Latest CVE Feed

  1. Home
  2. Vulnerabilities
  3. Latest
CVE Intelligence

Vulnerabilities published in the last 30 days. Filter by severity, exploit status, or attack vector.

All Critical Actively Exploited Remotely Exploitable
Last Updated Published CVSS Score
Score
Vulnerability
Published
6.5 MEDIUM
CVE-2026-96835 — WordPress King Addons for Elementor plugin <= 51.1.85 - Cross Site Scripting (XSS) vulner…

Contributor Cross Site Scripting (XSS) in King Addons for Elementor <= 51.1.85 versions.

Remote | Cross-Site Scripting
Sep 30, 2026 Sep 30, 2026
Sep 30, 2026
Sep 30, 2026
6.5 MEDIUM
CVE-2026-96834 — WordPress GiveWP plugin <= 4.16.9 - Sensitive Data Exposure vulnerability

Subscriber Sensitive Data Exposure in GiveWP <= 4.16.9 versions.

Remote | Information Disclosure
Sep 30, 2026 Sep 30, 2026
Sep 30, 2026
Sep 30, 2026
7.2 HIGH
CVE-2026-96833 — WordPress Ultimate Addons for Contact Form 7 plugin <= 3.5.51 - PHP Object Injection vuln…

Editor PHP Object Injection in Ultimate Addons for Contact Form 7 <= 3.5.51 versions.

ultimate_addons_for_contact_form_7 | Remote | Injection
Sep 30, 2026 Sep 30, 2026
Sep 30, 2026
Sep 30, 2026
7.2 HIGH
CVE-2026-96832 — WordPress Content Egg plugin <= 6.3.1 - PHP Object Injection vulnerability

Shop manager PHP Object Injection in Content Egg <= 6.3.1 versions.

content_egg | Remote | Injection
Sep 30, 2026 Sep 30, 2026
Sep 30, 2026
Sep 30, 2026
8.8 HIGH
CVE-2026-96831 — WordPress Themify Builder plugin <= 7.8.1 - PHP Object Injection vulnerability

Contributor PHP Object Injection in Themify Builder <= 7.8.1 versions.

Remote | Injection
Sep 30, 2026 Sep 30, 2026
Sep 30, 2026
Sep 30, 2026
7.1 HIGH
CVE-2026-96830 — WordPress GiveWP plugin <= 4.16.9 - Cross Site Scripting (XSS) vulnerability

Unauthenticated Cross Site Scripting (XSS) in GiveWP <= 4.16.9 versions.

Remote | Cross-Site Scripting
Sep 30, 2026 Sep 30, 2026
Sep 30, 2026
Sep 30, 2026
6.5 MEDIUM
CVE-2026-96829 — WordPress The Plus Addons for Elementor Page Builder Lite plugin <= 6.5.1 - Cross Site Sc…

Contributor Cross Site Scripting (XSS) in The Plus Addons for Elementor Page Builder Lite <= 6.5.1 versions.

the_plus_addons_for_elementor_page_builder_lite | Remote | Cross-Site Scripting
Sep 30, 2026 Sep 30, 2026
Sep 30, 2026
Sep 30, 2026
7.6 HIGH
CVE-2026-96828 — WordPress Category Discount Woocommerce plugin <= 5.18 - SQL Injection vulnerability

Administrator SQL Injection in Category Discount Woocommerce <= 5.18 versions.

Remote | Injection
Sep 30, 2026 Sep 30, 2026
Sep 30, 2026
Sep 30, 2026
7.6 HIGH
CVE-2026-96827 — WordPress Admin Notices Manager plugin <= 1.6.0 - SQL Injection vulnerability

Administrator SQL Injection in Admin Notices Manager <= 1.6.0 versions.

Remote | Injection
Sep 30, 2026 Sep 30, 2026
Sep 30, 2026
Sep 30, 2026
4.2 MEDIUM
CVE-2026-96825 — WordPress All In One WP Security & Firewall plugin <= 5.4.8 - Bypass Vulnerability vulner…

Subscriber Bypass Vulnerability in All In One WP Security & Firewall <= 5.4.8 versions.

Remote | Authentication
Sep 30, 2026 Sep 30, 2026
Sep 30, 2026
Sep 30, 2026
6.8 MEDIUM
CVE-2026-96824 — WordPress Template Kit – Import plugin <= 1.0.16 - Arbitrary File Deletion vulnerability

Editor Arbitrary File Deletion in Template Kit – Import <= 1.0.16 versions.

Remote | Path Traversal
Sep 30, 2026 Sep 30, 2026
Sep 30, 2026
Sep 30, 2026
7.5 HIGH
CVE-2026-96823 — WordPress Customer Reviews for WooCommerce plugin <= 5.120.0 - Arbitrary Content Deletion…

Unauthenticated Arbitrary Content Deletion in Customer Reviews for WooCommerce <= 5.120.0 versions.

customer_reviews_for_woocommerce | Remote | Authorization
Sep 30, 2026 Sep 30, 2026
Sep 30, 2026
Sep 30, 2026
9.3 CRITICAL
CVE-2026-96822 — WordPress Books Gallery plugin <= 4.8.3 - SQL Injection vulnerability

Unauthenticated SQL Injection in Books Gallery <= 4.8.3 versions.

Remote | Injection
Sep 30, 2026 Sep 30, 2026
Sep 30, 2026
Sep 30, 2026
6.3 MEDIUM
CVE-2026-96821 — WordPress FluentBoards plugin <= 2.0.12 - Privilege Escalation vulnerability

Subscriber Privilege Escalation in FluentBoards <= 2.0.12 versions.

Remote | Authorization
Sep 30, 2026 Sep 30, 2026
Sep 30, 2026
Sep 30, 2026
7.1 HIGH
CVE-2026-96820 — WordPress Awesome Support plugin <= 6.3.9 - Cross Site Scripting (XSS) vulnerability

Subscriber Cross Site Scripting (XSS) in Awesome Support <= 6.3.9 versions.

Remote | Cross-Site Scripting
Sep 30, 2026 Sep 30, 2026
Sep 30, 2026
Sep 30, 2026
7.1 HIGH
CVE-2026-96819 — WordPress oik plugin <= 4.15.4 - Cross Site Scripting (XSS) vulnerability

Subscriber Cross Site Scripting (XSS) in oik <= 4.15.4 versions.

oik | Remote | Cross-Site Scripting
Sep 30, 2026 Sep 30, 2026
Sep 30, 2026
Sep 30, 2026
7.5 HIGH
CVE-2026-96818 — WordPress WP Express Checkout (Accept PayPal Payments) plugin <= 2.4.9 - Broken Access Co…

Unauthenticated Broken Access Control in WP Express Checkout (Accept PayPal Payments) <= 2.4.9 versions.

Remote | Authorization
Sep 30, 2026 Sep 30, 2026
Sep 30, 2026
Sep 30, 2026
8.2 HIGH
CVE-2026-96817 — WordPress MakeCommerce for WooCommerce plugin <= 4.1.0 - Broken Access Control vulnerabil…

Subscriber Broken Access Control in MakeCommerce for WooCommerce <= 4.1.0 versions.

Remote | Authorization
Sep 30, 2026 Sep 30, 2026
Sep 30, 2026
Sep 30, 2026
7.1 HIGH
CVE-2026-96816 — WordPress Trusted Shops Easy Integration for WooCommerce plugin <= 2.0.6 - Cross Site Scr…

Unauthenticated Cross Site Scripting (XSS) in Trusted Shops Easy Integration for WooCommerce <= 2.0.6 versions.

Remote | Cross-Site Scripting
Sep 30, 2026 Sep 30, 2026
Sep 30, 2026
Sep 30, 2026
7.2 HIGH
CVE-2026-96815 — WordPress Vitepos plugin <= 3.5.0 - Privilege Escalation vulnerability

Custom role Privilege Escalation in Vitepos <= 3.5.0 versions.

Remote | Authorization
Sep 30, 2026 Sep 30, 2026
Sep 30, 2026
Sep 30, 2026
Showing 20 of 14851 Results