Skip to main content
Skip to footer
Opens in a new tab
Home
CVE Analysis
How it Works
Resources
Pricing
Log in
Create Account
Home
CVE Analysis
How it Works
Resources
Pricing
Log in
Create Account
Severity:
high
CVE-2026-57346: Embed Privacy <= 1.12.3 Authenticated (Contributor+) Arbitrary File Deletion PoC, Patch Analysis & Rule
July 4, 2026
High CVE-2026-57346 in Embed Privacy (CVSS 8.1): Embed Privacy. Atomic Edge summarizes impact, exploitability, and patch details, with WAF rule…
CVE-2026-57317: Appointment Booking Calendar — Simply Schedule Appointments Booking Plugin <= 1.6.12.2 Unauthenticated Stored Cross-Site Scripting PoC, Patch Analysis & Rule
July 4, 2026
High CVE-2026-57317 in Simply Schedule Appointments (CVSS 7.2): Appointment Booking Calendar — Simply Schedule Appointments Booking Plugin. Atomic Edge summarizes…
CVE-2026-9834: WP Database Backup <= 7.11 Authenticated (Administrator+) OS Command Injection via 'wp_db_exclude_table' Parameter PoC, Patch Analysis & Rule
July 3, 2026
High CVE-2026-9834 in Wp Database Backup (CVSS 7.2): WP Database Backup. Atomic Edge summarizes impact, exploitability, and patch details. Update…
CVE-2026-7311: TinyPNG <= 3.6.13 Authenticated (Author+) Arbitrary File Deletion via 'convert.path' in 'tiny_compress_images' Post Meta PoC, Patch Analysis & Rule
July 3, 2026
High CVE-2026-7311 in Tiny Compress Images (CVSS 8.1): TinyPNG. Atomic Edge summarizes impact, exploitability, and patch details, with WAF rule…
CVE-2026-7517: Custom Payment Gateways for WooCommerce <= 2.1.0 Unauthenticated Stored Cross-Site Scripting via 'alg_wc_cpg_input_fields' Parameter PoC, Patch Analysis & Rule
July 3, 2026
High CVE-2026-7517 in Custom Payment Gateways Woocommerce (CVSS 7.2): Custom Payment Gateways for WooCommerce. Atomic Edge summarizes impact, exploitability, and…
CVE-2026-13468: Visualizer <= 4.0.3 Missing Authorization to Unauthenticated Sensitive Information Disclosure via /visualizer/v1/action/{chart}/{type}/ REST Endpoint PoC, Patch Analysis & Rule
July 3, 2026
High CVE-2026-13468 in Visualizer (CVSS 7.5): Visualizer. Atomic Edge summarizes impact, exploitability, and patch details, with WAF rule coverage. Update…
CVE-2026-13731: WPBot <= 8.4.9 Unauthenticated Stored Cross-Site Scripting via 'conversation' Parameter PoC, Patch Analysis & Rule
July 3, 2026
High CVE-2026-13731 in Chatbot (CVSS 7.2): WPBot. Atomic Edge summarizes impact, exploitability, and patch details, with WAF rule coverage. Update…
CVE-2026-12923: Video Gallery <= 4.0.3 Authenticated (Subscriber+) Arbitrary Function Call via 'path' Parameter PoC, Patch Analysis & Rule
July 3, 2026
High CVE-2026-12923 in Youtube Showcase (CVSS 7.5): Video Gallery. Atomic Edge summarizes impact, exploitability, and patch details. Update to 4.0.4.
CVE-2026-9148: Comments <= 7.6.56 Unauthenticated Stored Cross-Site Scripting via 'Website' Field PoC, Patch Analysis & Rule
July 2, 2026
High CVE-2026-9148 in Wpdiscuz (CVSS 7.2): Comments. Atomic Edge summarizes impact, exploitability, and patch details, with WAF rule coverage. Update…
CVE-2026-13040: NEX-Forms <= 9.2.2 Unauthenticated Stored Cross-Site Scripting via 'real_val__' Parameter PoC, Patch Analysis & Rule
July 2, 2026
High CVE-2026-13040 in Nex Forms Express Wp Form Builder (CVSS 7.2): NEX-Forms. Atomic Edge summarizes impact, exploitability, and patch details.…
CVE-2026-14352: AR for WooCommerce <= 8.40 Unauthenticated Path Traversal to Arbitrary File Read via 'file' Parameter PoC, Patch Analysis & Rule
July 2, 2026
High CVE-2026-14352 in Ar For Woocommerce (CVSS 7.5): AR for WooCommerce. Atomic Edge summarizes impact, exploitability, and patch details. Update…
CVE-2026-14327: AR for WordPress <= 8.40 Unauthenticated Arbitrary File Read via 'file' Parameter PoC, Patch Analysis & Rule
July 2, 2026
CVE-2026-14327 affects the AR for WordPress plugin (up to v8.40) with a CVSS score of 7.5. Unauthenticated attackers can exploit…
CVE-2026-8441: WP Review Slider Pro <= 12.7.2 Unauthenticated SQL Injection via 'notinstring' Parameter PoC, Patch Analysis & Rule
July 1, 2026
CVE-2026-8441 affects WP Review Slider Pro versions up to 12.7.2 with a CVSS score of 7.5. This high-severity SQL injection…
CVE-2026-13369: Ninja Forms File Uploads <= 3.3.29 Unauthenticated Arbitrary File Read via File Upload Field 'files[].data.file_path' Parameter PoC, Patch Analysis & Rule
July 1, 2026
CVE-2026-13369 affects Ninja Forms Uploads plugin versions up to 3.3.29, allowing unauthenticated attackers to read arbitrary files. Update to the…
CVE-2026-13251: Perfmatters <= 2.6.4 Unauthenticated Arbitrary File Read via 's' Parameter PoC, Patch Analysis & Rule
July 1, 2026
CVE-2026-13251 affects the Perfmatters plugin for WordPress (up to version 2.6.4) with a CVSS score of 7.5. Unauthenticated attackers can…
CVE-2026-14249: Request a Quote Form Plugin <= 2.5.5 Unauthenticated Code Injection via 'path' Parameter PoC, Patch Analysis & Rule
July 1, 2026
CVE-2026-14249 affects the Request A Quote plugin for WordPress (up to version 2.5.5) with a CVSS score of 7.5. Unauthenticated…
CVE-2026-5821: Image Optimizer <= 1.7.4 Authenticated (Author+) Arbitrary File Deletion via Post Meta Field Injection PoC, Patch Analysis & Rule
July 1, 2026
CVE-2026-5821 affects the Image Optimization plugin (up to v1.7.4) with a CVSS score of 8.1. Authenticated attackers can exploit a…
CVE-2026-12142: NEX-Forms <= 9.2.2 Unauthenticated Stored Cross-Site Scripting via '_name[]' Array Parameter PoC, Patch Analysis & Rule
June 30, 2026
CVE-2026-12142 affects the Nex Forms Express WP Form Builder plugin (up to 9.2.2) with a high severity CVSS score of…
CVE-2026-13228: LatePoint <= 5.6.3 Authenticated (Custom+) Privilege Escalation to Administrator via 'order[customer_id]' Parameter PoC, Patch Analysis & Rule
June 30, 2026
CVE-2026-13228 affects the LatePoint plugin (up to version 5.6.3) with a CVSS score of 8.8. Authenticated attackers can escalate privileges…
CVE-2026-12158: RegistrationMagic <= 6.0.9.1 Cross-Site Request Forgery to Privilege Escalation via 'rmc_assign_user_role_action' Parameter PoC, Patch Analysis & Rule
June 30, 2026
CVE-2026-12158 affects the Custom Registration Form Builder With Submission Manager plugin (up to 6.0.9.1) with a CVSS of 8.8. This…
←
1
…
5
6
7
8
9
…
36
→