Top technology
Linux 13140
Google 12536
Microsoft 12379
Oracle 6843
Apple 6692
Adobe 6387
Ibm 6336
Cisco 5759
Debian 3919
Mozilla 2895
Apache 2864
Redhat 2592
Linux 13140
Google 12536
Microsoft 12379
Oracle 6843
Apple 6692
Adobe 6387
Ibm 6336
Cisco 5759
Debian 3919
Mozilla 2895
Apache 2864
Redhat 2592
MEDIUM 6.5
CVE-2026-65514
Contributor Cross Site Scripting (XSS) in Appointment Hour Booking <= 1.5.86 versions.
No fix yet
MEDIUM 5.4
CVE-2026-65512
Cross-Site request forgery (CSRF) vulnerability in Melapress WP Activity Log and Melapress WP Activity Log Premium allows Cross Site Request Forgery.…
No fix yet
HIGH 7.1
CVE-2026-65511
Unauthenticated Cross Site Scripting (XSS) in Manual - Documentation, Knowledge Base & Education WordPress Theme <= 7.5.4 versions.
No fix yet
HIGH 7.1
CVE-2026-65510
Unauthenticated Cross Site Scripting (XSS) in PeproDev Ultimate Invoice <= 2.2.6 versions.
No fix yet
MEDIUM 5.3
CVE-2026-65506
Unauthenticated Broken Access Control in MP3 Audio Player for Music, Radio & Podcast by Sonaar <= 5.12 versions.
No fix yet
MEDIUM 5.3
CVE-2026-65505
Unauthenticated Sensitive Data Exposure in Ultimate Store Kit Elementor Addons <= 3.0.5 versions.
No fix yet
MEDIUM 6.5
CVE-2026-65503
Contributor Cross Site Scripting (XSS) in Ultimate Store Kit Elementor Addons <= 3.0.5 versions.
No fix yet
MEDIUM 5.3
CVE-2026-65501
Unauthenticated Insecure Direct Object References (IDOR) in Shiptastic for WooCommerce <= 5.1.0 versions.
No fix yet
HIGH 7.5
CVE-2026-65500
Unauthenticated Broken Access Control in Manual - Documentation, Knowledge Base & Education WordPress Theme <= 7.5.4 versions.
No fix yet
MEDIUM 6.5
CVE-2026-65499
Unauthenticated Broken Access Control in PeproDev Ultimate Invoice <= 2.2.6 versions.
No fix yet
MEDIUM 5.3
CVE-2026-65498
Unauthenticated Sensitive Data Exposure in Complianz <= 7.5.0 versions.
No fix yet
HIGH 7.2
CVE-2026-65497
Administrator PHP Object Injection in Complianz <= 7.5.0 versions.
No fix yet
HIGH 7.5
CVE-2026-65495
Unauthenticated Broken Access Control in Dokan Pro <= 5.0.3 versions.
No fix yet
HIGH 7.1
CVE-2026-65494
Subscriber SQL Injection in Dokan Pro <= 5.0.2 versions.
No fix yet
HIGH 7.5
CVE-2026-65493
Subscriber PHP Object Injection in Dokan Pro <= 5.0.2 versions.
No fix yet
HIGH 7.1
CVE-2026-65492
Unauthenticated Cross Site Scripting (XSS) in Dokan Pro <= 5.0.0 versions.
No fix yet
MEDIUM 5.3
CVE-2026-65490
Unauthenticated Sensitive Data Exposure in Create by Mediavine <= 2.5.3 versions.
No fix yet
MEDIUM 5.3
CVE-2026-65489
Unauthenticated Broken Access Control in LA-Studio Element Kit for Elementor <= 1.6.2 versions.
No fix yet
HIGH 7.1
CVE-2026-65488
Unauthenticated Cross Site Request Forgery (CSRF) in LA-Studio Element Kit for Elementor <= 1.6.2 versions.
No fix yet
MEDIUM 5.3
CVE-2026-65487
Unauthenticated Broken Access Control in Photography <= 7.7.6 versions.
No fix yet
MEDIUM 5.3
CVE-2026-65486
Unauthenticated Broken Access Control in Event post <= 6.0.1 versions.
No fix yet
MEDIUM 5.3
CVE-2026-65485
Unauthenticated Broken Access Control in Content Control <= 2.6.5 versions.
No fix yet
MEDIUM 6.3
CVE-2026-65484
Contributor Broken Access Control in Style Kits <= 2.6.5 versions.
No fix yet
MEDIUM 5.9
CVE-2026-65483
Author Cross Site Scripting (XSS) in HashThemes Demo Importer <= 1.4.2 versions.
No fix yet
MEDIUM 6.5
CVE-2026-65482
Contributor Cross Site Scripting (XSS) in LA-Studio Element Kit for Elementor <= 1.6.2 versions.
No fix yet
HIGH 7.5
CVE-2026-65481
Contributor Local File Inclusion in Vino <= 1.9 versions.
No fix yet
MEDIUM 6.5
CVE-2026-65480
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in CodexThemes TheGem allows DOM-Based XSS.
This …
No fix yet
MEDIUM 5.4
CVE-2026-65479
Subscriber Broken Access Control in Reviewer <= 3.14.2 versions.
No fix yet
MEDIUM 5.4
CVE-2026-65478
Subscriber Broken Access Control in ListingPro <= 2.9.10 versions.
No fix yet
HIGH 7.5
CVE-2026-65477
Contributor Local File Inclusion in Tonda Core <= 2.1.2 versions.
No fix yet