Vulnerabilities in UNKNOWN
6,349 resultsCVE-2026-11590HIGHWP Support Plus Responsive Ticket System <= 9.1.2 - Unauthenticated SQL Injection via filter[elements] Array KeysEPSS 0.4%CVE-2026-87767HIGHWP Shortcut Link <= 1.2.0 - Unauthenticated SQL Injection via urlEPSS 0.4%CVE-2026-82304HIGHMusic Store – WordPress eCommerce < 1.4.5 - Unauthenticated SQLi via paypal-data HandlerEPSS 0.4%CVE-2026-12512HIGHQuotes Llama < 3.1.6 - Unauthenticated SQL Injection via sc ParameterEPSS 0.4%CVE-2026-15205HIGHPaymob for WooCommerce < 4.1.9 - Unauthenticated SQL Injection via Paymob Callback Pixel LookupEPSS 0.4%CVE-2026-18474HIGHWP Directory Kit < 1.5.6 - Unauthenticated SQL Injection via search_location and search_categoryEPSS 0.4%CVE-2022-3999HIGHWooCommerce Shipping - DPD baltic < 1.2.57 - Subscriber+ Arbitrary Options DeletionEPSS 0.4%CVE-2026-12721HIGHKirki < 6.0.13 - Unauthenticated SQL InjectionEPSS 0.4%CVE-2026-78472HIGHNi WooCommerce Sales Report < 4.2.0 - Unauthenticated SQLi via 'sort' ParameterEPSS 0.4%CVE-2026-12582HIGHLibrary Management System < 3.5.8 - Unauthenticated SQL Injection via book_idEPSS 0.4%CVE-2026-16950HIGHProduct Shortlist <= 1.0.4 - Unauthenticated SQL Injection via get_shortlisted_productsEPSS 0.4%CVE-2023-0280MEDIUMUltimate Carousel For Elementor <= 2.1.7 - Contributor+ Stored XSSEPSS 0.4%CVE-2023-2899MEDIUMGoogle Map Shortcode <= 3.1.2 - Contributor+ Stored XSSEPSS 0.4%CVE-2021-4457CRITICALZoomSounds < 6.05 - Unauthenticated Arbitrary File UploadEPSS 0.4%CVE-2023-0489—SlideOnline <= 1.2.1 - Contributor+ Stored XSSEPSS 0.4%CVE-2023-0418MEDIUMVideo Central for WordPress <= 1.3.0 - Contributor+ Stored XSSEPSS 0.4%CVE-2023-1323MEDIUMEasy Forms for MailChimp < 6.8.9 - Admin+ Stored XSSEPSS 0.4%CVE-2023-5141—BSK Contact Form 7 Blacklist <= 1.0.1 - Reflected Cross-Site ScriptingEPSS 0.4%CVE-2023-0526MEDIUMPost Shortcode <= 2.0.9 - Contributor+ Stored Cross-Site ScriptingEPSS 0.4%CVE-2023-0369—GoToWP <= 5.1.1 - Contributor+ Stored XSSEPSS 0.4%