| CVE ID | Title | Vendor | Product | Severity | CVSS Score | Published At | AI Analysis |
|---|---|---|---|---|---|---|---|
| CVE-2026-97238 | WordPress JetEngine plugin <= 3.8.14.3 - Cross Site Scripting (XSS) vulnerability | Crocoblock. Jetimpex Inc. | JetEngine | Medium | 5.5 | 2026-09-30 12:27:59 | Deep Dive |
| CVE-2026-97237 | WordPress JetEngine plugin <= 3.8.14.3 - Cross Site Scripting (XSS) vulnerability | Crocoblock. Jetimpex Inc. | JetEngine | High | 7.1 | 2026-09-30 12:27:58 | Deep Dive |
| CVE-2026-97236 | WordPress ThemeREX Addons plugin < 2.45.0 - Cross Site Scripting (XSS) vulnerability | ThemeRex | ThemeREX Addons | Medium | 6.5 | 2026-09-30 12:27:57 | Deep Dive |
| CVE-2026-97235 | WordPress ThemeREX Addons plugin < 2.45.0 - Cross Site Scripting (XSS) vulnerability | ThemeRex | ThemeREX Addons | High | 7.1 | 2026-09-30 12:27:56 | Deep Dive |
| CVE-2026-97197 | WordPress WordPress Backup & Migration plugin <= 1.6.0 - Broken Access Control vulnerability | WebToffee | WordPress Backup & Migration | High | 7.5 | 2026-09-30 12:27:55 | Deep Dive |
| CVE-2026-97079 | WordPress Webba Booking plugin <= 6.5.0 - Insecure Direct Object References (IDOR) vulnerability | Webba Appointment Booking | Webba Booking | Medium | 4.3 | 2026-09-30 12:27:54 | Deep Dive |
| CVE-2026-97078 | WordPress Client Invoicing by Sprout Invoices plugin <= 20.8.17 - Insecure Direct Object References (IDOR) vulnerability | BoldGrid | Client Invoicing by Sprout Invoices | Medium | 5.3 | 2026-09-30 12:27:53 | Deep Dive |
| CVE-2026-97077 | WordPress Ad Inserter plugin <= 2.8.18 - Cross Site Scripting (XSS) vulnerability | Spacetime | Ad Inserter | High | 7.1 | 2026-09-30 12:27:53 | Deep Dive |
| CVE-2026-97074 | WordPress Newsletters, Email Marketing, SMS and Popups by Omnisend plugin <= 1.9.0 - Insecure Direct Object References (IDOR) vulnerability | Omnisend | Newsletters, Email Marketing, SMS and Popups by Omnisend | Medium | 4.3 | 2026-09-30 12:27:52 | Deep Dive |
| CVE-2026-97067 | WordPress EWWW Image Optimizer plugin <= 8.7.7 - Cross Site Scripting (XSS) vulnerability | Shane Bishop | EWWW Image Optimizer | Medium | 6.5 | 2026-09-30 12:27:51 | Deep Dive |
| CVE-2026-97066 | WordPress GiveWP plugin <= 4.16.9 - Insecure Direct Object References (IDOR) vulnerability | Nexcess | GiveWP | Medium | 5.3 | 2026-09-30 12:27:50 | Deep Dive |
| CVE-2026-96838 | WordPress Blacklist Manager – WooCommerce Anti-Fraud, Blacklist & Checkout Verification plugin <= 2.3.1 - Cross Site Request Forgery (CSRF) vulnerability | YoOhw Studio | Blacklist Manager – WooCommerce Anti-Fraud, Blacklist & Checkout Verification | High | 8.8 | 2026-09-30 12:27:49 | Deep Dive |
| CVE-2026-97065 | WordPress Happyforms plugin <= 1.26.15 - Cross Site Scripting (XSS) vulnerability | Happyforms | Happyforms | High | 7.1 | 2026-09-30 12:27:49 | Deep Dive |
| CVE-2026-96837 | WordPress CartFlows plugin <= 3.2.0 - Remote Code Execution (RCE) vulnerability | Brainstorm Force | CartFlows | High | 8.8 | 2026-09-30 12:27:48 | Deep Dive |
| CVE-2026-96836 | WordPress Parsi Date plugin <= 6.3 - Cross Site Scripting (XSS) vulnerability | Morteza Geransayeh | Parsi Date | High | 7.1 | 2026-09-30 12:27:47 | Deep Dive |
| CVE-2026-96834 | WordPress GiveWP plugin <= 4.16.9 - Sensitive Data Exposure vulnerability | Nexcess | GiveWP | Medium | 6.5 | 2026-09-30 12:27:46 | Deep Dive |
| CVE-2026-96835 | WordPress King Addons for Elementor plugin <= 51.1.85 - Cross Site Scripting (XSS) vulnerability | KingAddons.com | King Addons for Elementor | Medium | 6.5 | 2026-09-30 12:27:46 | Deep Dive |
| CVE-2026-96833 | WordPress Ultimate Addons for Contact Form 7 plugin <= 3.5.51 - PHP Object Injection vulnerability | Themefic | Ultimate Addons for Contact Form 7 | High | 7.2 | 2026-09-30 12:27:45 | Deep Dive |
| CVE-2026-96832 | WordPress Content Egg plugin <= 6.3.1 - PHP Object Injection vulnerability | keywordrush | Content Egg | High | 7.2 | 2026-09-30 12:27:44 | Deep Dive |
| CVE-2026-96831 | WordPress Themify Builder plugin <= 7.8.1 - PHP Object Injection vulnerability | themifyme | Themify Builder | High | 8.8 | 2026-09-30 12:27:42 | Deep Dive |