Vulnerabilities in UNKNOWN

6,349 results
CVE-2026-15236HIGHGallery for Google Photos < 1.2.1 - Unauthenticated Google OAuth Token DisclosureEPSS 0.4%CVE-2026-15048HIGHGeekyBot < 1.2.8 - Unauthenticated Sensitive Information Exposure via Chat HistoryEPSS 0.4%CVE-2026-19715HIGHWP OAuth Server < 6.3.1 - Unauthenticated OAuth Token and User Data Disclosure via Debug Log FileEPSS 0.4%CVE-2026-16602HIGHContent Protector (Passster) < 4.3.6 - Unauthenticated Non-Public Post Content Disclosure via Captcha REST EndpointEPSS 0.4%CVE-2026-18946HIGHContact Form to Any API < 3.0.7 - Unauthenticated Sensitive File Disclosure via Predictable FilenameEPSS 0.4%CVE-2026-19439HIGHUltimate Gift Cards for WooCommerce 3.0.3 - 3.2.9 - Unauthenticated Gift Card Code and Customer PII Disclosure via wps_uwgc_report_detailsEPSS 0.4%CVE-2026-16988HIGHGeoDirectory < 2.8.169 - Unauthenticated Pending/Draft Listing Disclosure via markers REST EndpointEPSS 0.4%CVE-2026-16604HIGHContent Protector (Passster) < 4.3.6 - Unauthenticated Protected Content Disclosure via Content-Lock Block data-content AttributeEPSS 0.4%CVE-2026-77007HIGHHEL Online Classroom: AI-powered Online Classrooms <= 1.0.3 - Unauthenticated BigBlueButton API Secret DisclosureEPSS 0.4%CVE-2026-16611HIGHProduct Feed PRO for WooCommerce < 13.5.7 - Unauthenticated Feed Configuration DisclosureEPSS 0.4%CVE-2026-17541HIGHBit File Manager < 6.9.1 - Unauthenticated File Activity Log DisclosureEPSS 0.4%CVE-2026-17022HIGHSalon Booking System – Free Version < 10.30.34 - Unauthenticated Booking Information Disclosure via Booking WizardEPSS 0.4%CVE-2026-19084HIGHShared Files < 1.7.70 - Unauthenticated Arbitrary File ReadEPSS 0.4%CVE-2021-24688—Orange Form <= 1.0.1 - Unauthenticated Arbitrary Post DeletionEPSS 0.4%CVE-2023-4035MEDIUMSimple Blog Card < 1.31 - Contributor+ Stored XSS via ShortcodeEPSS 0.4%CVE-2026-113584CRITICALReal Estate Website Builder <= 1.4.3 - Unauthenticated Account Takeover via User Email UpdateEPSS 0.4%CVE-2022-4227MEDIUMBooster for WooCommerce - Reflected Cross-Site ScriptingEPSS 0.4%CVE-2022-4946MEDIUMFrontend Post WordPress Plugin <= 2.8.4 - Contributor+ Arbitrary RedirectEPSS 0.4%CVE-2026-110525HIGHMCB Stats <= 1.0.0 - Unauthenticated Stored XSS via User-AgentEPSS 0.4%CVE-2023-5610—Seraphinite Accelerator < 2.20.29 - Authenticated Arbitrary RedirectEPSS 0.4%