Security Operations
Threat Intelligence
โ“
CVETitleSeverityCVSSVendor / ProductExploitationSources
CVE-2026-116535 CVE-2026-116535 - The SEOPress โ€“ AI SEO Plugin & On-site SEO plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'di MEDIUM 6.4 wordpress Unknown 1 Details
CVE-2026-116512 CVE-2026-116512 - The Project Manager โ€“ AI Powered Project Management, Task Management, Kanban Board & Time Tracker plugin for WordPress i CRITICAL 9.8 wordpress Unknown 1 Details
CVE-2026-111592 CVE-2026-111592 - The Co-Authors, Multiple Authors and Guest Authors in an Author Box with PublishPress Authors plugin for WordPress is vu MEDIUM 6.4 wordpress Unknown 1 Details
CVE-2026-111070 CVE-2026-111070 - The Content Pilot โ€“ Autoblogging & Affiliate Marketing Suite plugin for WordPress is vulnerable to Stored Cross-Site Scr MEDIUM 5.4 wordpress Unknown 1 Details
CVE-2026-110023 CVE-2026-110023 - The WP Data Access โ€“ App Builder for Tables, Forms, Dashboards, Charts & Maps plugin for WordPress is vulnerable to Sens MEDIUM 5.9 wordpress Unknown 1 Details
CVE-2026-107759 CVE-2026-107759 - The WPO365 | MICROSOFT 365 GRAPH MAILER plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'Subje HIGH 7.2 microsoftwordpress Unknown 1 Details
CVE-2026-104012 CVE-2026-104012 - The Rox Appointment Booking โ€“ Appointment Booking Scheduling Solution plugin for WordPress is vulnerable to Privilege Es HIGH 8.8 wordpress Unknown 1 Details
CVE-2026-103997 CVE-2026-103997 - The Redux Framework plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 4.5 MEDIUM 6.5 wordpress Unknown 1 Details
CVE-2026-103962 CVE-2026-103962 - The User Frontend โ€“ Membership, User Registration, User Profile, User Directory & Content Restriction with Frontend Post MEDIUM 6.1 wordpress Unknown 1 Details
CVE-2026-103898 CVE-2026-103898 - The Wp Social Login and Register Social Counter plugin for WordPress is vulnerable to Authentication Bypass in all versi HIGH 8.1 wordpress Unknown 1 Details
CVE-2025-9462 CVE-2025-9462 - The WP2LEADS plugin for WordPress is vulnerable to time-based SQL Injection via the โ€˜orderโ€™ parameter in all versions up MEDIUM 6.5 wordpress Unknown 1 Details
CVE-2025-11455 CVE-2025-11455 - The Perfect Images plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability c MEDIUM 4.3 wordpress Unknown 1 Details
CVE-2026-90960 CVE-2026-90960 - The Seraphinite Accelerator plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, MEDIUM 5.3 wordpress Unknown 1 Details
CVE-2026-89270 CVE-2026-89270 - The Popup Builder โ€“ Create highly converting, mobile friendly marketing popups. plugin for WordPress is vulnerable to au CRITICAL 9.1 wordpress Unknown 1 Details
CVE-2026-88942 CVE-2026-88942 - The Product Filter for WooCommerce by WBW plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via 'wpf_ MEDIUM 6.1 wordpress Unknown 1 Details
CVE-2026-120040 CVE-2026-120040 - The Mail logging & Catcher plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, a HIGH 7.5 wordpress Unknown 1 Details
CVE-2026-120019 CVE-2026-120019 - The W3 Total Cache plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'comment' parameter in all MEDIUM 5.4 wordpress Unknown 1 Details
CVE-2026-11396 CVE-2026-11396 - The Product Filter for WooCommerce by WBW plugin for WordPress is vulnerable to Missing Authorization / Information Disc MEDIUM 5.3 wordpress Unknown 1 Details
CVE-2026-119980 CVE-2026-119980 - The UsersWP โ€“ Front-end login form, User Registration, User Profile & Members Directory plugin for WordPress is vulnerab MEDIUM 6.5 wordpress Unknown 1 Details
CVE-2026-119166 CVE-2026-119166 - The Welcart e-Commerce plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and MEDIUM 5.3 wordpress Unknown 1 Details