|
cve-2026-104394
|
7.1 (v3.1)
|
WordPress Charitable plugin <= 1.8.12.3 - Cross Site S…
|
Syed Balkhi
|
Charitable
|
2026-10-06T08:35:13.805Z |
2026-10-06T10:31:27.975Z |
|
cve-2026-104387
|
7.2 (v3.1)
|
WordPress PowerPress Podcasting plugin <= 11.17.9 - Br…
|
blubrry
|
PowerPress Podcasting
|
2026-10-06T08:35:13.107Z |
2026-10-06T10:31:28.112Z |
|
cve-2026-104385
|
7.5 (v3.1)
|
WordPress Groundhogg plugin <= 4.8.3 - Sensitive Data …
|
Adrian Tobey
|
Groundhogg
|
2026-10-06T08:35:12.401Z |
2026-10-06T10:31:28.298Z |
|
cve-2026-102915
|
8.5 (v3.1)
|
WordPress WPO365 plugin <= 44.1 - Broken Access Contro…
|
Marco van Wieren
|
WPO365
|
2026-10-06T08:35:10.971Z |
2026-10-06T10:31:28.455Z |
|
cve-2026-102387
|
7.5 (v3.1)
|
WordPress Xserver Migrator plugin <= 1.6.6 - Sensitive…
|
XServer
|
Xserver Migrator
|
2026-10-06T08:35:10.255Z |
2026-10-06T10:31:28.617Z |
|
cve-2026-100518
|
5.3 (v3.1)
|
WordPress Advanced Google reCAPTCHA plugin <= 5.40 - B…
|
WebFactory
|
Advanced Google reCAPTCHA
|
2026-10-06T08:35:09.522Z |
2026-10-06T10:31:28.757Z |
|
cve-2026-97308
|
4.8 (v3.1)
|
WordPress Login Lockdown plugin <= 2.17 - Bypass Vulne…
|
WebFactory
|
Login Lockdown
|
2026-10-06T08:35:08.814Z |
2026-10-06T10:31:28.890Z |
|
cve-2026-95594
|
8.1 (v3.1)
|
WordPress SMS Alert Order Notifications plugin <= 4.0.…
|
Cozy Vision Technologies Pvt. Ltd.
|
SMS Alert Order Notifications
|
2026-10-06T08:35:08.065Z |
2026-10-12T14:07:16.423Z |
|
cve-2026-95526
|
7.3 (v3.1)
|
WordPress BEAR plugin <= 1.2.2 - Broken Access Control…
|
RealMag777
|
BEAR
|
2026-10-06T08:35:07.323Z |
2026-10-06T10:31:29.166Z |
|
cve-2026-94675
|
7.1 (v3.1)
|
WordPress Fluent Forms Pro Add On Pack plugin <= 6.2.1…
|
Fluent Forms Free vs Pro
|
Fluent Forms Pro Add On Pack
|
2026-10-06T08:35:06.593Z |
2026-10-06T10:31:29.335Z |
|
cve-2026-66588
|
N/A
|
{'providerMetadata': {'orgId': '21595511-bba5-4825-b968-b78d1f9984a3', 'shortName': 'Patchstack', 'dateUpdated': '2026-10-13T06:09:30.600Z'}, 'rejectedReasons': [{'lang': 'en', 'value': 'This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. False-positive.', 'supportingMedia': [{'type': 'text/html', 'base64': False, 'value': 'This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. False-positive.'}]}], 'x_generator': {'engine': 'Vulnogram 1.0.5'}}
|
N/A
|
N/A
|
2026-10-06T08:35:05.899Z |
2026-10-13T06:09:30.600Z |
|
cve-2026-62072
|
8.8 (v3.1)
|
WordPress Progress Planner plugin <= 1.10.0 - Broken A…
|
Progress Planner
|
Progress Planner
|
2026-10-06T08:35:05.157Z |
2026-10-06T10:31:29.627Z |
|
cve-2026-48199
|
7.5 (v3.1)
|
WordPress Sermon'e plugin <= 1.0.2 - Broken Access Con…
|
Beplusthemes
|
Sermon'e
|
2026-10-06T08:35:04.446Z |
2026-10-06T10:31:29.791Z |
|
cve-2026-48197
|
7.2 (v3.1)
|
WordPress PublishPress Capabilities plugin <= 2.45.0 -…
|
PublishPress
|
PublishPress Capabilities
|
2026-10-06T08:35:03.720Z |
2026-10-06T10:31:29.926Z |
|
cve-2026-42638
|
7.5 (v3.1)
|
WordPress Easy Digital Downloads plugin <= 3.7.1 - Bro…
|
Awesomemotive
|
Easy Digital Downloads
|
2026-10-06T08:35:02.876Z |
2026-10-07T07:41:51.824Z |
|
cve-2026-42637
|
6.5 (v3.1)
|
WordPress PayPlug for WooCommerce (Official) plugin <=…
|
Payplug
|
PayPlug for WooCommerce (Official)
|
2026-10-06T08:35:02.145Z |
2026-10-06T10:31:30.233Z |
|
cve-2026-42636
|
7.1 (v3.1)
|
WordPress WP Cookie Notice for GDPR, CCPA & ePrivacy C…
|
WP Legal Pages
|
WP Cookie Notice for GDPR, CCPA & ePrivacy Consent
|
2026-10-06T08:35:01.411Z |
2026-10-06T10:31:30.386Z |
|
cve-2026-42635
|
7.1 (v3.1)
|
WordPress WooCommerce Simple Auctions plugin <= 3.0.10…
|
wpgenie
|
WooCommerce Simple Auctions
|
2026-10-06T08:35:00.661Z |
2026-10-06T10:31:30.527Z |
|
cve-2026-42634
|
7.1 (v3.1)
|
WordPress Video Background Block – Use video as backgr…
|
bPlugins
|
Video Background Block – Use video as background in the section.
|
2026-10-06T08:34:59.948Z |
2026-10-06T10:31:30.659Z |
|
cve-2026-42418
|
7.1 (v3.1)
|
WordPress Social Rocket plugin <= 1.3.5 - Cross Site S…
|
Socialrocket
|
Social Rocket
|
2026-10-06T08:34:59.233Z |
2026-10-07T07:41:55.087Z |
|
cve-2026-42417
|
9.3 (v3.1)
|
WordPress ARMember Premium plugin <= 7.8 - SQL Injecti…
|
reputeinfosystems
|
ARMember Premium
|
2026-10-06T08:34:58.496Z |
2026-10-06T10:31:30.946Z |
|
cve-2026-42416
|
8.5 (v3.1)
|
WordPress UDesign Core plugin <= 4.15.0 - SQL Injectio…
|
AndonDesign
|
UDesign Core
|
2026-10-06T08:34:57.756Z |
2026-10-06T10:31:31.076Z |
|
cve-2026-42415
|
9.3 (v3.1)
|
WordPress Porto Theme - Functionality plugin <= 3.9.3 …
|
p-themes
|
Porto Theme - Functionality
|
2026-10-06T08:34:57.024Z |
2026-10-06T10:31:31.207Z |
|
cve-2026-42414
|
8.5 (v3.1)
|
WordPress ListingPro plugin <= 2.9.12 - SQL Injection …
|
CridioStudio
|
ListingPro
|
2026-10-06T08:34:56.108Z |
2026-10-06T10:31:31.351Z |
|
cve-2026-42413
|
7.5 (v3.1)
|
WordPress Snapshotify – All-in-One Backup & Restore & …
|
DaftPlug
|
Snapshotify – All-in-One Backup & Restore & Migrate
|
2026-10-06T08:34:55.402Z |
2026-10-06T10:31:31.489Z |
|
cve-2026-41562
|
7.5 (v3.1)
|
WordPress Norvis Backup plugin <= 1.1.0 - Sensitive Da…
|
norvisgabriel
|
Norvis Backup
|
2026-10-06T08:34:54.683Z |
2026-10-06T10:31:31.621Z |
|
cve-2026-41561
|
7.5 (v3.1)
|
WordPress Museder RestoreOne plugin <= 2.7.276 - Sensi…
|
Adrian Lin
|
Museder RestoreOne
|
2026-10-06T08:34:53.939Z |
2026-10-06T10:31:31.857Z |
|
cve-2026-41560
|
7.5 (v3.1)
|
WordPress WXD Backup Lite plugin <= 1.0.2 - Broken Acc…
|
wxdlabs
|
WXD Backup Lite
|
2026-10-06T08:34:53.188Z |
2026-10-06T10:31:32.165Z |
|
cve-2026-41559
|
7.5 (v3.1)
|
WordPress SafeSnap – Verified WordPress Backup & Resto…
|
Pluginjoy
|
SafeSnap – Verified WordPress Backup & Restore
|
2026-10-06T08:34:52.473Z |
2026-10-06T10:31:32.284Z |
|
cve-2026-41555
|
9.3 (v3.1)
|
WordPress Newsletter Subscription Form – User Subscrip…
|
Weblizar – WordPress Themes & Plugin
|
Newsletter Subscription Form – User Subscriptions Form, Capture Email
|
2026-10-06T08:34:51.734Z |
2026-10-06T10:31:32.436Z |