Vulnerabilities in Unknown
5,635 resultsCVE-2026-88912MEDIUMrtMedia for WordPress, BuddyPress and bbPress < 4.7.12 - Subscriber+ Arbitrary Activity Privacy Modification via IDOREPSS 0.2%CVE-2026-97227MEDIUMNextScripts: Social Networks Auto-Poster < 4.4.8 - Authenticated Social Account Credential Disclosure and Data DeletionEPSS 0.2%CVE-2026-19857MEDIUMFormidable Forms < 6.35 - Unauthenticated Arbitrary Shortcode Execution via [entry_key] Custom HTML TokenEPSS 0.2%CVE-2022-4363MEDIUMWholesale Market <= 2.2.2 - Settings Update via CSRFEPSS 0.2%CVE-2026-82211HIGHNexi XPay Build <= 7.6.2 - Unauthenticated Payment Completion and Order Key DisclosureEPSS 0.2%CVE-2024-6017MEDIUMMusic Request Manager <= 1.3 - Stored XSS via CSRFEPSS 0.2%CVE-2026-82843CRITICALWP OAuth Server < 6.4.0 - Subscriber+ Cross-User Account Takeover via OIDC ID Token SubstitutionEPSS 0.2%CVE-2024-7861MEDIUMMisiek Paypal <= 1.1.20090324 - Stored XSS via CSRFEPSS 0.2%CVE-2025-15481MEDIUMNotification Bar for WordPress <= 1.1.8 – Unauthenticated Subscriber Data DisclosureEPSS 0.2%CVE-2024-7860MEDIUMSimple Headline Rotator <= 1.0 - Stored XSS via CSRFEPSS 0.2%CVE-2024-7818MEDIUMMisiek Photo Album <= 1.4.3 - Stored XSS via CSRFEPSS 0.2%CVE-2024-5081MEDIUMWP eMember <= v10.7.0 - Stored XSS via CSRFEPSS 0.2%CVE-2024-7822MEDIUMQuick Code <= 1.0 - Stored XSS via CSRFEPSS 0.2%CVE-2024-10892MEDIUMCost Calculator Builder < 3.2.43 - Settings update via CSRFEPSS 0.2%CVE-2024-7816MEDIUMGixaw Chat <= 1.0 - Stored XSS via CSRFEPSS 0.2%CVE-2026-82841MEDIUMUpdraftPlus 1.23.8 - 1.26.7 - Subscriber+ Remote Storage Credential Disclosure via Migration NoticeEPSS 0.2%CVE-2024-9450MEDIUMFree Booking Plugin for Hotels, Restaurants and Car Rentals – eaSYNC Booking < 1.3.15 - Subscriber+ PayPal Settings UpdateEPSS 0.2%CVE-2026-1900MEDIUMLink Whisper Free < 0.9.1 - Unauthenticated Settings and User Meta UpdateEPSS 0.2%CVE-2026-87071MEDIUMForminator Forms < 1.57.2.1 - Unauthenticated Post Meta Injection on Submitted PostsEPSS 0.2%CVE-2026-81809HIGHPaytm Payment Gateway < 2.8.9 - Unauthenticated SQLi via Payment CallbackEPSS 0.2%