Vulnerabilities in UNKNOWN
6,349 resultsCVE-2026-18480HIGHSureCart < 4.6.3 - Subscriber+ Administrator Account TakeoverEPSS 0.4%CVE-2026-87759HIGHAdd User Autocomplete < 1.2 - Subscriber+ Privilege EscalationEPSS 0.4%CVE-2026-8157HIGHVitepos < 3.4.2 - Outlet Manager+ Privilege EscalationEPSS 0.4%CVE-2024-1106MEDIUMShariff Wrapper < 4.6.10 - Admin+ Stored XSSEPSS 0.4%CVE-2026-76547MEDIUMProfile Builder < 4.0.1 - Admin+ PHP Object Injection via Import/ExportEPSS 0.4%CVE-2023-6732MEDIUMUltimate Maps by Supsystic < 1.2.16 - Admin+ Stored XSSEPSS 0.4%CVE-2024-3239MEDIUMPostX < 4.0.2 - Contributor+ Stored XSSEPSS 0.4%CVE-2024-1401MEDIUMProfile Box Shortcode And Widget < 1.2.1 Admin+ Stored XSSEPSS 0.4%CVE-2024-6076MEDIUMWP eStore < 8.5.5 - Reflected XSS in Category EditingEPSS 0.4%CVE-2022-1831—WPlite <= 1.3.1 - Arbitrary Settings Update via CSRFEPSS 0.4%CVE-2026-17542HIGHBit File Manager < 6.9.1 - Subscriber+ Sensitive Data Disclosure via bitapps_fm_connectorEPSS 0.4%CVE-2022-1830—Amazon Einzeltitellinks <= 1.3.3 - Arbitrary Settings Update to Stored XSS via CSRFEPSS 0.4%CVE-2026-16594HIGHWP Directory Kit < 1.5.5 - Subscriber+ Plugin Settings and API Key DisclosureEPSS 0.4%CVE-2022-1251—Ask Me < 6.8.4 - CSRF in Edit ProfileEPSS 0.4%CVE-2023-6373HIGHArtPlacer Widget < 2.20.7 - Editor+ SQLiEPSS 0.4%CVE-2024-3986MEDIUMSportsPress < 2.7.22 - Admin+ Stored XSSEPSS 0.4%CVE-2026-12877CRITICALSoftware Issue Manager < 5.1.0 - Unauthenticated SQL Injection via Search ParameterEPSS 0.4%CVE-2026-8071HIGHSpam protection, Honeypot, Anti-Spam by CleanTalk < 6.79 - Unauthenticated Stored XSS via Comment Shortcode BypassEPSS 0.4%CVE-2024-3112MEDIUMQuotes and Tips < 1.45 - Admin+ Arbitrary File UploadEPSS 0.4%CVE-2024-10518MEDIUMProfilePress < 4.15.15 - Admin+ Stored XSSEPSS 0.4%