Vulnerabilities in UNKNOWN
6,349 resultsCVE-2021-24543—jQuery Reply to Comment <= 1.31 - CSRF to Stored Cross-Site ScriptingEPSS 0.4%CVE-2024-13585LOWAjax Search Lite < 4.12.5 - Admin+ Stored XSSEPSS 0.4%CVE-2023-0820HIGHUser Role by BestWebSoft < 1.6.7 - Privilege Escalation via CSRFEPSS 0.4%CVE-2021-24172—VM Backups <= 1.0 - CSRF to Database Backup DownloadEPSS 0.4%CVE-2026-13690HIGHUsersWP < 1.2.67 - Two-Factor Authentication BypassEPSS 0.4%CVE-2022-3208—Simple File List < 4.4.13 - Page Creation via CSRFEPSS 0.4%CVE-2024-0237MEDIUMEventON (Free < 2.2.9, Premium <= 4.5.8) - Unauthenticated Virtual Event Settings UpdateEPSS 0.4%CVE-2026-16265MEDIUMWP Maps < 4.9.7 - Subscriber+ Denial of ServiceEPSS 0.4%CVE-2022-2762MEDIUMAdminPad < 2.2 - Note Update via CSRFEPSS 0.4%CVE-2026-3430HIGHCreative Mail 1.6.5 - 1.6.9 - Unauthenticated SQLiEPSS 0.4%CVE-2022-4107MEDIUMSMSA Shipping for WooCommerce < 1.0.5 - Subscriber+ Arbitrary File DownloadEPSS 0.4%CVE-2026-85015MEDIUMUnlimited Elements For Elementor < 2.0.21 - Authenticated Arbitrary File Write via Path TraversalEPSS 0.4%CVE-2024-6843MEDIUMSmartSearch WP <= 2.4.4 - Unauthenticated Stored XSSEPSS 0.4%CVE-2025-10916CRITICALFormGent < 1.0.4 - Unauthenticated Arbitrary File DeletionEPSS 0.4%CVE-2024-4616MEDIUMWidget Bundle <= 2.0.0 - Unauthencated Reflected XSSEPSS 0.4%CVE-2026-77826HIGHRegistrationMagic 5.0.1.8 - 6.0.9.8 - Unauthenticated Authentication Bypass via Missing Facebook Token Audience ValidationEPSS 0.4%CVE-2026-14596HIGHDynamicKit for Elementor < 1.0.3 - Unauthenticated Account Takeover via Password Reset Link Host InjectionEPSS 0.4%CVE-2024-4857MEDIUMFS Product Inquiry <= 1.1.1 - Unauthenticated Stored XSSEPSS 0.4%CVE-2026-101161HIGHWP Ultimate Review < 2.4.4 - Unauthenticated DoS via Unset Display Settings in wp-reviews ShortcodeEPSS 0.4%CVE-2022-3419MEDIUMAutomatic User Roles Switcher < 1.1.2 - Subscriber+ Privilege EscalationEPSS 0.4%