Section

Vulnerabilities

CVE records from NVD, ZDI advisories and the CISA KEV catalog, with CVSS, EPSS, SSVC and exploitation state.

4 matching records.

1. 38
   CVE NVD 1h ago

   The Registration Form for WooCommerce plugin for WordPress is vulnerable to privilege escalation due to a missing allow-list check in the…

   The Registration Form for WooCommerce plugin for WordPress is vulnerable to privilege escalation due to a missing allow-list check in the FormHandler::validate_checkout_fields() function in versions up to, and including, 1.1.4…

   CVSS 9.8 CVE-2026-119075 Themegrill Web platform
2. 18
   CVE NVD 3h ago

   Missing Authorization vulnerability in ThemeGrill User Registration user-registration allows Exploiting Incorrectly Configured Access Control…

   Missing Authorization vulnerability in ThemeGrill User Registration user-registration allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects User Registration: from n/a through 5.3.0.

   CVSS 4.3 CVE-2026-120840 ThemeGrill
3. 3
   CVE NVD 8d ago

   Missing Authorization vulnerability in ThemeGrill User Registration user-registration allows Exploiting Incorrectly Configured Access Control…

   Missing Authorization vulnerability in ThemeGrill User Registration user-registration allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects User Registration: from n/a through 5.3.0.

   CVSS 5.3 CVE-2026-25450 ThemeGrill
4. 3
   CVE NVD 8d ago

   Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) vulnerability in ThemeGrill User Registration user-registration allows…

   Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) vulnerability in ThemeGrill User Registration user-registration allows Code Injection.This issue affects User Registration: from n/a through 5.3.0.

   CVSS 5.3 CVE-2026-25467 ThemeGrill

Same filters as JSON: /api/items?category=vuln&window=30d&vendor=Themegrill&limit=100. RSS for this section: feed.xml.