Vulnerabilities in Unknown

5,639 results
CVE-2026-105196LOWLatePoint < 5.6.9 - Agent+ Cross-Agent Data Disclosure and Modification via Abilities APIEPSS —CVE-2026-105198MEDIUMLatePoint < 5.7.3 - Unauthenticated Customer PII Disclosure via IDOREPSS —CVE-2026-105197LOWLatePoint < 5.6.5 - Agent+ Arbitrary Order, Customer and Transaction Deletion via IDOREPSS —CVE-2026-94245MEDIUMWallet System for WooCommerce 2.0.0 - 2.7.10 - Subscriber+ Arbitrary Wallet Balance Theft via IDOREPSS —CVE-2026-94244MEDIUMWallet System for WooCommerce < 2.8.0 - Subscriber+ Store-Wide Wallet Transaction Disclosure via ExportEPSS —CVE-2026-94258LOWSMS Alert 3.6.4 - 4.0.0 - Admin+ Network User Billing Phone Disclosure via Bulk User ActionsEPSS —CVE-2026-93509MEDIUMWallet System for WooCommerce 2.0.0 - 2.7.10 - Subscriber+ Wallet Balance Manipulation via Negative Transfer AmountEPSS —CVE-2026-103309HIGHGPTranslate < 2.34.14 - Unauthenticated Stored XSS via REST API Translation StorageEPSS —CVE-2026-94275MEDIUMTrack Orders for WooCommerce < 1.2.7 - Unauthenticated PII Disclosure via 'email' ParameterEPSS —CVE-2026-86827MEDIUMBackWPup 3.3 - 5.7.6 - Unauthenticated Backup Job Execution via wp-cron.phpEPSS —CVE-2026-103692CRITICALFrontend Dashboard 3.0.0 - 3.0.4 - Unauthenticated Privilege Escalation via Arbitrary Function CallEPSS —CVE-2026-86826MEDIUMBackWPup < 5.7.7 - Unauthenticated Sensitive Data Disclosure via Restore Working Directory on NGINXEPSS —CVE-2026-105190MEDIUMEasy Digital Downloads < 3.7.1 - Unauthenticated Account Creation with Registration DisabledEPSS —CVE-2026-104646MEDIUMImage Photo Gallery Final Tiles Grid < 3.6.14 - Contributor+ Stored XSS via Gallery Shortcode AttributesEPSS —CVE-2026-104645LOWImage Photo Gallery Final Tiles Grid < 3.6.14 - Contributor+ Arbitrary Gallery Cloning, Image Modification and Post Meta Update via IDOREPSS —CVE-2026-103646CRITICALUltimate Multisite < 2.17.0 - Unauthenticated Authentication Bypass via 'email_address' ParameterEPSS —CVE-2026-103517MEDIUMAirwallex Online Payments Gateway < 1.36.0 - Unauthenticated Payment Bypass via Forged WebhookEPSS —CVE-2026-105195LOWBooking Calendar 10.15 - 11.8.2 - Editor+ Arbitrary Option DisclosureEPSS —CVE-2026-94246MEDIUMWallet System for WooCommerce 2.0.0 - 2.7.10 - Subscriber+ Forged Wallet Withdrawal Request via IDOREPSS —