Vulnerabilities in UNKNOWN
6,349 resultsCVE-2026-16576HIGHDokan < 5.0.14 - Shop Manager+ Arbitrary Plugin Installation/Activation via REST APIEPSS 0.5%CVE-2024-0905MEDIUMFancy Product Designer < 6.1.8 - Reflected Cross Site ScriptingEPSS 0.5%CVE-2026-115245CRITICALChat AI with Dispatcher < 2.4 - Unauthenticated Arbitrary File UploadEPSS 0.5%CVE-2024-0420MEDIUMMapPress Maps for WordPress < 2.88.15 - Contributor+ Stored XSSEPSS 0.5%CVE-2026-114432CRITICALContact Form 7 6.2 - 6.2.3 - Unauthenticated Arbitrary File Upload via Invalid UTF-8 FilenameEPSS 0.5%CVE-2026-74925HIGHMultiVendorX 5.0.0 - 5.0.15 - Store Owner+ Privilege Escalation to AdministratorEPSS 0.5%CVE-2024-10010MEDIUMLearnPress < 4.2.7.2 - Admin+ Stored XSSEPSS 0.5%CVE-2026-81431HIGHRegistration Form for WooCommerce 1.1.0 - 1.1.2 - Contributor+ Privilege Escalation via Unvalidated tgwcfb_idEPSS 0.5%CVE-2026-75796HIGHAI Engine 2.8.0 - 3.6.0 - Admin+ Multisite Network Administrator Account Takeover via MCP User ToolsEPSS 0.5%CVE-2026-85569HIGHTutor LMS 2.7.1 - < 4.0.8 - Read-Only API Key Privilege Escalation via REST Request MisclassificationEPSS 0.5%CVE-2023-0395MEDIUMmenu shortcode <= 1.0 - Contributor+ Stored XSS via ShortcodeEPSS 0.5%CVE-2026-14237HIGHVitepos < 3.6.0 - Outlet Manager+ Privilege EscalationEPSS 0.5%CVE-2026-107126HIGHWP Booking System < 2.1.0.1 - Unauthenticated Stored XSS via X-Forwarded-For HeaderEPSS 0.5%CVE-2023-5458—CITS Support svg, webp Media and TTF,OTF File Upload < 3.0 - Author+ Stored XSS via SVGEPSS 0.5%CVE-2026-77705HIGHAmelia < 2.4.10 - Amelia Manager+ WordPress Account TakeoverEPSS 0.5%CVE-2023-1019MEDIUMHelp Desk WP <= 1.2.0 - Editor+ Stored XSSEPSS 0.5%CVE-2026-11568HIGHProduct Configurator for WooCommerce < 1.7.3 - Unauthenticated Private/Draft Product Data Disclosure via pc_get_dataEPSS 0.5%CVE-2023-5354MEDIUMAwesome Support < 6.1.5 - Reflected Cross-Site ScriptingEPSS 0.5%CVE-2023-4757MEDIUMStaff / Employee Business Directory for Active Directory < 1.2.3 - Improper escaping of LDAP entriesEPSS 0.5%CVE-2024-4217MEDIUMShortcodes Ultimate Pro < 7.1.5 - Contributor+ Stored Cross-Site Scripting XSSEPSS 0.5%