Vulnerabilities in UNKNOWN
6,328 resultsCVE-2021-24871—Get Custom Field Values < 4.0.1 - Contributor+ Stored Cross-Site ScriptingEPSS 0.7%CVE-2022-4488MEDIUMWidgets on Pages < 1.8.0 - Contributor+ Stored XSSEPSS 0.7%CVE-2022-4471MEDIUMYARPP - Yet Another Related Posts Plugin < 5.30.3 - Contributor+ Stored XSSEPSS 0.7%CVE-2023-5672—WP Mail Log < 1.1.3 – Contributor+ LFI in wml_logs/send_mail endpointEPSS 0.7%CVE-2024-0852HIGHcoreActivity < 1.8.1 - Unauthenticated Stored XSSEPSS 0.7%CVE-2021-24649CRITICALWP User Frontend < 3.5.29 - Obscure Registration as AdminEPSS 0.7%CVE-2022-0598—Login with phone number < 1.3.8 - Multiple Admin+ Stored XSSEPSS 0.7%CVE-2024-6517MEDIUMContact Form 7 Math Captcha <= 2.0.1 - Reflected XSSEPSS 0.7%CVE-2022-4417MEDIUMWP Cerber < 9.3.3 - User Enumeration Bypass via Rest APIEPSS 0.7%CVE-2021-24813—Events Made Easy < 2.2.24 - Admin+ Stored Cross-Site ScriptingEPSS 0.7%CVE-2022-3036—Gettext override translations < 2.0.0 - Admin+ Stored Cross-Site ScriptingEPSS 0.7%CVE-2026-10821MEDIUMYoast SEO Premium < 27.6.1 - Author+ Arbitrary .htaccess Directive Injection to RCEEPSS 0.7%CVE-2022-4340MEDIUMBookingPress < 1.0.31 - Unauthenticated IDOR in appointment_idEPSS 0.7%CVE-2021-24911—Transposh WordPress Translation < 1.0.8 - Stored Cross-Site ScriptingEPSS 0.7%CVE-2023-1405HIGHFormidable Forms < 6.2 - Unauthenticated PHP Object InjectionEPSS 0.7%CVE-2024-7354MEDIUMNinja Forms 3.8.6-3.8.10 - Reflected XSSEPSS 0.7%CVE-2026-8386MEDIUMWP Go Maps < 10.0.10 - Unauthenticated Sensitive Information Disclosure via Marker IDEPSS 0.7%CVE-2023-0375MEDIUMEasy Affiliate Links < 3.7.1 - Contributor+ Stored XSSEPSS 0.7%CVE-2021-25026—Patreon WordPress < 1.8.2 - Admin+ Stored Cross-Site ScriptingEPSS 0.7%CVE-2024-8699HIGHZ-Downloads < 1.11.5 - Admin+ Arbitrary File UploadEPSS 0.7%