripting (XSS) in Frontend File Manager <= 23.6 versions. EPSS 0.2%Vulnerability N-Media #cwe-79	CVE Database V5	2026-10-06
High	7.1	EPSS 0.2%	CVE-2026-32575SUMO Affiliates Pro · Cross-site Scripting High7.1EPSS 0.2%2026-10-06CVE Database V5CVE-2026-32575 Unauthenticated Cross Site Scripting (XSS) in SUMO Affiliates Pro <= 11.7.0 versions. EPSS 0.2%Vulnerability Fantastic Plugins #cwe-79	CVE Database V5	2026-10-06
High	7.1	EPSS 0.2%	CVE-2026-32574Smart Forms · Cross-site Scripting High7.1EPSS 0.2%2026-10-06CVE Database V5CVE-2026-32574 CVE-2026-32574 is a high-severity cross-site scripting (XSS) vulnerability in EDGARROJAS Smart Forms. It involves improper neutralization of input during web page generation, leading to a DOM-based XSS issue. The vulnerability affects versions from 0 up to and including 2.6.104. Exploitation requires user interaction and can impact confidentiality, integrity, and availability. No patch or official fix information is provided. EPSS 0.2%Vulnerability EDGARROJAS #cwe-79	CVE Database V5	2026-10-06
High	7.1	EPSS 0.2%	CVE-2026-32572WP User Frontend Pro · Cross-site Scripting High7.1EPSS 0.2%2026-10-06CVE Database V5CVE-2026-32572 Unauthenticated Cross Site Scripting (XSS) in WP User Frontend Pro <= 4.2.13 versions. EPSS 0.2%Vulnerability weDevs #cwe-79	CVE Database V5	2026-10-06
Medium	6.5	EPSS 0.2%	CVE-2026-32571Ohio Extra · Cross-site Scripting Medium6.5EPSS 0.2%2026-10-06CVE Database V5CVE-2026-32571 Subscriber Cross Site Scripting (XSS) in Ohio Extra <= 3.6.8 versions. EPSS 0.2%Vulnerability Colabrio #cwe-79	CVE Database V5	2026-10-06
High	7.1	EPSS 0.2%	CVE-2026-32570Progressify - Progressive Web App (PWA) · Cross-site Scripting High7.1EPSS 0.2%2026-10-06CVE Database V5CVE-2026-32570 Unauthenticated Cross Site Scripting (XSS) in Progressify - Progressive Web App (PWA) <= 1.6.0 versions. EPSS 0.2%Vulnerability DaftPlug #cwe-79	CVE Database V5	2026-10-06
High	7.1	EPSS 0.2%	CVE-2026-32569WP Media folder · Cross-site Scripting High7.1EPSS 0.2%2026-10-06CVE Database V5CVE-2026-32569 Unauthenticated Cross Site Scripting (XSS) in WP Media folder <= 6.2.2 versions. EPSS 0.2%Vulnerability Joomunited #cwe-79	CVE Database V5	2026-10-06
Critical	9.9	EPSS 0.7%	CVE-2026-32568WooCommerce Designer Pro · Code Injection Critical9.9EPSS 0.7%2026-10-06CVE Database V5CVE-2026-32568 Subscriber Remote Code Execution (RCE) in WooCommerce Designer Pro <= 1.9.33 versions. EPSS 0.7%Vulnerability JMAPlugins #cwe-94	CVE Database V5	2026-10-06
Critical	9.3	EPSS 0.4%	CVE-2026-32557WooCommerce Appointments · SQL Injection Critical9.3EPSS 0.4%2026-10-06CVE Database V5CVE-2026-32557 Unauthenticated SQL Injection in WooCommerce Appointments <= 5.3.2 versions. EPSS 0.4%Vulnerability Bot Verification bookingwp.com: Verifying that you are not a robot...#cwe-89	CVE Database V5	2026-10-06
High	8.5	EPSS 0.3%	CVE-2026-25434WP2LEADS · SQL Injection High8.5EPSS 0.3%2026-10-06CVE Database V5CVE-2026-25434 Subscriber SQL Injection in WP2LEADS <= 3.5.7 versions. EPSS 0.3%Vulnerability Tobias @Saleswonder.biz #cwe-89	CVE Database V5	2026-10-06

Showing 681–700 of 811 results