Vulnerabilities in UNKNOWN

6,349 results
CVE-2024-11841MEDIUMTithe.ly Giving Button <= 1.1 - Contributor+ Stored XSS via ShortcodeEPSS 0.3%CVE-2025-15671MEDIUMWelcart e-Commerce < 2.12.1 - Session Fixation via uscesid ParameterEPSS 0.3%CVE-2024-10151MEDIUMAuto iFrame < 2.0 - Contributor+ XSS via ShortcodeEPSS 0.3%CVE-2024-12807MEDIUMSocial Share Buttons for WordPress <= 2.7 - Admin+ Stored XSSEPSS 0.3%CVE-2023-7088MEDIUMAdd SVG Support for Media Uploader | inventivo <= 1.0.5 - Author+ Stored XSS via SVGEPSS 0.3%CVE-2024-7713HIGHAI Chatbot with ChatGPT by AYS <= 2.0.9 - Unauthenticated OpenAI Key DisclosureEPSS 0.3%CVE-2023-7086MEDIUMSVG Uploads Support <= 2.1.1 - Author+ Stored XSS via SVGEPSS 0.3%CVE-2026-14822MEDIUMEvent Tickets < 5.29.0.1 - Unauthenticated PayPal Order Status ManipulationEPSS 0.3%CVE-2026-84936MEDIUMEmbedPress 4.6.0 - 4.6.3 - Unauthenticated Google Reviews API Quota Consumption and Database BloatEPSS 0.3%CVE-2026-16608MEDIUMDownload Monitor < 5.2.6 - Unauthenticated Download Log InjectionEPSS 0.3%CVE-2026-12514MEDIUMShared Files < 1.7.70 - Unauthenticated Limited File UploadEPSS 0.3%CVE-2026-113500HIGHLiteSpeed Cache < 7.9.2 - Unauthenticated Stored XSS via Font Display OptimizationEPSS 0.3%CVE-2026-11966MEDIUMUser Registration & Membership < 5.2.3 - Unauthenticated Limited User Deletion via Stripe Subscription HandlerEPSS 0.3%CVE-2026-15237MEDIUMHotel Booking Lite < 6.2.3 - Unauthenticated Payment Record Creation via Checkout Payments REST EndpointEPSS 0.3%CVE-2026-77701MEDIUMWCFM Marketplace < 3.8.2 - Unauthenticated Refund Request Creation on Guest OrdersEPSS 0.3%CVE-2026-14547MEDIUMEstatik Real Estate Plugin < 4.3.3 - Unauthenticated Arbitrary-Recipient Mail Relay via Request FormEPSS 0.3%CVE-2026-83555MEDIUMEmail Subscribers by Icegram Express < 5.9.35 - Unauthenticated Subscription Status Change via Missing Token VerificationEPSS 0.3%CVE-2026-14317MEDIUMGiveWP < 4.16.3 - Unauthenticated Payment Gateway Restriction BypassEPSS 0.3%CVE-2026-85038MEDIUMB2BKing < 5.2.40 - Unauthenticated B2B Group Assignment and Approval Bypass via Registration Role SelectionEPSS 0.3%CVE-2026-79630MEDIUMWPFunnels < 3.13.0 - Unauthenticated Price Manipulation via Order Bump Product ID SubstitutionEPSS 0.3%