| CVE ID | Title | Vendor | Product | Severity | CVSS Score | Published At | AI Analysis |
|---|---|---|---|---|---|---|---|
| CVE-2026-100513 | WordPress CF7 Views – Complete Entry Management for Contact Form 7 plugin <= 3.2.5 - Cross Site Scripting (XSS) vulnerability | Aman | CF7 Views – Complete Entry Management for Contact Form 7 | Medium | 6.5 | 2026-09-30 12:28:28 | Deep Dive |
| CVE-2026-100508 | WordPress Two Factor plugin <= 0.16.0 - Denial of Service Attack vulnerability | WordPress.org | Two Factor | Medium | 5.3 | 2026-09-30 12:28:27 | Deep Dive |
| CVE-2026-100507 | WordPress If-So Dynamic Content Personalization plugin <= 1.10.1 - Cross Site Scripting (XSS) vulnerability | If-So Dynamic Content | If-So Dynamic Content Personalization | High | 7.1 | 2026-09-30 12:28:26 | Deep Dive |
| CVE-2026-97302 | WordPress MPG plugin <= 4.2.3 - Sensitive Data Exposure vulnerability | Themeisle | MPG | Medium | 5.3 | 2026-09-30 12:28:25 | Deep Dive |
| CVE-2026-97301 | WordPress Cool Formkit Lite plugin <= 2.7.8 - Cross Site Scripting (XSS) vulnerability | Cool Plugins | Cool Formkit Lite | Medium | 6.5 | 2026-09-30 12:28:25 | Deep Dive |
| CVE-2026-97299 | WordPress Razorpay Payment Links for WooCommerce plugin <= 2.1.5 - Cross Site Request Forgery (CSRF) vulnerability | KnitPay | Razorpay Payment Links for WooCommerce | Medium | 5.4 | 2026-09-30 12:28:24 | Deep Dive |
| CVE-2026-97298 | WordPress King Addons for Elementor plugin <= 51.1.86 - Cross Site Scripting (XSS) vulnerability | KingAddons | King Addons for Elementor | Medium | 6.5 | 2026-09-30 12:28:23 | Deep Dive |
| CVE-2026-97293 | WordPress Media LIbrary Assistant plugin <= 3.41 - SQL Injection vulnerability | David Lingren | Media LIbrary Assistant | High | 8.5 | 2026-09-30 12:28:22 | Deep Dive |
| CVE-2026-97292 | WordPress YITH WooCommerce Tab Manager plugin <= 2.15.0 - Cross Site Scripting (XSS) vulnerability | YITHEMES | YITH WooCommerce Tab Manager | Medium | 6.5 | 2026-09-30 12:28:22 | Deep Dive |
| CVE-2026-97289 | WordPress Quiz And Survey Master plugin <= 11.2.6 - Cross Site Scripting (XSS) vulnerability | ExpressTech Systems | Quiz And Survey Master | High | 7.1 | 2026-09-30 12:28:21 | Deep Dive |
| CVE-2026-97288 | WordPress OAuth Server plugin <= 4.5.1 - Cross Site Scripting (XSS) vulnerability | Jayson T Cote | OAuth Server | Medium | 6.5 | 2026-09-30 12:28:20 | Deep Dive |
| CVE-2026-97287 | WordPress Event Tickets plugin <= 5.29.5 - SQL Injection vulnerability | Liquid Web / StellarWP | Event Tickets | High | 8.5 | 2026-09-30 12:28:19 | Deep Dive |
| CVE-2026-97286 | WordPress Strong Testimonials plugin <= 3.3.11 - Cross Site Scripting (XSS) vulnerability | WP Chill | Strong Testimonials | Medium | 6.5 | 2026-09-30 12:28:19 | Deep Dive |
| CVE-2026-97285 | WordPress The Events Calendar plugin <= 6.17.5 - Broken Access Control vulnerability | Nexcess | The Events Calendar | Medium | 5.4 | 2026-09-30 12:28:18 | Deep Dive |
| CVE-2026-97282 | WordPress Review Schema plugin <= 3.1.0 - Insecure Direct Object References (IDOR) vulnerability | RadiusTheme | Review Schema | Medium | 5.3 | 2026-09-30 12:28:17 | Deep Dive |
| CVE-2026-97274 | WordPress OAuth Single Sign On – SSO (OAuth Client) plugin <= 7.1.2 - Bypass vulnerability vulnerability | miniOrange | OAuth Single Sign On – SSO (OAuth Client) | Critical | 9.8 | 2026-09-30 12:28:16 | Deep Dive |
| CVE-2026-97279 | WordPress Polylang plugin <= 3.8.9 - Cross Site Scripting (XSS) vulnerability | Chouby | Polylang | Medium | 6.5 | 2026-09-30 12:28:16 | Deep Dive |
| CVE-2026-97272 | WordPress Premmerce Permalink Manager for WooCommerce plugin <= 2.3.13 - Cross Site Scripting (XSS) vulnerability | Premmerce | Premmerce Permalink Manager for WooCommerce | High | 7.1 | 2026-09-30 12:28:15 | Deep Dive |
| CVE-2026-97271 | WordPress WPFunnels plugin <= 3.13.1 - Cross Site Scripting (XSS) vulnerability | WPFunnels | WPFunnels | High | 7.1 | 2026-09-30 12:28:14 | Deep Dive |
| CVE-2026-97270 | WordPress CMB2 plugin <= 2.13.0 - Cross Site Scripting (XSS) vulnerability | Justin Sternberg | CMB2 | Medium | 6.5 | 2026-09-30 12:28:13 | Deep Dive |