Security Operations
Threat Intelligence
โ“
CVETitleSeverityCVSSVendor / ProductExploitationSources
CVE-2026-119163 CVE-2026-119163 - The FunnelKit Automations โ€“ Email Marketing Automation and CRM for WordPress & WooCommerce plugin for WordPress is vulne HIGH 7.5 wordpress Unknown 1 Details
CVE-2026-119162 CVE-2026-119162 - The User Submitted Posts โ€“ Enable Users to Submit Posts from the Front End plugin for WordPress is vulnerable to Stored HIGH 7.2 wordpress Unknown 1 Details
CVE-2026-119089 CVE-2026-119089 - The ThirstyAffiliates โ€“ Affiliate Links, Link Branding, Link Tracking & Marketing Plugin plugin for WordPress is vulnera HIGH 7.2 wordpress Unknown 1 Details
CVE-2026-119065 CVE-2026-119065 - The Shipping Zones by Drawing for WooCommerce plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the HIGH 7.2 wordpressgoogle Unknown 1 Details
CVE-2026-118070 CVE-2026-118070 - The Welcart e-Commerce plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'gid' parameter in all HIGH 7.2 wordpress Unknown 1 Details
CVE-2026-116557 CVE-2026-116557 - The WP Booking System - Booking Calendar plugin for WordPress is vulnerable to unauthorized modification of data due to CRITICAL 9.1 wordpress Unknown 1 Details
CVE-2026-116548 CVE-2026-116548 - The VikRentCar Car Rental Management System plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'o HIGH 7.2 wordpress Unknown 1 Details
CVE-2026-116546 CVE-2026-116546 - The WP Job Portal โ€“ AI-Powered Recruitment System for Company or Job Board website plugin for WordPress is vulnerable to MEDIUM 6.4 wordpress Unknown 1 Details
CVE-2026-116522 CVE-2026-116522 - The Relevanssi โ€“ A Better Search plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'comment' par HIGH 7.2 wordpress Unknown 1 Details
CVE-2026-115840 CVE-2026-115840 - The VikRentCar Car Rental Management System plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'p HIGH 7.2 wordpress Unknown 1 Details
CVE-2026-111254 CVE-2026-111254 - The W3 Total Cache plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'comment' parameter in all HIGH 7.2 wordpress Unknown 1 Details
CVE-2026-111109 CVE-2026-111109 - The Webmention plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Open Graph og:title meta tag of MEDIUM 6.1 wordpress Unknown 1 Details
CVE-2026-110251 CVE-2026-110251 - The Photo Reviews for WooCommerce plugin for WordPress is vulnerable to unauthorized Media Library File Deletion in all MEDIUM 5.4 wordpress Unknown 1 Details
CVE-2026-109386 CVE-2026-109386 - The Hustle โ€“ Email Marketing, Lead Generation, Optins, Popups plugin for WordPress is vulnerable to authorization bypass MEDIUM 4.3 wordpress Unknown 1 Details
CVE-2026-109220 CVE-2026-109220 - The PDF Invoice for WooCommerce + Drag and Drop Template Builder plugin for WordPress is vulnerable to PHP Object Inject CRITICAL 9.8 wordpress Unknown 1 Details
CVE-2026-109217 CVE-2026-109217 - The PDF Invoices & Packing Slips for WooCommerce plugin for WordPress is vulnerable to Sensitive Information Exposure in MEDIUM 5.3 wordpress Unknown 1 Details
CVE-2026-107765 CVE-2026-107765 - The Discussion Board โ€“ WordPress Forum Plugin plugin for WordPress is vulnerable to Stored Cross-Site Scripting in versi MEDIUM 6.4 wordpress Unknown 1 Details
CVE-2026-107750 CVE-2026-107750 - The PDF Invoices & Packing Slips for WooCommerce plugin for WordPress is vulnerable to Stored Cross-Site Scripting via t HIGH 7.2 wordpress Unknown 1 Details
CVE-2026-107653 CVE-2026-107653 - The SureCart โ€“ Ecommerce Made Easy For Selling Physical Products, Digital Downloads, Subscriptions, Donations, & Payment HIGH 7.2 wordpress Unknown 1 Details
CVE-2026-94361 CVE-2026-94361 - The Payable Payment Gateway for WooCommerce WordPress plugin before 1.3.1 does not verify the authenticity of an incomin MEDIUM 5.3 wordpress Unknown 1 Details