Security Intelligence
Feed

Real-time CVE tracking, exploit analysis, and vulnerability intelligence curated for security professionals.

264 New today
64,996 Total advisories
Live Monitoring

Daily Security Trends (Last 14 Days)

245
Jun 11
336
Jun 12
60
Jun 13
68
Jun 14
443
Jun 15
630
Jun 16
464
Jun 17
3
Jun 18
352
Jun 19
56
Jun 20
104
Jun 21
317
Jun 22
294
Jun 23
64
Jun 24
Critical
High
Medium
Low
Latest
CVE CVSS 4.3

24liveblog <= 2.2 - Authenticated (Contributor+) Exposure of Sensitive Information via Block Editor Script Localization_CVE-2026-9183

The 24liveblog - live blog tool plugin for WordPress is vulnerable to Exposure of Sensitive Information in versions up to, and including, 2.2. This is due to the lb24_block_enqueue_scripts() function being hooked to enqueue_block_editor_assets and, for any non-administrator us...

CVE-2026-9183 24liveblog 24liveblog – live blog tool
Read analysis

Recent Advisories

Severity ID Title Vendor Product Date Type
HIGH 7.5 CVE-2026-9179

WP Forms Connector <= 1.8 - Unauthenticated SQL Injection via 'order' Parameter_CVE-2026-9179

The WP Forms Connector plugin for WordPress is vulnerable to SQL Injection via the 'order' parameter of the /wp-json/wp/v3/post/list REST endpoint ...

hancock11 WP Forms Connector CVE
HIGH 7.5 CVE-2026-9178

WP Forms Connector <= 1.8 - Missing Authorization to Unauthenticated Information Exposure via 'user/list' REST Endpoint_CVE-2026-9178

The WP Forms Connector plugin for WordPress is vulnerable to Information Exposure in all versions up to, and including, 1.8. The plugin registers t...

hancock11 WP Forms Connector CVE
MEDIUM 5.3 CVE-2026-9175

Devs Accounting <= 1.2.0 - Missing Authorization to Unauthenticated Sensitive Information Exposure via 'id' Parameter_CVE-2026-9175

The Devs Accounting – Simple Accounting and Invoicing Solution plugin for WordPress is vulnerable to Missing Authorization in all versions up to, a...

ajitdas Devs Accounting – Simple Accounting and Invoicing Solution CVE
MEDIUM 5.3 CVE-2026-9172

Devs Accounting <= 1.2.0 - Missing Authorization to Unauthenticated Account Deletion via /delete-account/ REST Endpoint_CVE-2026-9172

The Devs Accounting – Simple Accounting and Invoicing Solution plugin for WordPress is vulnerable to unauthorized modification/deletion of data due...

ajitdas Devs Accounting – Simple Accounting and Invoicing Solution CVE
MEDIUM 6.1 CVE-2026-8905

Osiris Signature Banner <= 0.5 - Cross-Site Request Forgery to Stored Cross-Site Scripting via 'prepend_text' Parameter_CVE-2026-8905

The Osiris Signature Banner plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 0.5. This is due...

osiris8 Osiris Signature Banner CVE
MEDIUM 6.4 CVE-2026-8896

MIR blocks and shortcodes <= 1.0.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode Attributes_CVE-2026-8896

The MIR blocks and shortcodes plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'title' attribute (and other attributes suc...

mirsoftware MIR blocks and shortcodes CVE
MEDIUM 6.4 CVE-2026-8865

Avalon23 Products Filter for WooCommerce <= 1.1.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode Attributes_CVE-2026-8865

The Avalon23 Products Filter for WooCommerce plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'avalon23_qr' shortcode in a...

paradigmatools Avalon23 Products Filter for WooCommerce CVE
HIGH 7.5 CVE-2026-8705

ClearSale Total <= 3.4.2 - Unauthenticated SQL Injection_CVE-2026-8705

The ClearSale Total plugin for WordPress is vulnerable to SQL Injection via the `pagseguro[metodo]` POST parameter of the `clearsale_total_push` AJ...

clearsale ClearSale Total <= 3.4.2 CVE
MEDIUM 5.3 CVE-2026-8690

RentMy Real-Time Rental Management Plugin <= 4.0.4.1 - Missing Authorization to Unauthenticated Settings Update via rentmy_cdn_request AJAX Action_CVE-2026-8690

The RentMy Real-Time Rental Management Plugin plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 4.0....

rentmy RentMy Real-Time Rental Management Plugin CVE