| CVE ID | Title | Vendor | Product | Severity | CVSS Score | Published At | AI Analysis |
|---|---|---|---|---|---|---|---|
| CVE-2026-96830 | WordPress GiveWP plugin <= 4.16.9 - Cross Site Scripting (XSS) vulnerability | Nexcess | GiveWP | High | 7.1 | 2026-09-30 12:27:42 | Deep Dive |
| CVE-2026-96829 | WordPress The Plus Addons for Elementor Page Builder Lite plugin <= 6.5.1 - Cross Site Scripting (XSS) vulnerability | POSIMYTH | The Plus Addons for Elementor Page Builder Lite | Medium | 6.5 | 2026-09-30 12:27:41 | Deep Dive |
| CVE-2026-96828 | WordPress Category Discount Woocommerce plugin <= 5.18 - SQL Injection vulnerability | Vidish | Category Discount Woocommerce | High | 7.6 | 2026-09-30 12:27:40 | Deep Dive |
| CVE-2026-96827 | WordPress Admin Notices Manager plugin <= 1.6.0 - SQL Injection vulnerability | Melapress | Admin Notices Manager | High | 7.6 | 2026-09-30 12:27:39 | Deep Dive |
| CVE-2026-96825 | WordPress All In One WP Security & Firewall plugin <= 5.4.8 - Bypass Vulnerability vulnerability | David Anderson / Team Updraft | All In One WP Security & Firewall | Medium | 4.2 | 2026-09-30 12:27:38 | Deep Dive |
| CVE-2026-96824 | WordPress Template Kit – Import plugin <= 1.0.16 - Arbitrary File Deletion vulnerability | envato | Template Kit – Import | Medium | 6.8 | 2026-09-30 12:27:37 | Deep Dive |
| CVE-2026-96823 | WordPress Customer Reviews for WooCommerce plugin <= 5.120.0 - Arbitrary Content Deletion vulnerability | CusRev | Customer Reviews for WooCommerce | High | 7.5 | 2026-09-30 12:27:36 | Deep Dive |
| CVE-2026-96822 | WordPress Books Gallery plugin <= 4.8.3 - SQL Injection vulnerability | Hossni Mubarak | Books Gallery | Critical | 9.3 | 2026-09-30 12:27:36 | Deep Dive |
| CVE-2026-96821 | WordPress FluentBoards plugin <= 2.0.12 - Privilege Escalation vulnerability | Mahmudul Hasan Arif | FluentBoards | Medium | 6.3 | 2026-09-30 12:27:35 | Deep Dive |
| CVE-2026-96820 | WordPress Awesome Support plugin <= 6.3.9 - Cross Site Scripting (XSS) vulnerability | awesomesupport | Awesome Support | High | 7.1 | 2026-09-30 12:27:34 | Deep Dive |
| CVE-2026-96819 | WordPress oik plugin <= 4.15.4 - Cross Site Scripting (XSS) vulnerability | bobbingwide | oik | High | 7.1 | 2026-09-30 12:27:33 | Deep Dive |
| CVE-2026-96818 | WordPress WP Express Checkout (Accept PayPal Payments) plugin <= 2.4.9 - Broken Access Control vulnerability | mra13 / Team Tips and Tricks HQ | WP Express Checkout (Accept PayPal Payments) | High | 7.5 | 2026-09-30 12:27:32 | Deep Dive |
| CVE-2026-96817 | WordPress MakeCommerce for WooCommerce plugin <= 4.1.0 - Broken Access Control vulnerability | MakeCommerce.net | MakeCommerce for WooCommerce | High | 8.2 | 2026-09-30 12:27:31 | Deep Dive |
| CVE-2026-96816 | WordPress Trusted Shops Easy Integration for WooCommerce plugin <= 2.0.6 - Cross Site Scripting (XSS) vulnerability | vendidero | Trusted Shops Easy Integration for WooCommerce | High | 7.1 | 2026-09-30 12:27:31 | Deep Dive |
| CVE-2026-96815 | WordPress Vitepos plugin <= 3.5.0 - Privilege Escalation vulnerability | appsbd | Vitepos | High | 7.2 | 2026-09-30 12:27:30 | Deep Dive |
| CVE-2026-96814 | WordPress WooCommerce Product Table Lite plugin <= 5.6.7 - Cross Site Scripting (XSS) vulnerability | WP Titan Labs | WooCommerce Product Table Lite | High | 7.1 | 2026-09-30 12:27:29 | Deep Dive |
| CVE-2026-96450 | WordPress pixfort Core plugin < 4.3.3 - Cross Site Scripting (XSS) vulnerability | pixfort | pixfort Core | Medium | 5.4 | 2026-09-30 12:27:28 | Deep Dive |
| CVE-2026-96352 | WordPress YITH WooCommerce Ajax Search plugin <= 2.28.0 - Cross Site Scripting (XSS) vulnerability | YITHEMES | YITH WooCommerce Ajax Search | High | 7.1 | 2026-09-30 12:27:27 | Deep Dive |
| CVE-2026-96351 | WordPress Classified Listing plugin <= 6.1.3 - Cross Site Scripting (XSS) vulnerability | RadiusTheme | Classified Listing | High | 7.1 | 2026-09-30 12:27:27 | Deep Dive |
| CVE-2026-96350 | WordPress Estatik plugin <= 4.3.5 - Privilege Escalation vulnerability | Estatik | Estatik | Critical | 9.8 | 2026-09-30 12:27:26 | Deep Dive |