Whitehat SecurityTM · Trademark pending

Today's vulnerabilities

Public security information gathered hourly, actively exploited issues first, with our own short summary and a link to the original.

  • Auto-updated hourly · last updated 11/14/2026, 09:35
  • 119 total
  • 50 exploited
  • Critical 83
  • High 36
  • Critical · CVSS 9.8WordPressnvd:CVE-2026-119077

    WordPress ELEX WordPress HelpDesk & Customer (CVE-2026-119077) [CVSS 9.8]

    A vulnerability in WordPress ELEX WordPress HelpDesk & Customer (CVE-2026-119077) [CVSS 9.8] has been disclosed. Check the vendor's advisory and update.

    Affects
    WordPress ELEX WordPress HelpDesk & Customer (CVE-2026-119077) [CVSS 9.8]
    Published
    2026-11-13

    Source · NVD

  • Critical · CVSS 9.8WordPressnvd:CVE-2026-125055

    WordPress Chatterbug Forms (CVE-2026-125055) [CVSS 9.8]

    A vulnerability in WordPress Chatterbug Forms (CVE-2026-125055) [CVSS 9.8] has been disclosed. Check the vendor's advisory and update.

    Affects
    WordPress Chatterbug Forms (CVE-2026-125055) [CVSS 9.8]
    Published
    2026-11-13

    Source · NVD

  • Critical · CVSS 9.8WordPressnvd:CVE-2026-89324

    WordPress Basel Post Types (CVE-2026-89324) [CVSS 9.8]

    A vulnerability in WordPress Basel Post Types (CVE-2026-89324) [CVSS 9.8] has been disclosed. Check the vendor's advisory and update.

    Affects
    WordPress Basel Post Types (CVE-2026-89324) [CVSS 9.8]
    Published
    2026-11-10

    Source · NVD

  • Critical · CVSS 9.8WordPressOnline storenvd:CVE-2026-93754

    WordPress payever (CVE-2026-93754) [CVSS 9.8]

    A vulnerability in WordPress payever (CVE-2026-93754) [CVSS 9.8] has been disclosed. Check the vendor's advisory and update.

    Affects
    WordPress payever (CVE-2026-93754) [CVSS 9.8]
    Published
    2026-11-07

    Source · NVD

  • Exploited in the wildCriticalWordPresskev:CVE-2026-119977

    WordPress WordPress Core (CVE-2026-119977)

    A vulnerability in WordPress WordPress Core (CVE-2026-119977) is being exploited in the wild. Apply the vendor's security update now.

    Affects
    WordPress WordPress Core (CVE-2026-119977)
    Published
    2026-11-03
    US federal due date
    2026-11-06

    Read our explainerWatch the video

    Source · CISASource · NVD

Is your site affected?

Tell us your stack and we will tell you whether it applies and what to do first.

1:1 security consultation on TelegramSecurity check pricingRead the Security blog