Vulnerabilities in UNKNOWN
6,349 resultsCVE-2026-111982HIGHProfile Builder < 4.0.5 - Multisite Subsite Admin+ Network Super Admin Account Takeover via Edit Profile Email ChangeEPSS 0.3%CVE-2024-5170MEDIUMLogo Manager For Enamad <= 0.7.1 - Admin+ Stored XSS via WidgetEPSS 0.3%CVE-2024-6766MEDIUMShortcodes Ultimate Pro < 7.2.1 - Contributor+ Stored XSSEPSS 0.3%CVE-2024-7052MEDIUMForminator < 1.38.3 - Admin+ Stored XSSEPSS 0.3%CVE-2024-4756MEDIUMWP Backpack <= 2.1 - Admin+ Stored XSSEPSS 0.3%CVE-2024-13544MEDIUMZarinpal Paid Downloads <= 2.3 - Admin+ Arbitrary File UploadEPSS 0.3%CVE-2024-9020MEDIUMList category posts < 0.90.3 - Author+ Stored XSSEPSS 0.3%CVE-2025-14975HIGHCustom Login Page Customizer < 2.5.4 - Unauthenticated Arbitrary Password ResetEPSS 0.3%CVE-2024-2470MEDIUMSimple Ajax Chat < 20240412 - Admin+ Stored XSSEPSS 0.3%CVE-2026-108073MEDIUMSureCart < 4.9.5 - Unauthenticated Private Catalog Data Disclosure via 'expand' ParameterEPSS 0.3%CVE-2026-15388MEDIUMCookie Consent < 0.0.10 - Subscriber+ Consent Settings Update and Consent Log DisclosureEPSS 0.3%CVE-2026-105999MEDIUMBooking Package < 1.7.31 - Unauthenticated Calendar Account Information DisclosureEPSS 0.3%CVE-2024-3973MEDIUMHouse Manager <= 1.0.8.4 - Reflected XSSEPSS 0.3%CVE-2024-11636MEDIUMEmail Subscribers < 5.7.45 - Admin+ Stored XSSEPSS 0.3%CVE-2026-14829HIGHCheckimate <= 1.0.13 - Unauthenticated License Deactivation via Hardcoded SecretEPSS 0.3%CVE-2024-3937MEDIUMPlaylist for Youtube <= 1.32 - Editor+ Stored XSSEPSS 0.3%CVE-2024-10076MEDIUMJetpack < 13.8, Boost < 3.4.8 - Contributor+ Stored XSSEPSS 0.3%CVE-2024-8857MEDIUMWordPress Auction <= 3.7 - Editor+ Stored XSSEPSS 0.3%CVE-2024-6498MEDIUMCollectChat < 2.4.4 - Admin+ XSSEPSS 0.3%CVE-2026-108066LOWWP 2FA < 4.2.0 - Admin+ Arbitrary User 2FA Removal via IDOREPSS 0.3%