Security Operations
Threat Intelligence
โ“
CVETitleSeverityCVSSVendor / ProductExploitationSources
CVE-2026-115840 CVE-2026-115840 - The VikRentCar Car Rental Management System plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'p HIGH 7.2 wordpress Unknown 1 Details
CVE-2026-111254 CVE-2026-111254 - The W3 Total Cache plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'comment' parameter in all HIGH 7.2 wordpress Unknown 1 Details
CVE-2026-111109 CVE-2026-111109 - The Webmention plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Open Graph og:title meta tag of MEDIUM 6.1 wordpress Unknown 1 Details
CVE-2026-110251 CVE-2026-110251 - The Photo Reviews for WooCommerce plugin for WordPress is vulnerable to unauthorized Media Library File Deletion in all MEDIUM 5.4 wordpress Unknown 1 Details
CVE-2026-109386 CVE-2026-109386 - The Hustle โ€“ Email Marketing, Lead Generation, Optins, Popups plugin for WordPress is vulnerable to authorization bypass MEDIUM 4.3 wordpress Unknown 1 Details
CVE-2026-109220 CVE-2026-109220 - The PDF Invoice for WooCommerce + Drag and Drop Template Builder plugin for WordPress is vulnerable to PHP Object Inject CRITICAL 9.8 wordpress Unknown 1 Details
CVE-2026-109217 CVE-2026-109217 - The PDF Invoices & Packing Slips for WooCommerce plugin for WordPress is vulnerable to Sensitive Information Exposure in MEDIUM 5.3 wordpress Unknown 1 Details
CVE-2026-107765 CVE-2026-107765 - The Discussion Board โ€“ WordPress Forum Plugin plugin for WordPress is vulnerable to Stored Cross-Site Scripting in versi MEDIUM 6.4 wordpress Unknown 1 Details
CVE-2026-107750 CVE-2026-107750 - The PDF Invoices & Packing Slips for WooCommerce plugin for WordPress is vulnerable to Stored Cross-Site Scripting via t HIGH 7.2 wordpress Unknown 1 Details
CVE-2026-107653 CVE-2026-107653 - The SureCart โ€“ Ecommerce Made Easy For Selling Physical Products, Digital Downloads, Subscriptions, Donations, & Payment HIGH 7.2 wordpress Unknown 1 Details
CVE-2026-94361 CVE-2026-94361 - The Payable Payment Gateway for WooCommerce WordPress plugin before 1.3.1 does not verify the authenticity of an incomin MEDIUM 5.3 wordpress Unknown 1 Details
CVE-2026-92294 CVE-2026-92294 - The Spectra Gutenberg Blocks โ€“ Website Builder for the Block Editor plugin for WordPress is vulnerable to limited file d MEDIUM 6.5 wordpress Unknown 1 Details
CVE-2026-82214 CVE-2026-82214 - The Quick Event Manager WordPress plugin before 9.19 does not verify the status or type of the requested post before ret MEDIUM 5.3 wordpress Unknown 1 Details
CVE-2026-118638 CVE-2026-118638 - The Mapster WP Maps WordPress plugin before 2.0.6 does not perform any authorization check on a REST API route that writ HIGH 7.5 wordpress Unknown 1 Details
CVE-2026-118629 CVE-2026-118629 - The All-in-One Video Gallery WordPress plugin before 5.0.0 does not check a video's publication status before rendering MEDIUM 5.3 wordpress Unknown 1 Details
CVE-2026-118438 CVE-2026-118438 - The Firelight Lightbox WordPress plugin before 2.3.24 does not properly escape image attribute values before processing MEDIUM 6.8 wordpress Unknown 1 Details
CVE-2026-118437 CVE-2026-118437 - The BuddyForms WordPress plugin before 2.10.1 does not properly verify ownership before deleting guest-uploaded attachme LOW 3.7 wordpress Unknown 1 Details
CVE-2026-118185 CVE-2026-118185 - The Security Optimizer WordPress plugin before 1.6.9 does not limit the number of two-factor authentication codes that HIGH 7.5 wordpress Unknown 1 Details
CVE-2026-118184 CVE-2026-118184 - The Premium Packages WordPress plugin before 7.2.2 does not prevent unauthenticated visitors from overwriting the store MEDIUM 5.3 wordpress Unknown 1 Details
CVE-2026-118043 CVE-2026-118043 - The Bulk Media Register WordPress plugin before 2.01 does not properly validate a user-supplied path before moving a fil HIGH 7.2 wordpress Unknown 1 Details