Vulnerability index

Browse CVEs

10,000+ matching
Filters 1 Clear all
Severity

Filters apply as you choose them.

Unclassified MEDIUM 6.5
CVE-2026-61945

Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in MultiVendorX WooCommerce Product Stock Alert allows Retri…

No fix yet
Fix from $1,600 2026-07-23
Unclassified HIGH 7.1
CVE-2026-61944

Unauthenticated Cross Site Scripting (XSS) in Bookly <= 27.7 versions.

No fix yet
Fix from $1,950 2026-07-23
Unclassified HIGH 7.5
CVE-2026-61943

Unauthenticated Broken Access Control in WPDM – Premium Packages <= 6.2.0 versions.

No fix yet
Fix from $1,950 2026-07-23
Unclassified CRITICAL 10.0
CVE-2026-59555

Unauthenticated Arbitrary File Deletion in Participants Database <= 2.7.8.3 versions.

No fix yet
Fix from $2,300 2026-07-23
Unclassified HIGH 7.5
CVE-2026-59554

Unauthenticated Broken Authentication in Ziina <= 1.2.21 versions.

No fix yet
Fix from $1,950 2026-07-23
Unclassified HIGH 7.5
CVE-2026-59547

Unauthenticated Broken Access Control in Payment Gateway for PayPal on WooCommerce <= 9.1.4 versions.

No fix yet
Fix from $1,950 2026-07-23
Unclassified HIGH 8.1
CVE-2026-59545

Unauthenticated Broken Authentication in miniOrange Discord Integration <= 2.2.4 versions.

No fix yet
Fix from $1,950 2026-07-23
Unclassified CRITICAL 9.8
CVE-2026-59544

Unauthenticated PHP Object Injection in Thrive Quiz Builder <= 10.9.3.0 versions.

No fix yet
Fix from $2,300 2026-07-23
Unclassified CRITICAL 9.9
CVE-2026-59543

Subscriber Remote Code Execution (RCE) in Advanced Views <= 3.8.11 versions.

No fix yet
Fix from $2,300 2026-07-23
Unclassified HIGH 7.7
CVE-2026-59542

Subscriber Arbitrary File Deletion in Kali Forms <= 2.4.18 versions.

No fix yet
Fix from $1,950 2026-07-23
Unclassified HIGH 8.8
CVE-2026-59541

Subscriber Privilege Escalation in WP BASE Booking <= 6.3.1 versions.

Mitigation only
Fix from $1,950 2026-07-23
Unclassified CRITICAL 9.8
CVE-2026-59540

Unauthenticated Privilege Escalation in SMS Alert Order Notifications <= 3.9.6 versions.

No fix yet
Fix from $2,300 2026-07-23
Unclassified CRITICAL 9.3
CVE-2026-59526

Unauthenticated SQL Injection in MapSVG <= 8.14.0 versions.

No fix yet
Fix from $2,300 2026-07-23
Unclassified CRITICAL 9.3
CVE-2026-59525

Unauthenticated SQL Injection in Participants Database <= 2.7.8.3 versions.

No fix yet
Fix from $2,300 2026-07-23
Unclassified MEDIUM 6.5
CVE-2026-59524

Unauthenticated Broken Authentication in Easy Digital Downloads <= 3.6.7 versions.

No fix yet
Fix from $1,600 2026-07-23
Unclassified MEDIUM 6.5
CVE-2026-59522

Subscriber Broken Access Control in WP ERP <= 1.17.5 versions.

No fix yet
Fix from $1,600 2026-07-23
Unclassified HIGH 7.1
CVE-2026-59517

Unauthenticated Cross Site Scripting (XSS) in Easy Form Builder <= 4.0.12 versions.

No fix yet
Fix from $1,950 2026-07-23
Unclassified CRITICAL 9.3
CVE-2026-59514

Unauthenticated SQL Injection in Buddyboss Platform <= 3.0.5 versions.

No fix yet
Fix from $2,300 2026-07-23
Unclassified MEDIUM 6.5
CVE-2026-59513

Subscriber Cross Site Scripting (XSS) in Masteriyo - LMS <= 2.3.0 versions.

No fix yet
Fix from $1,600 2026-07-23
Unclassified HIGH 7.1
CVE-2026-59512

Unauthenticated Cross Site Scripting (XSS) in Product Enquiry for WooCommerce <= 2.2.34.43 versions.

No fix yet
Fix from $1,950 2026-07-23
Unclassified HIGH 7.1
CVE-2026-57809

Unauthenticated Cross Site Scripting (XSS) in AffiliateWP <= 2.34.0 versions.

No fix yet
Fix from $1,950 2026-07-23
Unclassified MEDIUM 6.5
CVE-2026-57808

Subscriber Arbitrary Content Deletion in WP EasyPay <= 4.5.0 versions.

No fix yet
Fix from $1,600 2026-07-23
Unclassified HIGH 8.8
CVE-2026-57785

Unauthenticated Cross Site Request Forgery (CSRF) in ApusListing <= 1.2.63 versions.

Mitigation only
Fix from $1,950 2026-07-23
Unclassified CRITICAL 9.6
CVE-2026-57784

Unauthenticated Cross Site Request Forgery (CSRF) in Ninja Forms File Uploads Extension <= 3.3.26 versions.

No fix yet
Fix from $2,300 2026-07-23
Unclassified HIGH 7.1
CVE-2026-57769

Unauthenticated Cross Site Scripting (XSS) in Grand Photography <= 5.7.8 versions.

No fix yet
Fix from $1,950 2026-07-23
Unclassified HIGH 7.1
CVE-2026-57767

Unauthenticated Cross Site Scripting (XSS) in WP Google Maps Pro <= 10.1.02 versions.

No fix yet
Fix from $1,950 2026-07-23
Unclassified HIGH 7.1
CVE-2026-57735

Unauthenticated Cross Site Scripting (XSS) in Breakdance <= 2.7.1 versions.

No fix yet
Fix from $1,950 2026-07-23
Unclassified MEDIUM 6.5
CVE-2026-57717

Unauthenticated Broken Access Control in Knit Pay <= 9.6.0.0 versions.

No fix yet
Fix from $1,600 2026-07-23
Unclassified MEDIUM 5.3
CVE-2026-57716

Unauthenticated Arbitrary File Deletion in Broadcast Live Video <= 7.2.4 versions.

No fix yet
Fix from $1,600 2026-07-23
Unclassified HIGH 7.1
CVE-2026-57704

Unauthenticated Cross Site Scripting (XSS) in Smart Manager <= 8.90.0 versions.

No fix yet
Fix from $1,950 2026-07-23