Vulnerabilities in UNKNOWN
6,349 resultsCVE-2026-87839HIGHTripzzy < 1.5.1 - Unauthenticated Arbitrary Comment DeletionEPSS 0.4%CVE-2026-76586HIGHBookingPress 1.5.6 - 1.6.2 - Unauthenticated Booking Price Manipulation via PayPal Payment ConfirmationEPSS 0.4%CVE-2021-24836—Temporary Login Without Password < 1.7.1 - Subscriber+ Plugin's Settings UpdateEPSS 0.4%CVE-2024-0427MEDIUMArforms < 6.4.1 - Reflected XSSEPSS 0.4%CVE-2026-106649MEDIUMKali Forms < 2.4.29 - Author+ Stored XSS via Button Click ActionEPSS 0.4%CVE-2026-11575HIGHPhonePe Payment Solutions < 3.1.0 - Unauthenticated Payment Bypass via Forged CallbackEPSS 0.4%CVE-2026-12493HIGHClover Payment Gateway by Zaytech for WooCommerce < 1.3.6 - Unauthenticated Payment Bypass via check_orderEPSS 0.4%CVE-2022-3880MEDIUMAntiHacker < 4.20 - Subscriber+ Arbitrary Plugin InstallationEPSS 0.4%CVE-2024-3978MEDIUMWordPress Jitsi Shortcode <= 0.1 - Contributor+ Stored XSS via ShortcodeEPSS 0.4%CVE-2026-103646CRITICALUltimate Multisite < 2.17.0 - Unauthenticated Authentication Bypass via 'email_address' ParameterEPSS 0.4%CVE-2024-11645MEDIUMFloat Block <= 1.7 - Admin+ Stored XSS via WidgetEPSS 0.4%CVE-2026-2688MEDIUMCM HIPAA Forms < 3.2.0 - Unauthenticated Authorization BypassEPSS 0.4%CVE-2026-87068MEDIUMForminator Forms < 1.57.2.1 - Authenticated Privilege Escalation via Quiz Lead-Form ImportEPSS 0.4%CVE-2026-19222MEDIUMForminator Forms < 1.57.0.7 - Authenticated Privilege Escalation via Registration Form Role BypassEPSS 0.4%CVE-2022-1956—Shortcut Macros <= 1.3 - Subscriber+ Arbitrary Settings UpdateEPSS 0.4%CVE-2024-5199MEDIUMSpotify Play Button <= 1.0 - Contributor+ Stored XSSEPSS 0.4%CVE-2024-4970MEDIUMWidget Bundle <= 2.0.0 - Admin+ Stored XSSEPSS 0.4%CVE-2024-8759MEDIUMNested Pages <= 3.2.8 - Editor+ Stored XSSEPSS 0.4%CVE-2024-10362MEDIUMSocial Media Share Buttons < 2.9.0 - Admin+ Stored XSSEPSS 0.4%CVE-2022-4016MEDIUMBooster for WooCommerce - Custom Role Creation/Deletion via CSRFEPSS 0.4%