Vulnerabilities in UNKNOWN

6,367 results
CVE-2026-84150MEDIUMDirectorist < 8.9.5 - Subscriber+ Cross-User Favorites Read and Write via REST Favorites EndpointEPSS 0.2%CVE-2026-110191LOWProduct Delivery Date for WooCommerce – Lite < 3.3.2 - Contributor+ Order Information Disclosure via Calendar View AJAX ActionsEPSS 0.2%CVE-2026-85133MEDIUMWPLP Cookie Consent < 4.4.2 - Subscriber+ Missing Authorization via Multiple Settings AJAX ActionsEPSS 0.2%CVE-2026-19050MEDIUMProSolution WP Client < 2.0.9 - Subscriber+ SSRF via proSol_url_validateEPSS 0.2%CVE-2026-14224MEDIUMEasy Appointments < 3.12.28 - Subscriber+ Cross-User Appointment Data Modification via IDOREPSS 0.2%CVE-2026-16064MEDIUMEvent Booking Manager for WooCommerce < 5.3.7 - Contributor+ Arbitrary Post Modification via mpwem_quick_edit_eventEPSS 0.2%CVE-2026-12689MEDIUMProfileGrid < 5.9.9.7 - Subscriber+ Cross-User Private Message Thread Deletion and Tampering via Missing AuthorizationEPSS 0.2%CVE-2026-111740LOWPost Duplicator < 3.0.17 - Contributor+ Draft and Private Post Title DisclosureEPSS 0.2%CVE-2026-104681LOWEnvira Gallery < 1.16.2 - Author+ Non-Public Post Title and Excerpt Disclosure via Gallery REST FieldEPSS 0.2%CVE-2025-9540MEDIUMMarkup Markdown < 3.20.10 - Contributor+ Stored XSSEPSS 0.2%CVE-2025-9541MEDIUMMarkup Markdown < 3.20.10 - Contributor+ Stored XSSEPSS 0.2%CVE-2026-88764MEDIUMSimple Membership < 4.7.8 - Subscriber+ Membership Level Escalation via PayPal Standard subsc_refEPSS 0.2%CVE-2026-13703MEDIUMSEO Redirection Plugin – 301 Redirect Manager < 9.19 - Subscriber+ Redirect Rule DisclosureEPSS 0.2%CVE-2026-14941MEDIUMCustomer Reviews for WooCommerce < 5.116.0 - Subscriber+ Missing Authorization via Multiple Settings AJAX ActionsEPSS 0.2%CVE-2026-14926MEDIUMFluentCart < 1.4.0 - Subscriber+ Subscription Payment-Method Tampering via IDOREPSS 0.2%CVE-2026-89006MEDIUMWPeMatico RSS Feed Fetcher < 2.8.27 - Contributor+ Stored XSS via Feed ImportEPSS 0.2%CVE-2026-104653MEDIUMEnvira Gallery < 1.16.1 - Author+ Stored XSS via Gallery Crop DimensionsEPSS 0.2%CVE-2026-110033MEDIUMSalon Booking System < 10.31.11 - Salon Staff+ Stored XSS and SSRF via Salon REST 'image_url'EPSS 0.2%CVE-2026-97319MEDIUMPowerPress < 11.17.2 - Contributor+ Stored XSS via Podcast Player BlockEPSS 0.2%CVE-2024-3972MEDIUMSimilarity <= 3.0 - Stored XSS via CSRFEPSS 0.2%