Top technology
Linux 13140
Google 12544
Microsoft 12393
Oracle 7180
Apple 6692
Ibm 6470
Adobe 6390
Cisco 5759
Debian 3919
Mozilla 2912
Apache 2864
Redhat 2614
Linux 13140
Google 12544
Microsoft 12393
Oracle 7180
Apple 6692
Ibm 6470
Adobe 6390
Cisco 5759
Debian 3919
Mozilla 2912
Apache 2864
Redhat 2614
HIGH 7.1
CVE-2026-66673
Unauthenticated Cross Site Scripting (XSS) in Flatastic <= 2.0 versions.
No fix yet
CRITICAL 9.8
CVE-2026-66672
Unauthenticated PHP Object Injection in Flatastic <= 2.0 versions.
No fix yet
CRITICAL 9.3
CVE-2026-66649
Unauthenticated SQL Injection in Directory Pro <= 2.5.8 versions.
No fix yet
MEDIUM 6.5
CVE-2026-66647
Subscriber Broken Access Control in Homlisti <= 3.1.2 versions.
No fix yet
HIGH 7.1
CVE-2026-66616
Unauthenticated Cross Site Scripting (XSS) in Form Maker by 10Web <= 1.15.46 versions.
No fix yet
HIGH 7.1
CVE-2026-66615
Unauthenticated Cross Site Scripting (XSS) in Podlove Podcast Publisher <= 4.5.4 versions.
No fix yet
HIGH 7.1
CVE-2026-66614
Unauthenticated Cross Site Scripting (XSS) in SEO Plugin by Squirrly SEO <= 14.2.2 versions.
No fix yet
HIGH 7.1
CVE-2026-66612
Unauthenticated Cross Site Scripting (XSS) in Aora <= 1.3.19 versions.
No fix yet
HIGH 7.1
CVE-2026-66611
Unauthenticated Cross Site Scripting (XSS) in Paymob for WooCommerce <= 4.1.10 versions.
No fix yet
CRITICAL 9.3
CVE-2026-66609
Unauthenticated SQL Injection in TheGem (Elementor) <= 5.12.3 versions.
No fix yet
HIGH 7.1
CVE-2026-66607
Unauthenticated Cross Site Scripting (XSS) in Advance Product Search <= 1.4.8 versions.
No fix yet
HIGH 7.1
CVE-2026-66606
Unauthenticated Cross Site Scripting (XSS) in SmartSMTP <= 1.2.0 versions.
No fix yet
HIGH 7.1
CVE-2026-66605
Unauthenticated Cross Site Scripting (XSS) in Swatchly – WooCommerce Variation Swatches for Products <= 1.4.13 versions.
No fix yet
HIGH 7.1
CVE-2026-66604
Unauthenticated Cross Site Scripting (XSS) in GeoDirectory <= 2.8.173 versions.
No fix yet
MEDIUM 6.5
CVE-2026-66601
Subscriber Cross Site Scripting (XSS) in Media LIbrary Assistant <= 3.39 versions.
No fix yet
CRITICAL 9.1
CVE-2026-66600
Author Arbitrary File Upload in Media LIbrary Assistant <= 3.39 versions.
No fix yet
HIGH 7.1
CVE-2026-66598
Unauthenticated Cross Site Scripting (XSS) in B2BKing Premium <= 5.6.07 versions.
No fix yet
HIGH 7.1
CVE-2026-66597
Unauthenticated Cross Site Scripting (XSS) in wpDataTables <= 6.5.1.4 versions.
No fix yet
MEDIUM 5.9
CVE-2026-66595
Unauthenticated Broken Access Control in WP Data Access <= 5.5.80 versions.
No fix yet
HIGH 8.5
CVE-2026-66594
Subscriber SQL Injection in WordPress Persistent Login <= 3.1.0 versions.
No fix yet
CRITICAL 9.3
CVE-2026-66593
Unauthenticated SQL Injection in Security & Malware scan by CleanTalk <= 2.184 versions.
No fix yet
CRITICAL 9.3
CVE-2026-66592
Unauthenticated SQL Injection in rtMedia for WordPress, BuddyPress and bbPress <= 4.7.11 versions.
No fix yet
HIGH 7.1
CVE-2026-66590
Unauthenticated Cross Site Scripting (XSS) in Tagembed <= 7.4 versions.
No fix yet
MEDIUM 6.6
CVE-2026-66586
Author Local File Inclusion in WP Cafe Pro < 3.0.15 versions.
No fix yet
CRITICAL 9.8
CVE-2026-66583
Unauthenticated PHP Object Injection in Forminator <= 1.57.0 versions.
No fix yet
HIGH 7.1
CVE-2026-66582
Unauthenticated Cross Site Scripting (XSS) in TranslatePress <= 3.3.2 versions.
No fix yet
HIGH 7.1
CVE-2026-66581
Unauthenticated Cross Site Scripting (XSS) in JetEngine <= 3.8.14.1 versions.
No fix yet
HIGH 8.1
CVE-2026-28150
Unauthenticated Local File Inclusion in Golo Framework < 1.7.5 versions.
No fix yet
MEDIUM 5.4
CVE-2025-62307
HCL IntelliOps Event Management (IEM) is affected by insufficient logging. Insufficient logging weakens accountability, obscures attack detection, an…
No fix yet
MEDIUM 6.5
CVE-2025-53999
Unauthenticated Broken Access Control in Altair <= 5.2.2 versions.
No fix yet