Identifier and description search over the retained local snapshot. Filters apply to the cohort immediately; every chart links back into the same filter state.
Matching cohort: 12,259 published records · 20 KEV · 12,259 with a forecast · 0 unknown dates
12,259 matching published records · 0 with an unknown publication date
Every segment and month is a link that preserves the other filters.
Share of cohort: KEV 0.16% · forecast 100% · unscored 21%.
WordPress Kalles Addons plugin <= 1.0.6 - PHP Object Injection vulnerability
Unauthenticated PHP Object Injection in Kalles Addons <= 1.0.6 versions.
Severity critical: primary CNA CVSS 9.8 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.
Published 2026-08-19T12:38:56.047Z. Updated 2026-08-20T15:57:12.782Z.
WordPress Nikstore Core plugin <= 1.5 - SQL Injection vulnerability
Unauthenticated SQL Injection in Nikstore Core <= 1.5 versions.
Severity critical: primary CNA CVSS 9.3 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.
Published 2026-08-19T12:38:55.331Z. Updated 2026-08-19T19:53:03.144Z.
WordPress Resido theme <= 1.5 - Local File Inclusion vulnerability
Unauthenticated Local File Inclusion in Resido <= 1.5 versions.
Severity high: primary CNA CVSS 8.1 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.
Published 2026-08-19T12:38:54.622Z. Updated 2026-08-19T15:34:24.261Z.
WordPress Track Geolocation Of Users Using Contact Form 7 plugin <= 3.0.2 - Sensitive Data Exposure vulnerability
Unauthenticated Sensitive Data Exposure in Track Geolocation Of Users Using Contact Form 7 <= 3.0.2 versions.
Severity high: primary CNA CVSS 7.5 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.
Published 2026-08-19T12:38:53.910Z. Updated 2026-08-19T14:39:15.284Z.
WordPress Outranking plugin Options plugin <= 1.1.3 - Broken Access Control vulnerability
Unauthenticated Broken Access Control in Outranking Plugin Options <= 1.1.3 versions.
Severity high: primary CNA CVSS 7.5 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.
Published 2026-08-19T12:38:53.203Z. Updated 2026-08-20T15:57:12.951Z.
WordPress Pay with Contact Form 7 plugin <= 1.0.4 - Sensitive Data Exposure vulnerability
Unauthenticated Sensitive Data Exposure in Pay with Contact Form 7 <= 1.0.4 versions.
Severity high: primary CNA CVSS 7.5 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.
Published 2026-08-19T12:38:52.472Z. Updated 2026-08-20T15:57:13.136Z.
WordPress Flexible Subscriptions plugin <= 1.8.1 - PHP Object Injection vulnerability
Customer PHP Object Injection in Flexible Subscriptions <= 1.8.1 versions.
Severity critical: primary CNA CVSS 9.8 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.
Published 2026-08-19T12:38:51.770Z. Updated 2026-08-19T19:29:12.770Z.
WordPress Taxi Booking Manager for WooCommerce plugin < 2.0.8 - Broken Access Control vulnerability
Unauthenticated Broken Access Control in Taxi Booking Manager for WooCommerce < 2.0.8 versions.
Severity medium: primary CNA CVSS 6.5 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.
Published 2026-08-19T12:38:51.062Z. Updated 2026-08-19T15:35:25.996Z.
WordPress SimplyRETS Real Estate IDX plugin <= 3.2.8 - Cross Site Scripting (XSS) vulnerability
Unauthenticated Cross Site Scripting (XSS) in SimplyRETS Real Estate IDX <= 3.2.8 versions.
Severity high: primary CNA CVSS 7.1 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.
Published 2026-08-19T12:38:50.350Z. Updated 2026-08-19T14:39:20.792Z.
WordPress TrueBooker plugin <= 1.2.6 - Privilege Escalation vulnerability
Unauthenticated Privilege Escalation in TrueBooker <= 1.2.6 versions.
Severity critical: primary CNA CVSS 9.8 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.
Published 2026-08-19T12:38:49.650Z. Updated 2026-08-20T15:57:13.300Z.
WordPress NGG Smart Image Search plugin < 4.0.0 - SQL Injection vulnerability
Unauthenticated SQL Injection in NGG Smart Image Search < 4.0.0 versions.
Severity critical: primary CNA CVSS 9.3 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.
Published 2026-08-19T12:38:48.929Z. Updated 2026-08-20T15:57:13.462Z.
WordPress Global Gallery plugin <= 11.1.2 - Cross Site Scripting (XSS) vulnerability
Unauthenticated Cross Site Scripting (XSS) in Global Gallery <= 11.1.2 versions.
Severity high: primary CNA CVSS 7.1 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.
Published 2026-08-19T12:38:48.218Z. Updated 2026-08-19T19:36:39.221Z.
WordPress Maps Marker Pro plugin <= 4.32 - SQL Injection vulnerability
Unauthenticated SQL Injection in Maps Marker Pro <= 4.32 versions.
Severity critical: primary CNA CVSS 9.3 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.
Published 2026-08-19T12:38:47.503Z. Updated 2026-08-19T15:36:07.932Z.
WordPress BBQ Pro plugin <= 3.9 - Cross Site Scripting (XSS) vulnerability
Unauthenticated Cross Site Scripting (XSS) in BBQ Pro <= 3.9 versions.
Severity high: primary CNA CVSS 7.1 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.
Published 2026-08-19T12:38:46.814Z. Updated 2026-08-19T14:39:26.160Z.
WordPress Community by PeepSo plugin <= 9.0.5.2 - SQL Injection vulnerability
Subscriber SQL Injection in Community by PeepSo <= 9.0.5.2 versions.
Severity high: primary CNA CVSS 8.5 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.
Published 2026-08-19T12:38:46.116Z. Updated 2026-08-20T15:57:13.624Z.
WordPress JetEngine plugin <= 3.8.14 - Remote Code Execution (RCE) vulnerability
Unauthenticated Remote Code Execution (RCE) in JetEngine <= 3.8.14 versions.
Severity critical: primary CNA CVSS 9.8 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.
Published 2026-08-19T12:38:45.424Z. Updated 2026-08-20T15:57:13.783Z.
WordPress Newsletter plugin <= 9.3.3 - Cross Site Scripting (XSS) vulnerability
Unauthenticated Cross Site Scripting (XSS) in Newsletter <= 9.3.3 versions.
Severity high: primary CNA CVSS 7.1 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.
Published 2026-08-19T12:38:44.706Z. Updated 2026-08-19T19:38:36.483Z.
WordPress Contest Gallery plugin <= 30.0.5 - Cross Site Scripting (XSS) vulnerability
Unauthenticated Cross Site Scripting (XSS) in Contest Gallery <= 30.0.5 versions.
Severity high: primary CNA CVSS 7.1 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.
Published 2026-08-19T12:38:43.997Z. Updated 2026-08-19T15:37:14.491Z.
WordPress YITH WooCommerce Membership Premium plugin <= 2.33.0 - SQL Injection vulnerability
Subscriber SQL Injection in YITH WooCommerce Membership Premium <= 2.33.0 versions.
Severity high: primary CNA CVSS 8.5 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.
Published 2026-08-19T12:38:43.301Z. Updated 2026-08-19T14:39:31.750Z.
WordPress Stitch Express plugin <= 1.9.0 - Broken Access Control vulnerability
Unauthenticated Broken Access Control in Stitch Express <= 1.9.0 versions.
Severity high: primary CNA CVSS 7.5 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.
Published 2026-08-19T12:38:42.578Z. Updated 2026-08-19T15:38:15.797Z.