Vulnerabilities in UNKNOWN

6,367 results
CVE-2026-86611MEDIUMDownload Manager (Free & Pro) - Privacy Settings Update via CSRFEPSS 0.1%CVE-2026-88814LOWYITH WooCommerce Gift Cards < 4.38.1 - Unauthenticated Gift Card Balance Double-Spending via Race ConditionEPSS 0.1%CVE-2026-82212HIGHNexi XPay Build <= 7.6.2 - Unauthenticated Payment Bypass via NPG Notification HandlerEPSS 0.1%CVE-2026-122001HIGHKomfortkasse for WooCommerce < 1.4.9 - Administrator Account Creation via CSRFEPSS 0.1%CVE-2026-81429HIGHExport & Import WPBakery Page Builder <= 1.0.2 - Stored XSS via CSRFEPSS 0.1%CVE-2026-103329MEDIUMSuper Payments < 1.43.1 - Unauthenticated Payment Confirmation Forgery via Webhook SignatureEPSS 0.1%CVE-2025-10684MEDIUMConstruction Light < 1.6.8 - Subscriber+ Arbitrary Plugin ActivationEPSS 0.1%CVE-2026-101147HIGHFeatured Image from URL (FIFU) Free & Premium - Administrator Account Creation via CSRFEPSS 0.1%CVE-2026-10724MEDIUMReviews Feed < 2.6.5 - Unauthenticated Stored Arbitrary Shortcode Execution via Google ReviewsEPSS 0.1%CVE-2026-103324MEDIUMCardinity Payment Gateway for WooCommerce 3.2.6 - 3.4.1 - Unauthenticated Arbitrary Order Payment Forgery via Empty-Default Project SecretEPSS 0.1%CVE-2026-87973LOWIf-So Dynamic Content 1.9.9 - 1.10.1 - Editor+ Stored XSS via Conversion NameEPSS 0.1%CVE-2026-81338MEDIUMMasterStudy LMS < 3.7.50 - Subscriber+ Stored HTML Injection via Course DiscussionsEPSS 0.1%CVE-2026-15046MEDIUMLitExtension: Store to WooCommerce Migration <= 1.2.5 - Connector Token Takeover via CSRFEPSS 0.1%CVE-2026-121857MEDIUMEvent Tickets with Ticket Scanner < 3.1.14 - Authenticated Ticket Data Disclosure and Removal via executeWCBackendEPSS 0.1%CVE-2026-105193MEDIUMBooking Calendar < 11.8 - Unauthenticated Booking Information Disclosure and Modification via Predictable Booking HashEPSS 0.1%CVE-2026-1128MEDIUMWP eCommerce <= 3.15.1 - Coupon Deletion via CSRFEPSS 0.1%CVE-2026-74922MEDIUMDocument Gallery 4.1 - 5.1.1 - Unauthenticated Document Thumbnail Replacement via Thumber Webhook Signature BypassEPSS 0.1%CVE-2026-88848MEDIUMMasterStudy LMS 1.9 - < 3.7.50 - Subscriber+ Membership Plan Quota and Category Restriction BypassEPSS 0.1%CVE-2026-91075MEDIUMEupago Gateway For Woocommerce 4.5.0 - 4.7.5 - Unauthenticated Payment Confirmation BypassEPSS 0.1%CVE-2026-103300MEDIUMEurobank WooCommerce Payment Gateway <= 2.1.1 - Unauthenticated Order Payment Forgery via Unverified CallbackEPSS 0.1%