Vulnerabilities in UNKNOWN

6,367 results
CVE-2026-11887MEDIUMSalon Booking System < 10.30.20 - Subscriber+ Booking Approval BypassEPSS 0.3%CVE-2026-115242MEDIUMWPvivid Backup & Migration < 0.9.137 - Admin+ Path Traversal via Staging Site PathEPSS 0.3%CVE-2026-92424MEDIUMContent Egg < 11.9.0 - Contributor+ Stored XSS via Import QueueEPSS 0.3%CVE-2022-4872MEDIUMWooCommerce Chained Products < 2.12.0 - Unauthenticated Arbitrary Options Update to 'no'EPSS 0.3%CVE-2026-12273MEDIUMTutor LMS < 3.9.13 - Subscriber+ Arbitrary Auto-Approved Comment CreationEPSS 0.3%CVE-2026-115426MEDIUMWPvivid Backup & Migration < 0.9.138 - Admin+ Path Traversal via Local Backup Directory SettingEPSS 0.3%CVE-2026-18960MEDIUMBlock User Account < 2.0.1 - Subscriber+ Account Block Bypass via Application PasswordsEPSS 0.3%CVE-2026-122061MEDIUMEvent Tickets < 5.30.3.1 - Unauthenticated Attendee Name Disclosure via Single Attendee REST EndpointEPSS 0.3%CVE-2026-117523MEDIUMDynific Addons for Elementor < 1.3.1 - Subscriber+ Module Settings Update via aep_module AJAX ActionEPSS 0.3%CVE-2024-3475HIGHSticky Buttons < 3.2.4 - Button Deletion via CSRFEPSS 0.3%CVE-2023-5979—eCommerce Product Catalog Plugin for WordPress < 3.3.26 - Products Deletion via CSRFEPSS 0.3%CVE-2026-111949HIGHminiOrange 2FA 6.2.9 - 6.3.0 - 2FA Bypass via Passkey Second-Factor RebindingEPSS 0.3%CVE-2025-15697HIGHDictionary <= 1.0 - Reflected XSS via Multiple ParametersEPSS 0.3%CVE-2026-113492MEDIUMGeoDirectory < 2.8.194 - Unauthenticated Non-Public Listing Disclosure via Recently Viewed Listings AJAX ActionEPSS 0.3%CVE-2026-97328HIGHWebP Express < 0.25.16 - Unauthenticated Stored XSS via Alter HTML ParserEPSS 0.3%CVE-2026-104646MEDIUMImage Photo Gallery Final Tiles Grid < 3.6.14 - Contributor+ Stored XSS via Gallery Shortcode AttributesEPSS 0.3%CVE-2026-107158MEDIUMLTL Freight Quotes – Old Dominion Edition < 4.2.19 - Unauthenticated FreightDesk Integration Option Update via REST RouteEPSS 0.3%CVE-2026-109934MEDIUMOtter Blocks 3.1.1 - 3.2.7 - Unauthenticated Non-Public Content Disclosure via REST APIEPSS 0.3%CVE-2026-12978HIGHFunnelKit < 3.15.0.6 - Reflected XSS via Divi Optin FormEPSS 0.3%CVE-2026-109935MEDIUMOtter Blocks < 3.2.8 - Unauthenticated Restricted Block Content Disclosure via REST APIEPSS 0.3%