CVE IDSeverityCVSSDescriptionDate
CVE-2026-119155HIGH7.5The wpForo Forum plugin for WordPress is vulnerable to time-based SQL Injection via the 'href[locale]' paramet…2026-11-07
CVE-2026-119164HIGH7.5The wpForo Forum plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and includi…2026-11-07
CVE-2026-119465MEDIUM5.3Insertion of Sensitive Information Into Sent Data vulnerability in WPVibes Elementor Addon Elements addon-elem…2026-11-07
CVE-2026-119473MEDIUM4.3Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) vulnerability in properfraction …2026-11-07
CVE-2026-119484MEDIUM6.3Cross-Site Request Forgery (CSRF) vulnerability in Supsystic Photo Gallery by Supsystic gallery-by-supsystic a…2026-11-07
CVE-2026-119486MEDIUM4.3Missing Authorization vulnerability in WP ManageNinja LLC FluentBoards fluent-boards allows Exploiting Incorre…2026-11-07
CVE-2026-119491MEDIUM4.3Missing Authorization vulnerability in David Lingren Media LIbrary Assistant media-library-assistant allows Ex…2026-11-07
CVE-2026-119493MEDIUM6.5Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Metaphor…2026-11-07
CVE-2026-119494MEDIUM5.3Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) vulnerability in Gemini Labs Sit…2026-11-07
CVE-2026-119500MEDIUM6.5Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in bPlugins…2026-11-07
CVE-2026-119502MEDIUM5.3Missing Authorization vulnerability in BdThemes Ultimate Store Kit Elementor Addons ultimate-store-kit allows …2026-11-07
CVE-2026-119507MEDIUM5.3Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) vulnerability in WPDeveloper Not…2026-11-07
CVE-2026-119511MEDIUM5.3Missing Authorization vulnerability in Saeed MC Woocommerce Wishlist smart-wishlist-for-more-convert allows Ex…2026-11-07
CVE-2026-119520MEDIUM6.5Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Brainsto…2026-11-07
CVE-2026-120514MEDIUM5.4The Zephyr Project Manager plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'zpm_prof…2026-11-07
CVE-2026-120532MEDIUM6.4The wpForo Forum plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'post[body]' parame…2026-11-07
CVE-2026-120548MEDIUM5.3The YML for Yandex Market plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions…2026-11-07
CVE-2026-120840MEDIUM4.3Missing Authorization vulnerability in ThemeGrill User Registration user-registration allows Exploiting Incorr…2026-11-07
CVE-2026-120842MEDIUM5.3Missing Authorization vulnerability in Brainstorm Force SureForms sureforms allows Exploiting Incorrectly Conf…2026-11-07
CVE-2026-120847MEDIUM4.3Missing Authorization vulnerability in Wpmet Metform metform allows Exploiting Incorrectly Configured Access C…2026-11-07
CVE-2026-120850MEDIUM6.5Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Elemento…2026-11-07
CVE-2026-120852MEDIUM5.3Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) vulnerability in Brainstorm Forc…2026-11-07
CVE-2026-120853MEDIUM5.3Missing Authorization vulnerability in Brainstorm Force CartFlows cartflows allows Exploiting Incorrectly Conf…2026-11-07
CVE-2026-121762HIGH8.8Cross-Site Request Forgery (CSRF) vulnerability in Blubrry Podcasting PowerPress Podcasting powerpress allows …2026-11-07
CVE-2026-121766MEDIUM5.4Missing Authorization vulnerability in Blubrry Podcasting PowerPress Podcasting powerpress allows Exploiting I…2026-11-07
CVE-2026-122668MEDIUM4.3Missing Authorization vulnerability in myCred myCred mycred allows Exploiting Incorrectly Configured Access Co…2026-11-07
CVE-2026-123464MEDIUM6.5Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Liquid W…2026-11-07
CVE-2026-123466MEDIUM5.3Missing Authorization vulnerability in LeapWorx Premium Blocks – Gutenberg Blocks for WordPress premium-blocks…2026-11-07
CVE-2026-123469MEDIUM5.3Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) vulnerability in Liquid Web / St…2026-11-07
CVE-2026-123959CRITICAL9.1A security flaw has been discovered in TOTOLINK CA300-PoE 6.2c.884. The impacted element is the function setLa…2026-11-07
CVE-2026-123960CRITICAL9.9A weakness has been identified in TOTOLINK CA300-PoE 6.2c.884. This affects the function setWanConfig of the f…2026-11-07
CVE-2026-61990MEDIUM4.3Missing Authorization vulnerability in WC Lovers WCFM Membership wc-multivendor-membership allows Exploiting I…2026-11-07
CVE-2026-95870HIGH7.5The wpForo Forum plugin for WordPress is vulnerable to generic SQL Injection via the 'data' parameter in all v…2026-11-07
CVE-2026-119478MEDIUM4.3Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) vulnerability in StylemixThemes …2026-11-07
CVE-2026-119490MEDIUM5.3Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) vulnerability in Made with Fuel …2026-11-07
CVE-2026-119492MEDIUM4.3Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) vulnerability in Metaphor Creati…2026-11-07
CVE-2026-119496MEDIUM5.3Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) vulnerability in David Lingren M…2026-11-07
CVE-2026-119501MEDIUM6.5Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in BdThemes…2026-11-07
CVE-2026-119508MEDIUM5.3Missing Authorization vulnerability in Mamunur Rashid Radius Booking — Booking Calendar for Appointments &…2026-11-07
CVE-2026-119513MEDIUM5.3Missing Authorization vulnerability in Ahmad JS Help Desk js-support-ticket allows Exploiting Incorrectly Conf…2026-11-07
CVE-2026-119523MEDIUM5.3Missing Authorization vulnerability in Cozmoslabs Paid Member Subscriptions paid-member-subscriptions allows E…2026-11-07
CVE-2026-119525MEDIUM4.3Missing Authorization vulnerability in WP Desk Dropshipping XML for WooCommerce dropshipping-xml-for-woocommer…2026-11-07
CVE-2026-120364MEDIUM6.5Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Untapwp …2026-11-07
CVE-2026-120365MEDIUM6.5Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Aguila T…2026-11-07
CVE-2026-120837MEDIUM4.3Missing Authorization vulnerability in Everest Forms Everest Forms everest-forms allows Exploiting Incorrectly…2026-11-07
CVE-2026-120857MEDIUM5.3Missing Authorization vulnerability in VideoWhisper.com 2Way VideoCalls and Random Chat webcam-2way-videochat …2026-11-07
CVE-2026-121571MEDIUM5.3Missing Authorization vulnerability in WP Desk Autopay dla WooCommerce pay-wp allows Exploiting Incorrectly Co…2026-11-07
CVE-2026-121724MEDIUM4.3Missing Authorization vulnerability in WebberZone Contextual Related Posts contextual-related-posts allows Exp…2026-11-07
CVE-2026-121783MEDIUM6.5Cross-Site Request Forgery (CSRF) vulnerability in Passionate Programmer Peter WP Data Access wp-data-access a…2026-11-07
CVE-2026-123148MEDIUM5.3Missing Authorization vulnerability in TMS IvyForms ivyforms allows Exploiting Incorrectly Configured Access C…2026-11-07
←104 / 8516→