Vulnerabilities in UNKNOWN

6,367 results
CVE-2026-19088MEDIUMShopEngine < 4.9.3 - Customer PII Disclosure via Forced AuthenticationEPSS 0.1%CVE-2026-89303MEDIUMPost Voting System <= 1.0 - Subscriber+ SQLi via 'row' ParameterEPSS 0.1%CVE-2025-11154MEDIUMIDonate < 2.1.13 - Unauthenticated User DeletionEPSS 0.1%CVE-2026-85641MEDIUMFormidable Forms 6.34 - Unauthenticated Stored Content Injection via 'updated_by' ParameterEPSS 0.1%CVE-2026-84024MEDIUMBEAR - Bulk Editor and Products Manager Professional for WooCommerce < 1.2.2 - Meta Field Configuration Update via CSRFEPSS 0.1%CVE-2026-74920HIGHDocument Gallery <= 5.1.1 - Reflected XSS via data-shortcode AttributeEPSS 0.1%CVE-2026-91009MEDIUMActive Products Tables for WooCommerce < 2.1.3 - Subscriber+ Arbitrary Post Title Modification via woot_update_attachmentEPSS 0.1%CVE-2026-107887MEDIUMAdvanced Twenty Seventeen <= 1.3.1 - Subscriber+ Site Theme Switch via ats_create_child_themeEPSS 0.1%CVE-2026-80517LOWWP Ultimate CSV Importer 7.17 - 9.1 - Admin+ Stored XSS via ZIP Import SVG UploadEPSS 0.1%CVE-2026-82127LOWSchema & Structured Data for WP & AMP < 1.67 - Editor+ Stored XSS via Taxonomy Term FieldsEPSS 0.1%CVE-2025-15705LOWContact Form by Supsystic < 1.8.0 - Admin+ Stored XSSEPSS 0.1%CVE-2026-87971HIGHIf-So Dynamic Content 1.4.4 - 1.10.1 - Reflected XSS via 'message' ParameterEPSS 0.1%CVE-2026-16965MEDIUMSolace Extra < 1.6.1 - Subscriber+ Post Meta Update via solace_update_sitebuilder_statusEPSS 0.1%CVE-2025-15701LOWEasy Social Icons < 4.0.3 - Admin+ Stored XSS via Icon Color SettingsEPSS 0.1%CVE-2026-110041LOWCrop-Thumbnails < 1.10.0 - Author+ Arbitrary Attachment Read and Overwrite via crop REST EndpointsEPSS 0.1%CVE-2026-104119LOWSimple Shopping Cart < 5.2.6 - Admin+ Stored XSS via PayPal API CredentialsEPSS 0.1%CVE-2026-15246MEDIUMRealHomes Memberships < 3.1.0 - Subscriber+ Membership Payment BypassEPSS 0.1%CVE-2026-13159MEDIUMReal Estate Papi <= 1.0.5 - Subscriber+ Plugin InstallationEPSS 0.1%CVE-2026-9676MEDIUMf4 Post Tree < 2.0.5 - Subscriber+ Arbitrary Post Parent/Menu Order ModificationEPSS 0.1%CVE-2026-13729MEDIUMPodlove Podcast Publisher < 4.5.3 - Podcast Contributor/Group/Role Creation and Deletion via CSRFEPSS 0.1%