Vulnerabilities in UNKNOWN
6,367 resultsCVE-2026-77790MEDIUMRegistrationMagic < 6.0.9.4 - Admin+ SQLi via 'rm_sortby' ParameterEPSS 0.3%CVE-2026-19416MEDIUMKiviCare < 4.5.4 - Patient+ Cross-Patient Appointment Modification via IDOREPSS 0.3%CVE-2026-100145MEDIUMSynchrony Financing 1.0.5 - 1.1.1 - Unauthenticated Order Takeover via admin_order_callback REST RouteEPSS 0.3%CVE-2026-110135HIGHOTP Login & Register Woocommerce < 2.7.3 - Unauthenticated Account Takeover via OTP Brute ForceEPSS 0.3%CVE-2026-13407MEDIUMRoyal Elementor Addons < 1.7.1067 - Unauthenticated Stored HTML Injection in Form Notification EmailsEPSS 0.3%CVE-2026-107447MEDIUMContest Gallery < 34.0.1 - Unauthenticated Vote Restriction Bypass via Spoofable Client-IP and Forgeable Voter IdentityEPSS 0.3%CVE-2024-6230MEDIUMPardakht Delkhah <= 2.9.8 - Form Fields Reset via CSRFEPSS 0.3%CVE-2022-4368MEDIUMWP CSV <= 1.8.0.0 - Reflected XSS via CSV ImportEPSS 0.3%CVE-2026-3881MEDIUMPerformance Monitor <= 1.0.6 - Unauthenticated Blind SSRFEPSS 0.3%CVE-2025-10124MEDIUMBooking Manager < 2.1.15 - Contributor+ Booking DeletionEPSS 0.3%CVE-2026-91020MEDIUMWebToffee Gift Cards for WooCommerce < 1.3.1 - Unauthenticated Gift Card Amount Manipulation via wt_credit_amountEPSS 0.3%CVE-2024-4758HIGHMuslim Prayer Time BD <= 2.4 - Settings Reset via CSRFEPSS 0.3%CVE-2025-13820MEDIUMComments – wpDiscuz < 7.6.40 - Unauthenticated Account TakeoverEPSS 0.3%CVE-2026-84069MEDIUMWebFacing Email Accounts for cPanel 5.3 - 5.3.6 - Unauthenticated LFI via assets/index.phpEPSS 0.3%CVE-2024-0677MEDIUMPz-LinkCard <= 2.5.1 - Contributor+ SSRFEPSS 0.3%CVE-2025-5526MEDIUMBuddyPress Docs < 2.2.5 - Subscriber+ Arbitrary Document Read/UpdateEPSS 0.3%CVE-2022-4102LOWRoyal Elementor Addons < 1.3.56 - Subscriber+ Arbitrary Post DeletionEPSS 0.3%CVE-2026-111962LOWWP Remote Users Sync < 2.2.0 - Unauthenticated Sensitive Data Disclosure via Public User Export FileEPSS 0.3%CVE-2026-118186MEDIUMPublishPress Revisions 3.6.0 - 4.2.0 - Contributor+ Unapproved Content Publishing via Revision WorkflowEPSS 0.3%CVE-2026-88930HIGHSocial Web Suite <= 4.1.12 - Unauthenticated Blind SQLi via Unset Shared SecretEPSS 0.3%