Vulnerabilities in UNKNOWN
6,349 resultsCVE-2026-104028CRITICALAnton Extensions <= 1.2.2 - Unauthenticated Arbitrary File Upload to RCEEPSS 0.6%CVE-2022-1732—Rename wp-login.php <= 2.6.0 - Secret URL Update via CSRFEPSS 0.6%CVE-2021-24922—Pixel Cat Lite < 2.6.2 - CSRF to Stored Cross-Site ScriptingEPSS 0.6%CVE-2023-2223—Login Rebuilder < 2.8.1 - Admin+ Stored XSSEPSS 0.6%CVE-2026-12981HIGHCAFEHAUS API <= 1.0.0 - Unauthenticated Arbitrary User Password ResetEPSS 0.6%CVE-2023-0453MEDIUMWP Private Message < 1.0.6 - Private Message Disclosure via IDOREPSS 0.6%CVE-2026-16261HIGHHuge IT Login <= 1.0.4 - Unauthenticated Account TakeoverEPSS 0.6%CVE-2023-1911MEDIUMBlocksy Companion < 1.8.82 - Subscriber+ Draft Post AccessEPSS 0.5%CVE-2023-7236MEDIUMBackup Bolt <= 1.3.0 - Sensitive Data ExposureEPSS 0.5%CVE-2023-0153MEDIUMVimeo Video Autoplay Automute <= 1.0 - Contributor+ Stored XSSEPSS 0.5%CVE-2022-4833MEDIUMYourChannel: Everything you want in a YouTube plugin < 1.2.3 - Contributor+ Stored XSS via ShortcodeEPSS 0.5%CVE-2023-5886—WP All Export (Free < 1.4.1, Pro < 1.8.6) - Author+ PHAR Deserialization via CSRFEPSS 0.5%CVE-2023-5882—WP All Export (Free < 1.4.1, Pro < 1.8.6) - Remote Code Execution via CSRFEPSS 0.5%CVE-2021-24823—Support Board < 3.3.6 - Arbitrary File Deletion via CSRFEPSS 0.5%CVE-2022-3753MEDIUMEvaluate <= 1.0 - Admin+ Stored Cross-Site ScriptingEPSS 0.5%CVE-2022-0229—miniOrange's Google Authenticator < 5.5 - Unauthenticated Arbitrary Options DeletionEPSS 0.5%CVE-2021-24674—Genie WP Favicon <= 0.5.2 - Arbitrary Favicon Change via CSRFEPSS 0.5%CVE-2021-24802—Colorful Categories < 2.0.15 - Arbitrary Colors Update via CSRFEPSS 0.5%CVE-2024-13569HIGHFront End Users <= 3.2.32 - Reflected XSSEPSS 0.5%CVE-2021-24767—Redirect 404 Error Page to Homepage or Custom Page with Logs < 1.7.9 - Log Deletion via CSRFEPSS 0.5%