Vulnerabilities in UNKNOWN

6,367 results
CVE-2026-85415MEDIUMAudio Player Block 1.1.0 - 1.6.2 - Contributor+ Stored XSS via Audio Download URLEPSS 0.2%CVE-2024-8047MEDIUMVisual Sound (old) <= 1.06 - Settings Update via CSRFEPSS 0.2%CVE-2026-121863HIGHKnowledge Building < 0.7.3 - Reflected XSS via Comment Reply ResponseEPSS 0.2%CVE-2023-7202MEDIUMFatal Error Notify < 1.5.3 - Subscriber+ Test Error Email SendingEPSS 0.2%CVE-2024-6490MEDIUMMaster Slider – Responsive Touch Slider <= 3.9.10 - CSRF to slider deletionEPSS 0.2%CVE-2025-15713LOWLive Composer < 2.1.24 - Admin+ Stored XSS via IconEPSS 0.2%CVE-2026-80341MEDIUMPayment Plugins for PayPal WooCommerce < 2.0.26 - Subscriber+ Stored Payment Method Assignment via IDOREPSS 0.2%CVE-2026-107907MEDIUMMAS Videos <= 1.3.4 - Subscriber+ Arbitrary Post Deletion via delete_video/delete_playlistEPSS 0.2%CVE-2026-80438MEDIUMNinja Forms 3.14.0 - 3.15.1 - Authenticated Arbitrary Post Modification and Sensitive Information Disclosure via Abilities REST APIEPSS 0.2%CVE-2026-114444MEDIUMSecurity by CleanTalk < 2.191 - Admin+ Sensitive Data Disclosure via FSWatcher File ViewerEPSS 0.2%CVE-2026-106015HIGHEcommerce Affiliate <= 1.0.0 - Unauthenticated Account Takeover via Email OTP Brute ForceEPSS 0.2%CVE-2026-16273MEDIUMNarrative Publisher <= 1.0.7 - Contributor+ Stored XSS via narrative_post_script Post MetaEPSS 0.2%CVE-2026-19217MEDIUMRoyal Elementor Addons < 1.7.1065 - Contributor+ Stored XSS via Icon Box WidgetEPSS 0.2%CVE-2026-16558MEDIUMYMC Filter < 3.12.8 - Contributor+ Stored XSS via Layout Builder SchemaEPSS 0.2%CVE-2024-3163MEDIUMEasy Property Listings < 3.5.4 - Arbitrary Contact Deletion via CSRFEPSS 0.2%CVE-2026-16066MEDIUMWelcart e-Commerce < 2.11.34 - Author+ Stored XSS via Product NameEPSS 0.2%CVE-2026-15234MEDIUMCodeless Page Builder <= 1.1.4 - Contributor+ Stored XSS via Shortcode AttributeEPSS 0.2%CVE-2026-15386MEDIUMMeow Gallery < 5.5.2 - Author+ Stored XSS via Attachment Alt-TextEPSS 0.2%CVE-2026-15249MEDIUMPatterns Kit <= 1.0.3 - Contributor+ Stored XSS via YouTube Popup LinkEPSS 0.2%CVE-2024-12436MEDIUMWP Customer Area <= 8.2.4 - Bulk Delete via CSRFEPSS 0.2%