Security Operations
Threat Intelligence
โ“
CVETitleSeverityCVSSVendor / ProductExploitationSources
CVE-2026-118599 CVE-2026-118599 - A file overwrite vulnerability exists in Epiphany when installing WebExtension packages from .xpi files. In src/webexte MEDIUM 5.5 Unknown 1 Details
CVE-2026-118598 CVE-2026-118598 - A logic error in Epiphany's site permission handling can cause camera and microphone access to be granted when the user MEDIUM 6.5 Unknown 1 Details
CVE-2026-116752 CVE-2026-116752 - The GeoDirectory โ€“ WP Business Directory Plugin and Classified Listings Directory plugin for WordPress is vulnerable to MEDIUM 6.4 wordpress Unknown 1 Details
CVE-2026-109231 CVE-2026-109231 - The Germanized for WooCommerce plugin for WordPress is vulnerable to Unauthorized Access of Private Data via Activation MEDIUM 4.3 wordpress Unknown 1 Details
CVE-2026-109197 CVE-2026-109197 - The WP Directory Kit plugin for WordPress is vulnerable to generic SQL Injection via the 'idfield' parameter in all vers HIGH 7.5 wordpress Unknown 1 Details
CVE-2026-107711 CVE-2026-107711 - The FlexStock โ€“ Product Stock Sync with Google Sheets for WooCommerce plugin for WordPress is vulnerable to Stored Cross MEDIUM 6.4 wordpressgoogle Unknown 1 Details
CVE-2026-104926 CVE-2026-104926 - The WooCommerce Extra Product Options Pro plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the ' MEDIUM 6.1 wordpress Unknown 1 Details
CVE-2026-100151 CVE-2026-100151 - The Ninja Forms โ€“ Contact Form Builder with Calculators, Quizzes, Signatures & AI Form Builder plugin for WordPress is v MEDIUM 6.1 wordpress Unknown 1 Details
CVE-2026-120075 CVE-2026-120075 - The WP Activity Log plugin for WordPress is vulnerable to Stored Cross-Site Scripting in all versions up to, and includi HIGH 7.2 wordpress Unknown 1 Details
CVE-2026-119160 CVE-2026-119160 - The Smart Post โ€“ Post Grid, Post Carousel, Post Slider Gutenberg Blocks for Blog & News plugin for WordPress is vulnerab MEDIUM 6.4 wordpress Unknown 1 Details
CVE-2026-118235 CVE-2026-118235 - The SimpleForm โ€“ Form Maker to Chat Apps with Quiz, Poll and Multi Lead Notifications plugin for WordPress is vulnerable CRITICAL 9.8 wordpress Unknown 1 Details
CVE-2026-117681 CVE-2026-117681 - A flaw was found in konflux-ci. This vulnerability allows privilege escalation when the user interface proxy automatical HIGH 8.0 Unknown 1 Details
CVE-2026-110530 CVE-2026-110530 - The FeedWordPress plugin for WordPress is vulnerable to Stored Cross-Site Scripting in versions up to, and including, 20 HIGH 7.2 wordpress Unknown 1 Details
CVE-2026-109367 CVE-2026-109367 - The All in One SEO โ€“ AI SEO Plugin to Boost SEO Rankings & Traffic (Schema, Local SEO, Sitemap & SEO Insights) plugin fo MEDIUM 5.3 wordpress Unknown 1 Details
CVE-2026-103915 CVE-2026-103915 - The Booking for Appointments and Events Calendar โ€“ Amelia plugin for WordPress is vulnerable to Sensitive Information Ex MEDIUM 5.3 wordpress Unknown 1 Details
CVE-2026-103882 CVE-2026-103882 - The Acadlix LMS โ€“ AI Quiz Maker, Online Exam & Course Plugin for WordPress plugin for WordPress is vulnerable to arbitra CRITICAL 9.1 wordpress Unknown 1 Details
CVE-2026-101325 CVE-2026-101325 - The Newsletters plugin for WordPress is vulnerable to time-based SQL Injection via the 'id' parameter in all versions up MEDIUM 5.3 wordpress Unknown 1 Details
CVE-2026-120070 CVE-2026-120070 - The User Frontend โ€“ Membership, User Registration, User Profile, User Directory & Content Restriction with Frontend Post HIGH 8.8 wordpress Unknown 1 Details
CVE-2026-119096 CVE-2026-119096 - The Uncanny Toolkit for LearnDash plugin for WordPress is vulnerable to Authentication Bypass in versions up to, and inc CRITICAL 9.8 wordpress Unknown 1 Details
CVE-2026-118057 CVE-2026-118057 - The Shield Security โ€“ Smart Bot Blocking, Brute-Force Login Protection & File Scanning plugin for WordPress is vulnerabl HIGH 7.2 wordpress Unknown 1 Details