Vulnerabilities in Unknown
5,639 resultsCVE-2024-6860MEDIUMWP MultiTasking <= 0.1.12 - Permalink Suffix Update via CSRFEPSS 0.2%CVE-2026-97332MEDIUMUser Private Files < 2.2.0 - Unauthenticated Private File Disclosure via .htaccess Rewrite Rule Bypass (Multisite)EPSS 0.2%CVE-2026-96533MEDIUMTestimonials Widget <= 4.0.4 - Unauthenticated SSRF via Featured Image URLEPSS 0.2%CVE-2026-12584HIGHPayment Gateway for Redsys & WooCommerce Lite < 7.0.2 - Unauthenticated Payment Confirmation via Unverified Inespay CallbackEPSS 0.2%CVE-2023-7297LOWTwitterPosts <= 1.0.2 - Settings Update via CSRFEPSS 0.2%CVE-2024-3993MEDIUMAZAN Plugin <= 0.6 - Stored XSS via CSRFEPSS 0.2%CVE-2024-2858MEDIUMSimple Buttons Creator <= 1.04 - Aribtrary Button Deletion via CSRFEPSS 0.2%CVE-2026-13144LOWWP Travel < 12.0.2 - Unauthenticated Arbitrary Booking Payment ResetEPSS 0.2%CVE-2026-13146LOWWP Travel < 12.0.2 - Unauthenticated Booking Payment State Tampering via IDOREPSS 0.2%CVE-2024-1747MEDIUMWooCommerce Customers Manager < 30.2 - Subscriber+ Stored XSSEPSS 0.2%CVE-2024-8051MEDIUMSpecial Feed Items <= 1.0.1 - Stored XSS via CSRFEPSS 0.2%CVE-2025-10874MEDIUMOrbit Fox < 3.0.2 - Author+ Server-Side Request ForgeryEPSS 0.2%CVE-2025-6027MEDIUMAce User Management <= 2.0.3 - Subscriber+ Authentication Bypass via Password RestEPSS 0.2%CVE-2026-16281HIGHClassified Listing < 6.1.1 - Subscriber+ Arbitrary Attachment Deletion and Listing Image Tampering via IDOREPSS 0.2%CVE-2026-1430MEDIUMWP Lightbox 2 < 3.0.7 - Admin+ Stored XSSEPSS 0.2%CVE-2024-3407MEDIUMWP Prayer <= 2.0.9 - Arbitrary Prayer Deletion via CSRFEPSS 0.2%CVE-2026-96526LOWMCP Server for WordPress < 1.8.2 - Contributor+ Arbitrary Post Title Disclosure via workflows/run REST RouteEPSS 0.2%CVE-2024-13118MEDIUMIP Based Login < 2.4.1 - Log Deletion via CSRFEPSS 0.2%CVE-2024-8093MEDIUMPosts reminder <= 0.20 - Settings Update via CSRFEPSS 0.2%CVE-2026-88912MEDIUMrtMedia for WordPress, BuddyPress and bbPress < 4.7.12 - Subscriber+ Arbitrary Activity Privacy Modification via IDOREPSS 0.2%