Vulnerabilities in UNKNOWN
6,367 resultsCVE-2026-89302HIGHPost Voting System <= 1.0 - Unauthenticated SQLi via 'id' ParameterEPSS 0.3%CVE-2026-89285HIGHDatalist it <= 0.0.3 - Unauthenticated SQLi via dli_fronted_actionEPSS 0.3%CVE-2026-14862LOWSupport Genix Lite < 1.4.48 - Unauthenticated Ticket Attachment Download via Missing AuthorizationEPSS 0.3%CVE-2026-109925HIGHProductive Commerce < 1.1.54 - Unauthenticated SQLi via Wishlist and Compare HandlersEPSS 0.3%CVE-2025-10406MEDIUMBlindMatrix e-Commerce < 3.1 - Contributor+ LFIEPSS 0.3%CVE-2026-110691MEDIUMWPOrLogin < 3.1.0 - Unauthenticated Hide Login Slug UpdateEPSS 0.3%CVE-2026-82195MEDIUM10Web Booster < 2.34.0 - Unauthenticated Connection Secret Disclosure and DeletionEPSS 0.3%CVE-2025-2561MEDIUMNinja Forms < 3.10.1 - Admin+ Stored XSSEPSS 0.3%CVE-2025-2560MEDIUMNinja Forms < 3.10.1 - Admin+ Stored XSSEPSS 0.3%CVE-2026-108685LOWWP Post Author < 4.2.0 - Unauthenticated Modification of the First User Account's Profile FieldsEPSS 0.3%CVE-2025-3662MEDIUMFancyBox for WordPress < 3.3.6 - Unauthenticated Stored XSSEPSS 0.3%CVE-2025-13031MEDIUMWPeMatico RSS Feed Fetcher < 2.8.13 - Contributor+ Stored XSSEPSS 0.3%CVE-2026-97332MEDIUMUser Private Files < 2.2.0 - Unauthenticated Private File Disclosure via .htaccess Rewrite Rule Bypass (Multisite)EPSS 0.3%CVE-2026-107319MEDIUMGamiPress < 8.0.6 - Subscriber+ Activity Log DisclosureEPSS 0.3%CVE-2024-3405HIGHWP Prayer <= 2.0.9 - Settings Update via CSRFEPSS 0.3%CVE-2026-11870MEDIUMHide My WP Ghost < 7.0.05 - IP Address Spoofing via Trusted Proxy Headers Leading to Protection Mechanism BypassEPSS 0.3%CVE-2026-17013MEDIUMWP Photo Album Plus < 9.2.07.002 - Reflected XSS via lbstartEPSS 0.3%CVE-2025-9111LOWWPBOT < 7.1.0 - Admin+ Stored XSSEPSS 0.3%CVE-2025-1485MEDIUMReal Cookie Banner < 5.1.6 - Admin+ Stored XSSEPSS 0.3%CVE-2025-4567MEDIUMPost Slider and Carousel with Widget < 3.2.10 - Admin+ Stored XSSEPSS 0.3%