Vulnerabilities in UNKNOWN
6,349 resultsCVE-2026-14235HIGHWordPress Download Manager < 3.3.62 - Unauthorized Protected File Download via Reusable Download KeyEPSS 0.4%CVE-2026-12497HIGHProfilePress < 4.16.18 - Unauthenticated Privilege Escalation via Registration Role SelectionEPSS 0.4%CVE-2024-2972LOWFloating Chat Widget < 3.1.9 - Editor+ Stored XSSEPSS 0.4%CVE-2025-15700HIGHAWP Classifieds < 4.4.9 - Admin+ Arbitrary File Upload via ZIP ImportEPSS 0.4%CVE-2022-4669—Page Builder: Live Composer < 1.5.23 - Contributor+ Stored XSS via ShortcodeEPSS 0.4%CVE-2022-2146—Import CSV Files <= 1.0 - Reflected Cross-Site ScriptingEPSS 0.4%CVE-2024-6334MEDIUM Easy Table of Contents < 2.0.67 - Editor+ Stored XSSEPSS 0.4%CVE-2024-8619MEDIUMAjax Search Lite <= 4.12.2 - Admin+ Stored XSSEPSS 0.4%CVE-2024-10483HIGHSimplePress Forum < 6.10.11 - Reflected XSSEPSS 0.4%CVE-2026-12277HIGHFrontend File Manager Plugin <= 23.6 - Unauthenticated Arbitrary File Deletion via Saved File Metadata Path TraversalEPSS 0.4%CVE-2026-85642HIGHFormidable Forms 6.5 - 6.35 - Unauthenticated Payment Gateway Connect Verification DoSEPSS 0.4%CVE-2026-84937MEDIUMYT Player < 2.1.0 - Contributor+ SQLi via ytp_ajaxEPSS 0.4%CVE-2026-7842MEDIUMInfility Global < 2.15.20 - Editor+ SQL Injection via orderby ParameterEPSS 0.4%CVE-2026-76557MEDIUMWP Import Export Lite < 3.9.33 - Authenticated SQLi via Import OptionsEPSS 0.4%CVE-2026-76556MEDIUMWP Import Export Lite < 3.9.33 - Authenticated SQLi via Export Filter RulesEPSS 0.4%CVE-2024-13314LOWCarousel, Slider, Gallery by WP Carousel < 2.7.4 - Admin+ Stored XSSEPSS 0.4%CVE-2026-16593MEDIUMWP Directory Kit <= 1.5.7 - Editor+ SQL Injection via Elementor Category and Location Widget SettingsEPSS 0.4%CVE-2024-6020MEDIUMSign-up Sheets < 2.2.13 - Reflected XSSEPSS 0.4%CVE-2026-15153MEDIUMWP Hotel Booking < 2.3.2 - Hotel Manager+ SQL Injection via Booking List SearchEPSS 0.4%CVE-2024-6884MEDIUMGutenberg Blocks with AI by Kadence WP < 3.2.39 - Contributor+ Stored XSSEPSS 0.4%