| CVE ID | Title | Vendor | Product | Severity | CVSS Score | Published At | AI Analysis |
|---|---|---|---|---|---|---|---|
| CVE-2026-85126 | Crowdfundly <= 2.2.2 - Crowdfundly Manager+ Privilege Escalation | Unknown | Crowdfundly | - | - | 2026-10-11 06:00:14 | Deep Dive |
| CVE-2026-85118 | AI Content Generator Marketing <= 1.0.0 - Unauthenticated Privilege Escalation via Arbitrary Option Update and Deletion | Unknown | AI Content Generator Marketing | - | - | 2026-10-11 06:00:14 | Deep Dive |
| CVE-2026-85121 | Insurify <= 1.0 - Unauthenticated Arbitrary Option Creation and Overwrite via saveemailtemplatedesign | Unknown | Insurify | - | - | 2026-10-11 06:00:14 | Deep Dive |
| CVE-2026-84734 | Mindstien Quick Login <= 1.0 - Unauthenticated Administrator Account Takeover via 'mql_pass' Parameter | Unknown | Mindstien Quick Login | - | - | 2026-10-11 06:00:14 | Deep Dive |
| CVE-2026-84737 | Freeton WP <= 1.0.0 - Unauthenticated Account Takeover via 'secod' Parameter | Unknown | Freeton WP | - | - | 2026-10-11 06:00:14 | Deep Dive |
| CVE-2026-84258 | click5 CRM add-on to Ninja Forms <= 1.0.1 - Unauthenticated Stored XSS via post_notifications | Unknown | click5 CRM add-on to Ninja Forms | - | - | 2026-10-11 06:00:13 | Deep Dive |
| CVE-2026-84254 | click5 CRM add-on to Contact Form 7 <= 1.0.4 - Unauthenticated Arbitrary Options Update | Unknown | click5 CRM add-on to Contact Form 7 | - | - | 2026-10-11 06:00:13 | Deep Dive |
| CVE-2026-84261 | click5 CRM add-on to Contact Form 7 <= 1.0.4 - Unauthenticated Stored XSS via post_notifications | Unknown | click5 CRM add-on to Contact Form 7 | - | - | 2026-10-11 06:00:13 | Deep Dive |
| CVE-2026-84253 | click5 CRM add-on to Gravity Forms <= 1.0.3 - Unauthenticated Arbitrary Options Update | Unknown | click5 CRM add-on to Gravity Forms | - | - | 2026-10-11 06:00:13 | Deep Dive |
| CVE-2026-84259 | click5 CRM add-on to WPForms <= 1.0.3 - Unauthenticated Stored XSS via post_notifications | Unknown | click5 CRM add-on to WPForms | - | - | 2026-10-11 06:00:13 | Deep Dive |
| CVE-2026-84260 | click5 CRM add-on to Gravity Forms <= 1.0.3 - Unauthenticated Stored XSS via post_notifications | Unknown | click5 CRM add-on to Gravity Forms | - | - | 2026-10-11 06:00:13 | Deep Dive |
| CVE-2026-84252 | click5 CRM add-on to WPForms <= 1.0.3 - Unauthenticated Arbitrary Options Update | Unknown | click5 CRM add-on to WPForms | - | - | 2026-10-11 06:00:12 | Deep Dive |
| CVE-2026-84251 | click5 CRM add-on to Ninja Forms <= 1.0.1 - Unauthenticated Arbitrary Options Update | Unknown | click5 CRM add-on to Ninja Forms | - | - | 2026-10-11 06:00:12 | Deep Dive |
| CVE-2026-81156 | Robo Gallery < 5.2.6 - Contributor+ Stored XSS via Gallery Settings | Unknown | Robo Gallery | - | - | 2026-10-11 06:00:11 | Deep Dive |
| CVE-2026-81420 | Tcard WP <= 1.8.0 - Unauthenticated SQLi via group_id Parameter | Unknown | Tcard WP | - | - | 2026-10-11 06:00:11 | Deep Dive |
| CVE-2026-81154 | Robo Gallery < 5.2.6 - Author+ Stored XSS via Image Alt Text | Unknown | Robo Gallery | - | - | 2026-10-11 06:00:11 | Deep Dive |
| CVE-2026-81155 | Robo Gallery < 5.2.6 - Author+ Stored XSS via Gallery Search Label | Unknown | Robo Gallery | - | - | 2026-10-11 06:00:11 | Deep Dive |
| CVE-2026-81649 | Fundiin <= 3.4.0 - Unauthenticated Payment Gateway Settings Update and Credential Disclosure | Unknown | Fundiin cho WooCommerce | - | - | 2026-10-11 06:00:11 | Deep Dive |
| CVE-2026-14854 | WooCommerce Bookings < 3.11.0 - Unauthenticated Denial of Service | Unknown | WooCommerce Bookings | - | - | 2026-10-11 06:00:10 | Deep Dive |
| CVE-2026-106029 | WeddingCity Lite <= 1.0.4 - Unauthenticated Arbitrary Post and Attachment Deletion | Unknown | WeddingCity Lite | - | - | 2026-10-11 06:00:10 | Deep Dive |