Identifier and description search over the retained local snapshot. Filters apply to the cohort immediately; every chart links back into the same filter state.
Matching cohort: 14,934 published records · 32 KEV · 14,934 with a forecast · 0 unknown dates
14,934 matching published records · 0 with an unknown publication date
Every segment and month is a link that preserves the other filters.
Share of cohort: KEV 0.21% · forecast 100% · unscored 24%.
WordPress Admin Notices Manager plugin <= 1.6.0 - SQL Injection vulnerability
Administrator SQL Injection in Admin Notices Manager <= 1.6.0 versions.
Severity high: primary CNA CVSS 7.6 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.
Published 2026-09-30T12:27:38.966Z. Updated 2026-09-30T13:17:04.260Z.
WordPress All In One WP Security & Firewall plugin <= 5.4.8 - Bypass Vulnerability vulnerability
Subscriber Bypass Vulnerability in All In One WP Security & Firewall <= 5.4.8 versions.
Severity medium: primary CNA CVSS 4.2 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.
Published 2026-09-30T12:27:38.067Z. Updated 2026-09-30T13:17:03.968Z.
WordPress Template Kit – Import plugin <= 1.0.16 - Arbitrary File Deletion vulnerability
Editor Arbitrary File Deletion in Template Kit – Import <= 1.0.16 versions.
Severity medium: primary CNA CVSS 6.8 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.
Published 2026-09-30T12:27:37.224Z. Updated 2026-09-30T13:17:04.118Z.
WordPress Customer Reviews for WooCommerce plugin <= 5.120.0 - Arbitrary Content Deletion vulnerability
Unauthenticated Arbitrary Content Deletion in Customer Reviews for WooCommerce <= 5.120.0 versions.
Severity high: primary CNA CVSS 7.5 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.
Published 2026-09-30T12:27:36.403Z. Updated 2026-09-30T13:27:07.293Z.
WordPress Books Gallery plugin <= 4.8.3 - SQL Injection vulnerability
Unauthenticated SQL Injection in Books Gallery <= 4.8.3 versions.
Severity critical: primary CNA CVSS 9.3 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.
Published 2026-09-30T12:27:35.569Z. Updated 2026-09-30T13:27:07.162Z.
WordPress FluentBoards plugin <= 2.0.12 - Privilege Escalation vulnerability
Subscriber Privilege Escalation in FluentBoards <= 2.0.12 versions.
Severity medium: primary CNA CVSS 6.3 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.
Published 2026-09-30T12:27:34.720Z. Updated 2026-09-30T13:27:07.022Z.
WordPress Awesome Support plugin <= 6.3.9 - Cross Site Scripting (XSS) vulnerability
Subscriber Cross Site Scripting (XSS) in Awesome Support <= 6.3.9 versions.
Severity high: primary CNA CVSS 7.1 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.
Published 2026-09-30T12:27:33.889Z. Updated 2026-09-30T13:27:12.633Z.
WordPress oik plugin <= 4.15.4 - Cross Site Scripting (XSS) vulnerability
Subscriber Cross Site Scripting (XSS) in oik <= 4.15.4 versions.
Severity high: primary CNA CVSS 7.1 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.
Published 2026-09-30T12:27:33.090Z. Updated 2026-09-30T13:27:12.502Z.
WordPress WP Express Checkout (Accept PayPal Payments) plugin <= 2.4.9 - Broken Access Control vulnerability
Unauthenticated Broken Access Control in WP Express Checkout (Accept PayPal Payments) <= 2.4.9 versions.
Severity high: primary CNA CVSS 7.5 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.
Published 2026-09-30T12:27:32.267Z. Updated 2026-09-30T13:27:12.372Z.
WordPress MakeCommerce for WooCommerce plugin <= 4.1.0 - Broken Access Control vulnerability
Subscriber Broken Access Control in MakeCommerce for WooCommerce <= 4.1.0 versions.
Severity high: primary CNA CVSS 8.2 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.
Published 2026-09-30T12:27:31.463Z. Updated 2026-09-30T13:27:12.234Z.
WordPress Trusted Shops Easy Integration for WooCommerce plugin <= 2.0.6 - Cross Site Scripting (XSS) vulnerability
Unauthenticated Cross Site Scripting (XSS) in Trusted Shops Easy Integration for WooCommerce <= 2.0.6 versions.
Severity high: primary CNA CVSS 7.1 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.
Published 2026-09-30T12:27:30.621Z. Updated 2026-09-30T13:27:12.097Z.
WordPress Vitepos plugin <= 3.5.0 - Privilege Escalation vulnerability
Custom role Privilege Escalation in Vitepos <= 3.5.0 versions.
Severity high: primary CNA CVSS 7.2 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.
Published 2026-09-30T12:27:29.805Z. Updated 2026-09-30T13:27:11.963Z.
WordPress WooCommerce Product Table Lite plugin <= 5.6.7 - Cross Site Scripting (XSS) vulnerability
Unauthenticated Cross Site Scripting (XSS) in WooCommerce Product Table Lite <= 5.6.7 versions.
Severity high: primary CNA CVSS 7.1 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.
Published 2026-09-30T12:27:28.946Z. Updated 2026-09-30T13:27:11.837Z.
WordPress pixfort Core plugin < 4.3.3 - Cross Site Scripting (XSS) vulnerability
Contributor Cross Site Scripting (XSS) in pixfort Core < 4.3.3 versions.
Severity medium: primary CNA CVSS 5.4 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.
Published 2026-09-30T12:27:28.155Z. Updated 2026-09-30T13:27:11.697Z.
WordPress YITH WooCommerce Ajax Search plugin <= 2.28.0 - Cross Site Scripting (XSS) vulnerability
Unauthenticated Cross Site Scripting (XSS) in YITH WooCommerce Ajax Search <= 2.28.0 versions.
Severity high: primary CNA CVSS 7.1 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.
Published 2026-09-30T12:27:27.335Z. Updated 2026-09-30T13:27:11.550Z.
WordPress Classified Listing plugin <= 6.1.3 - Cross Site Scripting (XSS) vulnerability
Unauthenticated Cross Site Scripting (XSS) in Classified Listing <= 6.1.3 versions.
Severity high: primary CNA CVSS 7.1 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.
Published 2026-09-30T12:27:26.574Z. Updated 2026-09-30T13:27:11.423Z.
WordPress Estatik plugin <= 4.3.5 - Privilege Escalation vulnerability
Subscriber Privilege Escalation in Estatik <= 4.3.5 versions.
Severity critical: primary CNA CVSS 9.8 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.
Published 2026-09-30T12:27:25.767Z. Updated 2026-09-30T13:27:06.899Z.
WordPress SiteSkite plugin <= 2.1.8 - Remote Code Execution (RCE) vulnerability
Unauthenticated Remote Code Execution (RCE) in SiteSkite <= 2.1.8 versions.
Severity critical: primary CNA CVSS 10 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.
Published 2026-09-30T12:27:24.923Z. Updated 2026-09-30T13:27:06.769Z.
WordPress Bookly plugin <= 28.2 - Broken Access Control vulnerability
Unauthenticated Broken Access Control in Bookly <= 28.2 versions.
Severity high: primary CNA CVSS 7.5 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.
Published 2026-09-30T12:27:24.147Z. Updated 2026-09-30T13:27:06.638Z.
WordPress Bookly plugin <= 28.2 - Insecure Direct Object References (IDOR) vulnerability
Subscriber Insecure Direct Object References (IDOR) in Bookly <= 28.2 versions.
Severity medium: primary CNA CVSS 6.5 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.
Published 2026-09-30T12:27:23.350Z. Updated 2026-09-30T13:27:06.513Z.