Vulnerabilities in UNKNOWN

6,349 results
CVE-2026-101160HIGHWP Ultimate Review < 2.4.4 - Unauthenticated DoS via Non-Numeric Review RatingEPSS 0.4%CVE-2024-7082MEDIUMeasy-table-of-contents < 2.0.68 - Editor+ Stored XSSEPSS 0.4%CVE-2026-15241HIGHChatBot for eCommerce – WoowBot < 4.8.4 - Unauthenticated Gemini API Key Abuse via qcld_gemini_responseEPSS 0.4%CVE-2026-15206HIGHSMS Alert Order Notifications – WooCommerce < 3.9.8 - Unauthenticated Account Takeover via Unbound OTP Verification in Signup-with-MobileEPSS 0.4%CVE-2025-14892CRITICALPrime Listing Manager <= 1.1 - Unauthenticated Privilege EscalationEPSS 0.4%CVE-2026-14333HIGHDemi - One Click Demo Import, Backup & Site Migration < 0.0.7 - Unauthenticated Sensitive Data Exposure via Public Backup DirectoryEPSS 0.4%CVE-2026-8379HIGHFrontend File Manager Plugin <= 23.6 - Unauthenticated Arbitrary File DownloadEPSS 0.4%CVE-2026-16285HIGHWooCommerce Product Attachment < 2.3.3 - Unauthenticated Arbitrary Media DownloadEPSS 0.4%CVE-2026-115212HIGHmView <= 1.0.3 - Subscriber+ Arbitrary File UploadEPSS 0.4%CVE-2026-115204HIGHAZEXO Store Locator <= 1.4 - Subscriber+ Arbitrary File Write via azt_items_importEPSS 0.4%CVE-2026-16561HIGHSunshine Photo Cart < 3.6.12 - Unauthenticated Private Gallery Comment DisclosureEPSS 0.4%CVE-2026-12687HIGHProfileGrid < 5.9.9.8 - Unauthenticated Privilege Escalation via Unrestricted Group IDEPSS 0.4%CVE-2026-16540HIGHSimply Schedule Appointments < 1.6.12.6 - Unauthenticated Appointment Data Disclosure and Mass Deletion via purge EndpointEPSS 0.4%CVE-2026-14603HIGHWowOptin < 1.4.38 - Unauthenticated Opt-in Deactivation and Template Row InjectionEPSS 0.4%CVE-2026-13610HIGHKiviCare < 4.5.2 - Unauthenticated Privilege Escalation via RegistrationEPSS 0.4%CVE-2026-14930HIGHJS Help Desk < 3.1.4 - Unauthenticated Arbitrary Ticket File Attachment UploadEPSS 0.4%CVE-2026-12082HIGHPraison AI SEO < 5.0.7 - Unauthenticated Multiple Missing Authorization (Post Permalink Modification, Plugin Settings Disclosure)EPSS 0.4%CVE-2023-6530MEDIUMTJ Shortcodes <= 0.1.3 - Contributor+ Stored XSS via ShortcodesEPSS 0.4%CVE-2026-18789HIGHEzoic < 2.23.1 - Unauthenticated Database Export via Content Export REST RoutesEPSS 0.4%CVE-2026-16736HIGHUser Registration & Membership < 5.2.6 - Unauthenticated Account Creation While Registration DisabledEPSS 0.4%