Top technology
Linux 13140
Google 12536
Microsoft 12379
Oracle 6843
Apple 6692
Adobe 6387
Ibm 6336
Cisco 5759
Debian 3919
Mozilla 2895
Apache 2864
Redhat 2592
Linux 13140
Google 12536
Microsoft 12379
Oracle 6843
Apple 6692
Adobe 6387
Ibm 6336
Cisco 5759
Debian 3919
Mozilla 2895
Apache 2864
Redhat 2592
MEDIUM 6.5
CVE-2026-66448
Contributor Cross Site Scripting (XSS) in Gallery PhotoBlocks <= 1.3.3 versions.
No fix yet
MEDIUM 6.5
CVE-2026-66445
Contributor Cross Site Scripting (XSS) in Open User Map <= 1.4.46 versions.
No fix yet
MEDIUM 5.4
CVE-2026-66442
Subscriber Broken Access Control in YayPricing <= 3.5.6 versions.
No fix yet
MEDIUM 5.3
CVE-2026-66438
Unauthenticated Sensitive Data Exposure in Exclusive Addons Elementor <= 2.8.0 versions.
No fix yet
MEDIUM 6.5
CVE-2026-66434
Contributor Cross Site Scripting (XSS) in Photonic Gallery & Lightbox for Flickr, SmugMug & Others <= 3.33 versions.
No fix yet
MEDIUM 6.5
CVE-2026-66433
Contributor Cross Site Scripting (XSS) in Location Weather <= 3.0.6 versions.
No fix yet
HIGH 7.6
CVE-2026-66427
Administrator SQL Injection in WP Google Review Slider <= 18.4 versions.
No fix yet
HIGH 7.5
CVE-2026-66050
NitroShare Desktop through 0.3.4 contains a path traversal vulnerability in its LAN file transfer server that allows unauthenticated attackers on the…
No fix yet
MEDIUM 5.0
CVE-2026-65568
Contributor Broken Access Control in Visual Composer Website Builder <= 45.15.0 versions.
No fix yet
MEDIUM 5.3
CVE-2026-65567
Unauthenticated Broken Access Control in Event Tickets <= 5.29.0.1 versions.
No fix yet
MEDIUM 5.3
CVE-2026-65564
Unauthenticated Sensitive Data Exposure in MapPress Maps for WordPress <= 2.97.6 versions.
No fix yet
MEDIUM 5.9
CVE-2026-65563
Author Cross Site Scripting (XSS) in Orbit Fox by ThemeIsle <= 3.0.7 versions.
No fix yet
MEDIUM 6.5
CVE-2026-65562
Contributor Cross Site Scripting (XSS) in BetterDocs <= 4.6.2 versions.
No fix yet
MEDIUM 6.5
CVE-2026-65561
Contributor Cross Site Scripting (XSS) in WordPress Social Login and Register <= 7.8.0 versions.
No fix yet
MEDIUM 5.4
CVE-2026-65558
Unauthenticated Server Side Request Forgery (SSRF) in AffiliateX <= 2.3.5 versions.
No fix yet
MEDIUM 5.9
CVE-2026-65557
Shop manager Cross Site Scripting (XSS) in Abandoned Cart Lite for WooCommerce <= 6.8.0 versions.
No fix yet
MEDIUM 6.8
CVE-2026-65436
Editor Arbitrary File Deletion in Kirki <= 6.0.13 versions.
No fix yet
MEDIUM 6.5
CVE-2026-65435
Unauthenticated Broken Access Control in Thrive Leads Version <= 10.9.2 versions.
No fix yet
MEDIUM 6.5
CVE-2026-65434
Subscriber Sensitive Data Exposure in ЮKassa для WooCommerce <= 2.16.1 versions.
No fix yet
MEDIUM 6.5
CVE-2026-65433
Subscriber Broken Access Control in RT Mega Menu – Mega Menu Builder for Elementor & Gutenberg <= 1.5.1 versions.
No fix yet
MEDIUM 6.5
CVE-2026-59560
Subscriber Broken Access Control in FundEngine <= 1.7.8 versions.
No fix yet
MEDIUM 6.5
CVE-2026-59559
Subscriber Cross Site Scripting (XSS) in RT Mega Menu – Mega Menu Builder for Elementor & Gutenberg <= 1.5.1 versions.
No fix yet
HIGH 7.1
CVE-2026-59558
Unauthenticated Cross Site Scripting (XSS) in Booking Calendar <= 11.4.2 versions.
No fix yet
MEDIUM 6.5
CVE-2026-59557
Unauthenticated Broken Access Control in Events Made Easy <= 3.1.3 versions.
No fix yet
HIGH 7.1
CVE-2026-59556
Unauthenticated Cross Site Scripting (XSS) in Dynamic Pricing With Discount Rules for WooCommerce <= 4.5.11 versions.
No fix yet
HIGH 7.1
CVE-2026-59553
Unauthenticated Cross Site Scripting (XSS) in Product Feed Manager <= 7.6.1 versions.
No fix yet
HIGH 7.2
CVE-2026-59552
Unauthenticated Server Side Request Forgery (SSRF) in 3D Flipbook PDF Viewer & Embedder <= 1.4.2 versions.
No fix yet
HIGH 8.5
CVE-2026-59551
Subscriber SQL Injection in rtMedia for WordPress, BuddyPress and bbPress <= 4.7.10 versions.
No fix yet
CRITICAL 9.3
CVE-2026-59550
Unauthenticated SQL Injection in AWP Classifieds <= 4.4.7 versions.
No fix yet
CRITICAL 9.3
CVE-2026-59549
Unauthenticated SQL Injection in rtMedia for WordPress, BuddyPress and bbPress <= 4.7.10 versions.
No fix yet