Browse CVEs

MEDIUM 5.3 CVE-2026-24619 Missing Authorization vulnerability in PopCash PopCash.Net Code Integration Tool popcashnet-code-integration-tool allows Exploiting Incorrectly Confi… Mitigation only Fix from $1,6002026-01-23 MEDIUM 5.3 CVE-2026-24604 Missing Authorization vulnerability in themebeez Simple GDPR Cookie Compliance simple-gdpr-cookie-compliance allows Exploiting Incorrectly Configured… Mitigation only Fix from $1,6002026-01-23 MEDIUM 5.3 CVE-2026-24606 Missing Authorization vulnerability in Web Impian Bayarcash WooCommerce bayarcash-wc allows Exploiting Incorrectly Configured Access Control Security… Mitigation only Fix from $1,6002026-01-23 MEDIUM 5.3 CVE-2026-24607 Missing Authorization vulnerability in wptravelengine Travel Monster travel-monster allows Exploiting Incorrectly Configured Access Control Security … Mitigation only Fix from $1,6002026-01-23 MEDIUM 5.3 CVE-2026-24612 Missing Authorization vulnerability in themebeez Orchid Store orchid-store allows Exploiting Incorrectly Configured Access Control Security Levels.Th… Mitigation only Fix from $1,6002026-01-23 MEDIUM 5.3 CVE-2026-24603 Missing Authorization vulnerability in themebeez Universal Google Adsense and Ads manager universal-google-adsense-and-ads-manager allows Exploiting … Mitigation only Fix from $1,6002026-01-23 MEDIUM 5.4 CVE-2026-24595 Missing Authorization vulnerability in zohocrm Zoho CRM Lead Magnet zoho-crm-forms allows Exploiting Incorrectly Configured Access Control Security L… Mitigation only Fix from $1,6002026-01-23 MEDIUM 5.4 CVE-2026-24581 Missing Authorization vulnerability in WP Swings Points and Rewards for WooCommerce points-and-rewards-for-woocommerce allows Exploiting Incorrectly … Mitigation only Fix from $1,6002026-01-23 MEDIUM 5.3 CVE-2026-24583 Missing Authorization vulnerability in sumup SumUp Payment Gateway For WooCommerce sumup-payment-gateway-for-woocommerce allows Exploiting Incorrectl… Mitigation only Fix from $1,6002026-01-23 MEDIUM 6.5 CVE-2026-24585 Missing Authorization vulnerability in Hyyan Abo Fakher Hyyan WooCommerce Polylang Integration woo-poly-integration allows Exploiting Incorrectly Con… Mitigation only Fix from $1,6002026-01-23 MEDIUM 5.4 CVE-2026-24587 Missing Authorization vulnerability in kutsy AJAX Hits Counter + Popular Posts Widget ajax-hits-counter allows Exploiting Incorrectly Configured Acce… Mitigation only Fix from $1,6002026-01-23 MEDIUM 5.3 CVE-2026-24577 Missing Authorization vulnerability in Genetech Products Pie Register pie-register allows Exploiting Incorrectly Configured Access Control Security L… Mitigation only Fix from $1,6002026-01-23 MEDIUM 6.5 CVE-2026-24566 Missing Authorization vulnerability in iNET iNET Webkit inet-webkit allows Exploiting Incorrectly Configured Access Control Security Levels.This issu… No fix yet Fix from $1,6002026-01-23 MEDIUM 5.3 CVE-2026-24568 Missing Authorization vulnerability in WP Travel WP Travel wp-travel allows Exploiting Incorrectly Configured Access Control Security Levels.This iss… No fix yet Fix from $1,6002026-01-23 MEDIUM 5.4 CVE-2026-24570 Missing Authorization vulnerability in WisdmLabs Edwiser Bridge edwiser-bridge allows Exploiting Incorrectly Configured Access Control Security Level… Mitigation only Fix from $1,6002026-01-23 MEDIUM 5.4 CVE-2026-24560 Missing Authorization vulnerability in Cloudinary Cloudinary cloudinary-image-management-and-manipulation-in-the-cloud-cdn allows Exploiting Incorrec… Mitigation only Fix from $1,6002026-01-23 MEDIUM 5.4 CVE-2026-24561 Missing Authorization vulnerability in Mahmudul Hasan Arif FluentBoards fluent-boards allows Exploiting Incorrectly Configured Access Control Securit… Mitigation only Fix from $1,6002026-01-23 MEDIUM 5.3 CVE-2026-24562 Missing Authorization vulnerability in Ryviu Ryviu – Product Reviews for WooCommerce ryviu allows Exploiting Incorrectly Configured Access Control Se… Mitigation only Fix from $1,6002026-01-23 MEDIUM 5.3 CVE-2026-24556 Missing Authorization vulnerability in wpdive ElementCamp element-camp allows Exploiting Incorrectly Configured Access Control Security Levels.This i… Mitigation only Fix from $1,6002026-01-23 MEDIUM 5.4 CVE-2026-24551 Missing Authorization vulnerability in monetagwp Monetag Official Plugin monetag-official allows Exploiting Incorrectly Configured Access Control Sec… Mitigation only Fix from $1,6002026-01-23 MEDIUM 5.3 CVE-2026-24539 Missing Authorization vulnerability in ABCdatos Protección de datos – RGPD proteccion-datos-rgpd allows Exploiting Incorrectly Configured Access Cont… Mitigation only Fix from $1,6002026-01-23 MEDIUM 5.4 CVE-2026-24540 Missing Authorization vulnerability in princeahmed Integrate Google Drive integrate-google-drive allows Exploiting Incorrectly Configured Access Cont… Mitigation only Fix from $1,6002026-01-23 MEDIUM 5.3 CVE-2026-24525 Missing Authorization vulnerability in CloudPanel CLP Varnish Cache clp-varnish-cache allows Exploiting Incorrectly Configured Access Control Securit… Mitigation only Fix from $1,6002026-01-23 MEDIUM 5.3 CVE-2026-24529 Missing Authorization vulnerability in Alejandro Quick Restaurant Reservations quick-restaurant-reservations allows Exploiting Incorrectly Configured… Mitigation only Fix from $1,6002026-01-23 MEDIUM 5.3 CVE-2026-24530 Missing Authorization vulnerability in sheepfish WebP Conversion webp-conversion allows Exploiting Incorrectly Configured Access Control Security Lev… Mitigation only Fix from $1,6002026-01-23 MEDIUM 5.3 CVE-2026-0927 The KiviCare – Clinic & Patient Management System (EHR) plugin for WordPress is vulnerable to arbitrary file uploads due to missing authorization che… Mitigation only Fix from $1,6002026-01-23 MEDIUM 5.3 CVE-2026-24366 Missing Authorization vulnerability in YITHEMES YITH WooCommerce Request A Quote yith-woocommerce-request-a-quote allows Exploiting Incorrectly Confi… Mitigation only Fix from $1,6002026-01-22 MEDIUM 5.3 CVE-2026-24368 Missing Authorization vulnerability in Theme-one The Grid the-grid allows Exploiting Incorrectly Configured Access Control Security Levels.This issue… Mitigation only Fix from $1,6002026-01-22 MEDIUM 5.3 CVE-2026-24380 Missing Authorization vulnerability in Metagauss EventPrime eventprime-event-calendar-management allows Exploiting Incorrectly Configured Access Cont… Mitigation only Fix from $1,6002026-01-22 MEDIUM 5.3 CVE-2026-23974 Missing Authorization vulnerability in uxper Golo golo allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Gol… No fix yet Fix from $1,6002026-01-22