Vulnerabilities in UNKNOWN
6,367 resultsCVE-2026-14566MEDIUMAdvanced Customized Prompts <= 1.0.1 - Subscriber+ WooCommerce Order Item Metadata TamperingEPSS 0.3%CVE-2026-14185MEDIUMWPBot AI ChatBot < 8.2.0 - Subscriber+ RAG Settings UpdateEPSS 0.3%CVE-2026-19052MEDIUMProSolution WP Client < 2.0.9 - Subscriber+ proSol_ajaxTablesync and proSol_ajaxClearlog CallsEPSS 0.3%CVE-2026-79995MEDIUMUser Registration & Membership < 5.2.5 - Subscriber+ Pending Email Change Cancellation via IDOREPSS 0.3%CVE-2026-93510MEDIUMPoints and Rewards for WooCommerce < 2.10.4 - Subscriber+ Arbitrary Points and Wallet Balance Manipulation via assign_claim_pointsEPSS 0.3%CVE-2026-14859MEDIUMWP Crowdfunding < 2.2.1 - Subscriber+ Campaign Creation via Missing AuthorizationEPSS 0.3%CVE-2025-1627MEDIUMQi Blocks < 1.4 - Contributor+ Stored XSS via ToC BlockEPSS 0.3%CVE-2026-18807MEDIUMECS < 4.3.13 - Contributor+ Arbitrary Post Binding and Global Preset Modification via Dynamic Repeater HandlersEPSS 0.3%CVE-2026-81427MEDIUMWC Vendors < 2.7.2.1 - Vendor+ Cross-Vendor Order Shipment Status ChangeEPSS 0.3%CVE-2026-13612MEDIUMKiviCare < 4.5.2 - Patient+ Cross-Patient Bill, Invoice and Appointment Disclosure via IDOREPSS 0.3%CVE-2026-91025MEDIUMBooking Manager < 2.1.21 - Subscriber+ Arbitrary User Plugin Meta Modification via IDOREPSS 0.3%CVE-2026-92426MEDIUMYITH WooCommerce Popup < 1.60.0 - Contributor+ Arbitrary Post Meta DeletionEPSS 0.3%CVE-2026-12698MEDIUMwpForo Forum < 3.1.3 - Subscriber+ Account Status and Reputation Manipulation via Profile Update Mass AssignmentEPSS 0.3%CVE-2026-18962MEDIUMWP Photo Album Plus < 9.2.09.002 - Subscriber+ Cross-Album File Upload via Missing AuthorizationEPSS 0.3%CVE-2026-13177MEDIUMEventin < 4.1.20 - Contributor+ Order Information Disclosure via IDOREPSS 0.3%CVE-2026-18200MEDIUMFoodBoxBooker < 1.0.8 - Subscriber+ Arbitrary User Profile UpdateEPSS 0.3%CVE-2026-15260MEDIUMGeo My WP < 4.5.5.3 - Subscriber+ Arbitrary Geolocation Record Modification and Deletion via IDOREPSS 0.3%CVE-2026-77789MEDIUMStripe Payment Forms by WP Full Pay < 8.5.1 - Cross-Customer Subscription Modification via IDOREPSS 0.3%CVE-2026-14196MEDIUMWCFM Marketplace < 3.8.1 - Store Vendor+ Cross-Vendor Review Deletion and Status Update via IDOREPSS 0.3%CVE-2026-11562MEDIUMWS Form LITE < 1.11.8 - Subscriber+ Arbitrary Settings UpdateEPSS 0.3%