Wordfence PRISM

2026

Critical

High

Medium

Low

Global Rank

#67

of 3,179 researchers

Vulns

108

Critical2

High15

Medium91

Low0

Affected Assets

74

74plugins

Avg CVSS

6.1

Average score of vulnerabilities

Researcher Submissions

108 records


2026-07-23 21:25	Ninja Forms <= 3.14.9 - Authenticated (Administrator+) SQL Injection via Import File 'settings' Key Ninja Forms <= 3.14.9	`CVE-2026-15663`	4.9 Medium	Wordfence PRISM	Yes
2026-07-23 20:31	VikBooking Hotel Booking Engine & PMS <= 1.8.13 - Unauthenticated Stored Cross-Site Scripting via Custom Field 'vbfX' Parameter VikBooking Hotel Booking Engine & PMS <= 1.8.13	`CVE-2026-15401`	7.2 High	Wordfence PRISM	Yes
2026-07-23 19:03	VikBooking Hotel Booking Engine & PMS <= 1.8.13 - Reflected Cross-Site Scripting via 'category_id' Parameter VikBooking Hotel Booking Engine & PMS <= 1.8.13	`CVE-2026-15346`	6.1 Medium	Wordfence PRISM	Yes
2026-07-23 19:02	SureDash <= 1.10.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode Attributes SureDash <= 1.10.0	`CVE-2026-15821`	6.4 Medium	Wordfence PRISM	Yes
2026-07-23 19:00	Rich Showcase for Google Reviews <= 6.9.9 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'pagination' Shortcode Attribute Rich Showcase for Google Reviews <= 6.9.9	`CVE-2026-15739`	6.4 Medium	Wordfence PRISM	Yes
2026-07-23 18:29	Fluent Support <= 2.3.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'redirect-to' Shortcode Attribute Fluent Support <= 2.3.0	`CVE-2026-15665`	6.4 Medium	Wordfence PRISM	Yes
2026-07-23 18:28	Cozy Blocks <= 2.2.11 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'icon.view' Block Attribute Cozy Blocks <= 2.2.11	`CVE-2026-15334`	6.4 Medium	Wordfence PRISM	Yes
2026-07-23 18:27	Cozy Blocks <= 2.2.11 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'cozyCustomFont' Block Attribute Cozy Blocks <= 2.2.11	`CVE-2026-15333`	6.4 Medium	Wordfence PRISM	Yes
2026-07-23 18:26	Brands for WooCommerce <= 3.8.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'width' Shortcode Attribute Brands for WooCommerce <= 3.8.8	`CVE-2026-15648`	6.4 Medium	Wordfence PRISM	Yes
2026-07-23 18:05	Visualizer <= 4.0.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'backend-title' Parameter Visualizer <= 4.0.5	`CVE-2026-15653`	6.4 Medium	Wordfence PRISM	Yes

Showing 1–10 of 108 reports

Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C