Threat database

3 threats

Threat database
Severity	CVSS	Signals	Threat	Source	Published
High	8.5	EPSS 0.4%	CVE-2026-74013eShipper Commerce · SQL Injection High8.5EPSS 0.4%2026-08-20CVE Database V5CVE-2026-74013 CVE-2026-74013 is a high severity SQL Injection vulnerability affecting WordPress.com eShipper Commerce versions up to 2.16.13. It involves improper neutralization of special elements in SQL commands, specifically in the subscriber functionality. This vulnerability allows an attacker with low privileges and no user interaction to cause a partial impact on availability and a complete impact on confidentiality. No official patch or remediation information is provided in the available data. EPSS 0.4%Vulnerability WordPress.com #cwe-89 #ghsa-h622-xrc2-7vh7	CVE Database V5	2026-08-20
High	7.1	EPSS 0.3%	CVE-2026-56040Gutenverse Form · Cross-site Scripting High7.1EPSS 0.3%2026-06-26CVE Database V5CVE-2026-56040 Unauthenticated Cross Site Scripting (XSS) in Gutenverse Form <= 2.4.7 versions. EPSS 0.3%Vulnerability WordPress.com #cwe-79	CVE Database V5	2026-06-26
High	7.1	EPSS 0.3%	CVE-2026-56039Quick Interest Slider · Cross-site Scripting High7.1EPSS 0.3%2026-06-26CVE Database V5CVE-2026-56039 Unauthenticated Cross Site Scripting (XSS) in Quick Interest Slider <= 3.1.6 versions. EPSS 0.3%Vulnerability WordPress.com #cwe-79	CVE Database V5	2026-06-26

Showing 1–3 of 3 results