| CVE ID | Title | Vendor | Product | Severity | CVSS Score | Published At | AI Analysis |
|---|---|---|---|---|---|---|---|
| CVE-2026-97244 | WordPress Creator LMS plugin <= 1.2.19 - Path Traversal vulnerability | WPFunnels | Creator LMS | High | 7.5 | 2026-09-30 12:28:03 | Deep Dive |
| CVE-2026-97243 | WordPress AllAble Connector plugin <= 0.13.4 - Broken Access Control vulnerability | flexyma | AllAble Connector | Medium | 5.4 | 2026-09-30 12:28:02 | Deep Dive |
| CVE-2026-97242 | WordPress WEBO MCP plugin <= 3.0.18 - Arbitrary File Deletion vulnerability | phuongwebo | WEBO MCP | Medium | 6.8 | 2026-09-30 12:28:02 | Deep Dive |
| CVE-2026-97241 | WordPress BackupEase plugin <= 2.2.2 - Sensitive Data Exposure vulnerability | PrecisionWP | BackupEase | High | 7.5 | 2026-09-30 12:28:01 | Deep Dive |
| CVE-2026-97240 | WordPress StifLi Backup Tools plugin <= 2.2.7 - Sensitive Data Exposure vulnerability | Esteban | StifLi Backup Tools | High | 7.5 | 2026-09-30 12:28:00 | Deep Dive |
| CVE-2026-97239 | WordPress MCP Content Manager Lite plugin <= 1.1.0 - Broken Access Control vulnerability | Jose Conti | MCP Content Manager Lite | Medium | 6.5 | 2026-09-30 12:27:59 | Deep Dive |
| CVE-2026-97238 | WordPress JetEngine plugin <= 3.8.14.3 - Cross Site Scripting (XSS) vulnerability | Crocoblock. Jetimpex Inc. | JetEngine | Medium | 5.5 | 2026-09-30 12:27:59 | Deep Dive |
| CVE-2026-97237 | WordPress JetEngine plugin <= 3.8.14.3 - Cross Site Scripting (XSS) vulnerability | Crocoblock. Jetimpex Inc. | JetEngine | High | 7.1 | 2026-09-30 12:27:58 | Deep Dive |
| CVE-2026-97236 | WordPress ThemeREX Addons plugin < 2.45.0 - Cross Site Scripting (XSS) vulnerability | ThemeRex | ThemeREX Addons | Medium | 6.5 | 2026-09-30 12:27:57 | Deep Dive |
| CVE-2026-97235 | WordPress ThemeREX Addons plugin < 2.45.0 - Cross Site Scripting (XSS) vulnerability | ThemeRex | ThemeREX Addons | High | 7.1 | 2026-09-30 12:27:56 | Deep Dive |
| CVE-2026-97197 | WordPress WordPress Backup & Migration plugin <= 1.6.0 - Broken Access Control vulnerability | WebToffee | WordPress Backup & Migration | High | 7.5 | 2026-09-30 12:27:55 | Deep Dive |
| CVE-2026-97079 | WordPress Webba Booking plugin <= 6.5.0 - Insecure Direct Object References (IDOR) vulnerability | Webba Appointment Booking | Webba Booking | Medium | 4.3 | 2026-09-30 12:27:54 | Deep Dive |
| CVE-2026-97078 | WordPress Client Invoicing by Sprout Invoices plugin <= 20.8.17 - Insecure Direct Object References (IDOR) vulnerability | BoldGrid | Client Invoicing by Sprout Invoices | Medium | 5.3 | 2026-09-30 12:27:53 | Deep Dive |
| CVE-2026-97077 | WordPress Ad Inserter plugin <= 2.8.18 - Cross Site Scripting (XSS) vulnerability | Spacetime | Ad Inserter | High | 7.1 | 2026-09-30 12:27:53 | Deep Dive |
| CVE-2026-97074 | WordPress Newsletters, Email Marketing, SMS and Popups by Omnisend plugin <= 1.9.0 - Insecure Direct Object References (IDOR) vulnerability | Omnisend | Newsletters, Email Marketing, SMS and Popups by Omnisend | Medium | 4.3 | 2026-09-30 12:27:52 | Deep Dive |
| CVE-2026-97067 | WordPress EWWW Image Optimizer plugin <= 8.7.7 - Cross Site Scripting (XSS) vulnerability | Shane Bishop | EWWW Image Optimizer | Medium | 6.5 | 2026-09-30 12:27:51 | Deep Dive |
| CVE-2026-97066 | WordPress GiveWP plugin <= 4.16.9 - Insecure Direct Object References (IDOR) vulnerability | Nexcess | GiveWP | Medium | 5.3 | 2026-09-30 12:27:50 | Deep Dive |
| CVE-2026-96838 | WordPress Blacklist Manager – WooCommerce Anti-Fraud, Blacklist & Checkout Verification plugin <= 2.3.1 - Cross Site Request Forgery (CSRF) vulnerability | YoOhw Studio | Blacklist Manager – WooCommerce Anti-Fraud, Blacklist & Checkout Verification | High | 8.8 | 2026-09-30 12:27:49 | Deep Dive |
| CVE-2026-97065 | WordPress Happyforms plugin <= 1.26.15 - Cross Site Scripting (XSS) vulnerability | Happyforms | Happyforms | High | 7.1 | 2026-09-30 12:27:49 | Deep Dive |
| CVE-2026-96837 | WordPress CartFlows plugin <= 3.2.0 - Remote Code Execution (RCE) vulnerability | Brainstorm Force | CartFlows | High | 8.8 | 2026-09-30 12:27:48 | Deep Dive |