Vulnerabilidades en UNKNOWN
6367 resultadosCVE-2026-104953MEDIUMMPG < 4.2.3 - Editor+ SQLi via Project ImportEPSS 0.2%CVE-2026-103331MEDIUMUniPAY Payment Gateway For WooCommerce < 2.4 - Unauthenticated Order Payment Forgery via Empty IPN SecretEPSS 0.2%CVE-2026-88813MEDIUMYITH WooCommerce Gift Cards <= 4.39.0 - Unauthenticated Gift Card Balance Inflation via Discounted PurchaseEPSS 0.2%CVE-2026-118201HIGHLimit Login Attempts Reloaded 3.0.0 - 3.4.0 - Two-Factor Authentication Bypass via XML-RPCEPSS 0.2%CVE-2024-8157MEDIUMAlphabetical List <= 1.0.3 - Settings Update via CSRFEPSS 0.2%CVE-2026-107786MEDIUMCatFolders < 2.5.7 - Author+ SQLi via 'sortFile' SettingEPSS 0.2%CVE-2026-19253HIGHCache Enabler < 1.8.17 - Unauthenticated Arbitrary File and Directory Deletion via cache_enabler_clear_page_cache_by_urlEPSS 0.2%CVE-2026-106097MEDIUMCode Snippets < 3.10.0 - Admin+ SQLi in Migration Importers Leading to Network-Wide Credential Disclosure (Multisite)EPSS 0.2%CVE-2026-104667MEDIUMAnimated Number Counters < 3.1 - Editor+ Second-Order SQLi via Counter OrderEPSS 0.2%CVE-2026-123091HIGHVigilant < 2.11.0 - 2FA Bypass via Third-Party Login FormsEPSS 0.2%CVE-2026-115255MEDIUMWP Roster < 2.35 - Unauthenticated Roster Member DeletionEPSS 0.2%CVE-2026-14184MEDIUMAcademy LMS < 3.8.1 - Subscriber+ Cross-User Lesson Note and Progress Modification via IDOREPSS 0.2%CVE-2026-74929MEDIUMWP Project Manager < 4.0.7 - Subscriber+ Cross-Project Task Disclosure and Task Board Modification via IDOREPSS 0.2%CVE-2026-122087LOWEvent Tickets < 5.30.3.1 - Unauthenticated Private Event Attendee Disclosure via post_status Filter Bypass in Attendees REST APIEPSS 0.2%CVE-2026-16574MEDIUMDokan < 5.0.11 - Vendor+ Cross-Vendor Downloadable Product Access Grant via Order Downloads REST EndpointEPSS 0.2%CVE-2026-105195LOWBooking Calendar 10.15 - 11.8.2 - Editor+ Arbitrary Option DisclosureEPSS 0.2%CVE-2026-87959MEDIUMWPBot 8.7.2 - 8.7.5 - Subscriber+ Claude AI Settings UpdateEPSS 0.2%CVE-2026-107694LOWDokan < 5.2.0 - Vendor+ Cross-Vendor Commission Settings Disclosure via Commission REST EndpointEPSS 0.2%CVE-2026-14310MEDIUMTutor LMS < 4.0.0 - Subscriber+ Cross-Course Q&A Content Disclosure and Reply InjectionEPSS 0.2%CVE-2026-15238MEDIUMHotel Booking Lite < 6.2.3 - Subscriber+ Customer Data Modification via IDOREPSS 0.2%