Vulnerabilities in UNKNOWN

6,349 results
CVE-2024-6718MEDIUMPVN Auth Popup <= 1.0.0 - Contributor+ XSS via ShortcodeEPSS 0.3%CVE-2026-119302MEDIUMNotificationX < 3.3.7 - Unauthenticated Non-Public Content Disclosure and Arbitrary Shortcode Execution via Notification PreviewEPSS 0.3%CVE-2026-17014MEDIUMWP Photo Album Plus < 9.2.07.002 - Unauthenticated Export ZIP File Deletion via delexportzipsEPSS 0.3%CVE-2026-81420HIGHTcard WP <= 1.8.0 - Unauthenticated SQLi via group_id ParameterEPSS 0.3%CVE-2024-13868MEDIUMEasy Broken Link Checker <= 9.0.2 - Reflected XSSEPSS 0.3%CVE-2026-87894MEDIUMRox Appointment Booking 1.0.9 - 1.2.2 - Unauthenticated Customer PII Disclosure via IDOREPSS 0.3%CVE-2026-16737MEDIUMWP Travel Engine < 6.8.5 - Unauthenticated Booking Details Disclosure and Modification via wte_add_trip_to_cartEPSS 0.3%CVE-2026-15255MEDIUMRegistrationMagic < 6.0.9.4 - Unauthenticated Form Submission Disclosure via IDOREPSS 0.3%CVE-2026-14229MEDIUMECS < 4.3.8 - Unauthenticated Private Content Disclosure via ecsloadEPSS 0.3%CVE-2026-11869MEDIUMWP DSGVO Tools (GDPR) < 3.1.40 - Unauthenticated Sensitive Information Disclosure via Subject Access RequestEPSS 0.3%CVE-2026-82125MEDIUMSchema & Structured Data for WP & AMP 1.46 - 1.65 - Unauthenticated Non-Public Comment Content Disclosure via IDOREPSS 0.3%CVE-2026-110016MEDIUMData Tables Generator by Supsystic < 1.15.8 - Unauthenticated Table Content Disclosure via IDOREPSS 0.3%CVE-2026-16058MEDIUMYayCurrency < 3.3.5 - Unauthenticated Order and Vendor Financial Data Disclosure via Dokan IntegrationEPSS 0.3%CVE-2026-77771HIGHminiOrange 2FA (Free & Pro) - 2FA Bypass via Session-Scoped OTP LockoutEPSS 0.3%CVE-2024-3966MEDIUMPray For Me <= 1.0.4 - Unauthenticated Stored XSSEPSS 0.3%CVE-2026-13345MEDIUMEssential Addons for Elementor - Lite < 6.6.10 - Unauthenticated Draft/Private WooCommerce Product Disclosure via Compare TableEPSS 0.3%CVE-2026-16567MEDIUMDocument Embedder < 2.3.1 - Unauthenticated Private Document Download via Token OracleEPSS 0.3%CVE-2026-11875MEDIUMWP Support Plus Responsive Ticket System <= 9.1.2 - Unauthenticated Support Ticket Access via Session Cookie ForgeryEPSS 0.3%CVE-2026-13406MEDIUMRoyal Elementor Addons < 1.7.1066 - Unauthenticated Taxonomy Term DisclosureEPSS 0.3%CVE-2026-82848MEDIUMMasteriyo LMS 1.3.1 - 2.3.3 - Unauthenticated Course Enrollment DisclosureEPSS 0.3%