Vulnerabilities in UNKNOWN
6,349 resultsCVE-2024-4002LOWCarousel, Slider, Gallery by WP Carousel < 2.6.9 - Editor+ Stored XSSEPSS 0.4%CVE-2024-12770MEDIUMWP ULike < 4.7.6 - Admin+ Stored XSSEPSS 0.4%CVE-2024-6708MEDIUMProfile Builder <= 3.12.0 - Admin+ Stored Cross Site ScriptingEPSS 0.4%CVE-2021-24912—Transposh WordPress Translation < 1.0.8 - CSRF to Stored XSSEPSS 0.4%CVE-2024-8618MEDIUMPage Builder: Pagelayer < 1.9.0- Admin+ Stored XSSEPSS 0.4%CVE-2024-12743MEDIUMMailPoet < 5.5.2 - Admin+ Stored XSSEPSS 0.4%CVE-2024-13128MEDIUMLearnPress – WordPress LMS Plugin < 4.2.7.5.1 - Admin+ Stored XSSEPSS 0.4%CVE-2024-2643MEDIUMMy Sticky Bar < 2.6.8 - Admin+ Stored XSSEPSS 0.4%CVE-2023-4826MEDIUMSocialdriver < 2024 - Prototype Pollution to XSSEPSS 0.4%CVE-2026-14920HIGHAcyMailing < 10.11.1 - Unauthenticated SQL Injection via subscription[] ParameterEPSS 0.4%CVE-2024-3899MEDIUMEnvira Gallery < 1.8.15 - Author+ Stored XSSEPSS 0.4%CVE-2024-6710MEDIUMDitty < 3.1.45 - Author+ Stored XSSEPSS 0.4%CVE-2022-3926MEDIUMWP OAuth Server < 3.4.2 - Client Secret Regeneration via CSRFEPSS 0.4%CVE-2024-11644MEDIUMWP-SVG <= 0.9 - Contributor+ Stored XSS via ShortcodeEPSS 0.4%CVE-2024-4384MEDIUMCSSable Countdown <= 1.5 - Admin+ Stored XSSEPSS 0.4%CVE-2024-3241MEDIUMUltimate Blocks < 3.1.7 - Contributor+ Stored XSSEPSS 0.4%CVE-2025-11127CRITICALMstoreapp Mobile (App <= 2.08, Multivendor <= 9.0.1) - Unauthenticated Privilege EscalationEPSS 0.4%CVE-2026-16949MEDIUMTerm Pages < 2.0.0 - Unauthenticated SQL Injection via tp_lookupEPSS 0.4%CVE-2024-7918MEDIUMPocket Widget <= 0.1.3 - Admin+ Stored XSSEPSS 0.4%CVE-2024-6243MEDIUMHTML Forms < 1.3.33 - Admin+ Stored XSSEPSS 0.4%