Ctrl + K

Latest intel// live feed

25 results//sorted by published//last sync 2026-10-05 18:16Z
2026-06-15
2026-06-15 21:16Z
CRIT

CVE-2026-42381 — SQL: Unauthenticated SQL Injection in Funnel Builder by FunnelKit <= 3.15.0.1 versions.

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2026-42381

Unauthenticated SQL Injection in Funnel Builder by FunnelKit <= 3.15.0.1 versions. CVSSv3.1 9.3 (CRITICAL)

CWECWE 89TYPVulnerability
9.3
CVSS v3.1
97
Edit Score
2026-06-15
2026-06-15 21:16Z
CRIT

CVE-2026-40798 — SQL: Unauthenticated SQL Injection in wpForo Forum <= 3.0.4 versions.

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2026-40798

Unauthenticated SQL Injection in wpForo Forum <= 3.0.4 versions. CVSSv3.1 9.3 (CRITICAL)

CWECWE 89TYPVulnerability
9.3
CVSS v3.1
97
Edit Score
2026-06-15
2026-06-15 21:16Z
CRIT

CVE-2026-40772 — Arbitrary: Unauthenticated Arbitrary File Upload in GeekyBot <= 1.2.2 versions.

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2026-40772

Unauthenticated Arbitrary File Upload in GeekyBot <= 1.2.2 versions. CVSSv3.1 10.0 (CRITICAL)

CWECWE 434VNDArbitraryTYPVulnerability
10.0
CVSS v3.1
100
Edit Score
2026-06-15
2026-06-15 21:16Z
CRIT

CVE-2026-40771 — SQL: Unauthenticated SQL Injection in Contest Gallery <= 28.1.6 versions.

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2026-40771

Unauthenticated SQL Injection in Contest Gallery <= 28.1.6 versions. CVSSv3.1 9.3 (CRITICAL)

CWECWE 89TYPVulnerability
9.3
CVSS v3.1
97
Edit Score
2026-06-15
2026-06-15 21:16Z
HIGH

CVE-2026-40769 — Arbitrary: Unauthenticated Arbitrary File Deletion in Contact Form Extender for Divi &#8211; Save Entries, File

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2026-40769

Unauthenticated Arbitrary File Deletion in Contact Form Extender for Divi &#8211; Save Entries, File Upload &amp; Country Code Field <= 1.0.6 versions. CVSSv3.1 8.6 (HIGH)

CWECWE 22VNDArbitraryTYPVulnerability
8.6
CVSS v3.1
93
Edit Score
2026-06-15
2026-06-15 21:16Z
HIGH

CVE-2026-40766 — Subscriber: SQL Injection in MasterStudy LMS <= 3.7.25 versions.

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2026-40766

Subscriber SQL Injection in MasterStudy LMS <= 3.7.25 versions. CVSSv3.1 8.5 (HIGH)

CWECWE 89VNDSubscriberTYPVulnerability
8.5
CVSS v3.1
93
Edit Score
2026-06-15
2026-06-15 21:16Z
CRIT

CVE-2026-39591 — Subscriber: Arbitrary File Upload in WP-BusinessDirectory <= 4.0.0 versions.

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2026-39591

Subscriber Arbitrary File Upload in WP-BusinessDirectory <= 4.0.0 versions. CVSSv3.1 9.9 (CRITICAL)

CWECWE 434VNDSubscriberTYPVulnerability
9.9
CVSS v3.1
100
Edit Score
728 × 90 / responsive · programmatic ad slot
2026-06-15
2026-06-15 21:16Z
HIGH

CVE-2026-39587 — Privilege: Unauthenticated Privilege Escalation in WP BASE Booking <= 5.9.0 versions.

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2026-39587

Unauthenticated Privilege Escalation in WP BASE Booking <= 5.9.0 versions. CVSSv3.1 8.1 (HIGH)

CWECWE 266TYPVulnerability
8.1
CVSS v3.1
91
Edit Score
2026-06-15
2026-06-15 21:16Z
CRIT

CVE-2026-39583 — Privilege: Unauthenticated Privilege Escalation in Datalogics Ecommerce Delivery <= 2.6.62 versions.

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2026-39583

Unauthenticated Privilege Escalation in Datalogics Ecommerce Delivery <= 2.6.62 versions. CVSSv3.1 9.8 (CRITICAL)

CWECWE 266TYPVulnerability
9.8
CVSS v3.1
99
Edit Score
2026-06-15
2026-06-15 21:16Z
HIGH

CVE-2026-39579 — Contributor: Privilege Escalation in B Blocks <= 2.0.31 versions.

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2026-39579

Contributor Privilege Escalation in B Blocks <= 2.0.31 versions. CVSSv3.1 8.8 (HIGH)

CWECWE 266VNDContributorTYPVulnerability
8.8
CVSS v3.1
94
Edit Score
2026-06-15
2026-06-15 21:16Z
HIGH

CVE-2026-39532 — Contributor: PHP Object Injection in Events Calendar for GeoDirectory <= 2.3.25 versions.

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2026-39532

Contributor PHP Object Injection in Events Calendar for GeoDirectory <= 2.3.25 versions. CVSSv3.1 8.8 (HIGH)

CWECWE 502VNDContributorTYPVulnerability
8.8
CVSS v3.1
94
Edit Score
2026-06-15
2026-06-15 21:16Z
CRIT

CVE-2026-39530 — SQL: Unauthenticated SQL Injection in SpeakOut!

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2026-39530

Unauthenticated SQL Injection in SpeakOut! Email Petitions <= 4.6.5 versions. CVSSv3.1 9.3 (CRITICAL)

CWECWE 89TYPVulnerability
9.3
CVSS v3.1
97
Edit Score
2026-06-15
2026-06-15 21:16Z
CRIT

CVE-2026-39519 — SQL: Unauthenticated SQL Injection in GeekyBot <= 1.2.0 versions.

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2026-39519

Unauthenticated SQL Injection in GeekyBot <= 1.2.0 versions. CVSSv3.1 9.3 (CRITICAL)

CWECWE 89TYPVulnerability
9.3
CVSS v3.1
97
Edit Score
2026-06-15
2026-06-15 21:16Z
CRIT

CVE-2026-39512 — SQL: Unauthenticated SQL Injection in GeoDirectory <= 2.8.152 versions.

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2026-39512

Unauthenticated SQL Injection in GeoDirectory <= 2.8.152 versions. CVSSv3.1 9.3 (CRITICAL)

CWECWE 89TYPVulnerability
9.3
CVSS v3.1
97
Edit Score
2026-06-15
2026-06-15 21:16Z
CRIT

CVE-2026-39511 — SQL: Unauthenticated SQL Injection in WP Photo Album Plus <= 9.1.08.001 versions.

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2026-39511

Unauthenticated SQL Injection in WP Photo Album Plus <= 9.1.08.001 versions. CVSSv3.1 9.3 (CRITICAL)

CWECWE 89TYPVulnerability
9.3
CVSS v3.1
97
Edit Score
2026-06-15
2026-06-15 21:16Z
CRIT

CVE-2026-39502 — SQL: Unauthenticated SQL Injection in Form Maker by 10Web <= 1.15.38 versions.

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2026-39502

Unauthenticated SQL Injection in Form Maker by 10Web <= 1.15.38 versions. CVSSv3.1 9.3 (CRITICAL)

CWECWE 89TYPVulnerability
9.3
CVSS v3.1
97
Edit Score
2026-06-15
2026-06-15 21:16Z
CRIT

CVE-2026-39493 — SQL: Unauthenticated SQL Injection in Simply Schedule Appointments <= 1.6.9.27 versions.

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2026-39493

Unauthenticated SQL Injection in Simply Schedule Appointments <= 1.6.9.27 versions. CVSSv3.1 9.3 (CRITICAL)

CWECWE 89TYPVulnerability
9.3
CVSS v3.1
97
Edit Score
2026-06-15
2026-06-15 21:16Z
CRIT

CVE-2026-39492 — SQL: Unauthenticated SQL Injection in WP Maps <= 4.9.1 versions.

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2026-39492

Unauthenticated SQL Injection in WP Maps <= 4.9.1 versions. CVSSv3.1 9.3 (CRITICAL)

CWECWE 89TYPVulnerability
9.3
CVSS v3.1
97
Edit Score
2026-06-15
2026-06-15 21:16Z
HIGH

CVE-2026-39478 — Contributor: PHP Object Injection in Anti-Malware Security and Brute-Force Firewall <= 4.23.87 versions.

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2026-39478

Contributor PHP Object Injection in Anti-Malware Security and Brute-Force Firewall <= 4.23.87 versions. CVSSv3.1 8.8 (HIGH)

CWECWE 502VNDContributorTYPVulnerability
8.8
CVSS v3.1
94
Edit Score
2026-06-15
2026-06-15 21:16Z
HIGH

CVE-2026-39474 — Contributor: PHP Object Injection in Post Duplicator <= 3.0.10 versions.

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2026-39474

Contributor PHP Object Injection in Post Duplicator <= 3.0.10 versions. CVSSv3.1 8.8 (HIGH)

CWECWE 502VNDContributorTYPVulnerability
8.8
CVSS v3.1
94
Edit Score
2026-06-15
2026-06-15 21:16Z
CRIT

CVE-2026-39465 — Editor: Remote Code Execution (RCE) in Responsive Slider by MetaSlider <= 3.106.0 versions.

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2026-39465

Editor Remote Code Execution (RCE) in Responsive Slider by MetaSlider <= 3.106.0 versions. CVSSv3.1 9.1 (CRITICAL)

CWECWE 94VNDEditorTYPVulnerability
9.1
CVSS v3.1
96
Edit Score
2026-06-15
2026-06-15 21:16Z
CRIT

CVE-2026-39441 — SQL: Unauthenticated SQL Injection in Feed KuantoKusta for WooCommerce – Free <= 5.3 versions.

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2026-39441

Unauthenticated SQL Injection in Feed KuantoKusta for WooCommerce – Free <= 5.3 versions. CVSSv3.1 9.3 (CRITICAL)

CWECWE 89TYPVulnerability
9.3
CVSS v3.1
97
Edit Score
2026-06-15
2026-06-15 21:16Z
CRIT

CVE-2026-34901 — Privilege: Unauthenticated Privilege Escalation in iControlWP <= 5.5.3 versions.

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2026-34901

Unauthenticated Privilege Escalation in iControlWP <= 5.5.3 versions. CVSSv3.1 9.8 (CRITICAL)

CWECWE 266TYPVulnerability
9.8
CVSS v3.1
99
Edit Score
2026-06-15
2026-06-15 21:16Z
HIGH

CVE-2026-27333 — Deserialization: Unauthenticated Deserialization of untrusted data in Paid Videochat Turnkey Site <= 7.3.23 versions.

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2026-27333

Unauthenticated Deserialization of untrusted data in Paid Videochat Turnkey Site <= 7.3.23 versions. CVSSv3.1 8.1 (HIGH)

CWECWE 502TYPVulnerability
8.1
CVSS v3.1
91
Edit Score
2026-06-15
2026-06-15 21:16Z
CRIT

CVE-2026-27053 — PHP: Unauthenticated PHP Object Injection in Broadcast Live Video < 7.1.3 versions.

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2026-27053

Unauthenticated PHP Object Injection in Broadcast Live Video < 7.1.3 versions. CVSSv3.1 9.8 (CRITICAL)

CWECWE 502TYPVulnerability
9.8
CVSS v3.1
99
Edit Score