Top technology
Linux 13140
Google 12536
Microsoft 12379
Oracle 6843
Apple 6692
Adobe 6387
Ibm 6336
Cisco 5759
Debian 3919
Mozilla 2895
Apache 2864
Redhat 2592
Linux 13140
Google 12536
Microsoft 12379
Oracle 6843
Apple 6692
Adobe 6387
Ibm 6336
Cisco 5759
Debian 3919
Mozilla 2895
Apache 2864
Redhat 2592
HIGH 7.2
CVE-2026-65559
Shop manager Privilege Escalation in Order Delivery Date for WooCommerce <= 4.6.0 versions.
No fix yet
CRITICAL 9.8
CVE-2026-65556
Unauthenticated PHP Object Injection in WPBruiser {no- Captcha anti-Spam} <= 3.1.43 versions.
No fix yet
HIGH 7.1
CVE-2026-65554
Subscriber Broken Access Control in AnsPress – Question and answer 4.4.4 versions.
No fix yet
CRITICAL 10.0
CVE-2026-65553
Unauthenticated Remote Code Execution (RCE) in Spider Analyser – WordPress搜索引擎蜘蛛分析插件 <= 2.1.3 versions.
No fix yet
CRITICAL 9.8
CVE-2026-65552
Subscriber PHP Object Injection in Export User Data <= 2.2.6 versions.
No fix yet
HIGH 7.2
CVE-2026-65549
Author PHP Object Injection in Jeg Kit for Elementor <= 3.2.10 versions.
No fix yet
CRITICAL 9.9
CVE-2026-65548
Contributor Remote Code Execution (RCE) in Betheme <= 28.4.2 versions.
No fix yet
HIGH 8.5
CVE-2026-65547
Subscriber SQL Injection in Creative Mail <= 1.6.9 versions.
No fix yet
CRITICAL 9.3
CVE-2026-65546
Unauthenticated SQL Injection in Qode Tours <= 3.1.3.1 versions.
No fix yet
HIGH 7.1
CVE-2026-65545
Unauthenticated Cross Site Scripting (XSS) in AI Engine <= 3.6.8 versions.
No fix yet
HIGH 7.1
CVE-2026-65544
Unauthenticated Cross Site Scripting (XSS) in Super Socializer <= 7.14.5 versions.
No fix yet
HIGH 7.5
CVE-2026-65543
Subscriber Sensitive Data Exposure in Vimeo <= 1.2.2 versions.
No fix yet
HIGH 8.8
CVE-2026-65542
Unauthenticated Broken Authentication in Super Socializer <= 7.14.5 versions.
No fix yet
HIGH 7.3
CVE-2026-65541
Unauthenticated Broken Access Control in Staff Training <= 1.0.7 versions.
No fix yet
HIGH 7.5
CVE-2026-65523
Unauthenticated Insecure Direct Object References (IDOR) in Formidable Forms Signature Online Contract Automation <= 2.0.1 versions.
No fix yet
CRITICAL 9.3
CVE-2026-65520
Unauthenticated SQL Injection in WP OAuth Server <= 6.2.0 versions.
No fix yet
HIGH 7.1
CVE-2026-65517
Unauthenticated Cross Site Scripting (XSS) in Easy PayPal Buy Now Button <= 2.0.4 versions.
No fix yet
HIGH 7.1
CVE-2026-65515
Unauthenticated Cross Site Scripting (XSS) in AffiliateWP <= 2.35.0 versions.
No fix yet
HIGH 7.1
CVE-2026-65513
Unauthenticated Cross Site Scripting (XSS) in Simply Schedule Appointments <= 1.6.12.10 versions.
No fix yet
HIGH 7.1
CVE-2026-65509
Unauthenticated Cross Site Scripting (XSS) in wpDataTables <= 7.5.1 versions.
No fix yet
CRITICAL 9.3
CVE-2026-65508
Unauthenticated SQL Injection in Simply Schedule Appointments <= 1.6.12.10 versions.
No fix yet
CRITICAL 9.8
CVE-2026-65507
Unauthenticated Privilege Escalation in AIWU <= 1.5.6 versions.
No fix yet
HIGH 7.5
CVE-2026-65504
Unauthenticated Broken Access Control in BOX NOW Delivery Croatia <= 3.3.0 versions.
No fix yet
MEDIUM 5.3
CVE-2026-65502
Unauthenticated Bypass Vulnerability in Element Pack Elementor Addons <= 8.7.13 versions.
No fix yet
HIGH 7.1
CVE-2026-61982
Unauthenticated Cross Site Scripting (XSS) in SiteGuard WP Plugin <= 1.8.6 versions.
No fix yet
HIGH 7.1
CVE-2026-61964
Unauthenticated Cross Site Scripting (XSS) in Ninja Tables <= 5.2.9 versions.
No fix yet
HIGH 7.1
CVE-2026-61963
Unauthenticated Cross Site Scripting (XSS) in Media LIbrary Assistant <= 3.38 versions.
No fix yet
HIGH 7.1
CVE-2026-61961
Unauthenticated Cross Site Scripting (XSS) in EmbedPress <= 4.5.6 versions.
No fix yet
MEDIUM 6.5
CVE-2026-61959
Subscriber Cross Site Scripting (XSS) in Business Directory <= 6.4.24 versions.
No fix yet
MEDIUM 5.3
CVE-2026-32548
Unauthenticated Broken Access Control in SureCart <= 4.6.2 versions.
No fix yet