Top technology
Linux 13140
Google 12536
Microsoft 12379
Oracle 6843
Apple 6692
Adobe 6387
Ibm 6336
Cisco 5759
Debian 3919
Mozilla 2895
Apache 2864
Redhat 2592
Linux 13140
Google 12536
Microsoft 12379
Oracle 6843
Apple 6692
Adobe 6387
Ibm 6336
Cisco 5759
Debian 3919
Mozilla 2895
Apache 2864
Redhat 2592
MEDIUM 5.3
CVE-2026-65476
Unauthenticated Broken Access Control in Civi <= 2.2.4 versions.
No fix yet
MEDIUM 6.5
CVE-2026-65475
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WP Chill Modula Image Gallery allows Stored XSS…
No fix yet
MEDIUM 5.3
CVE-2026-65474
Unauthenticated Sensitive Data Exposure in Ninja Tables <= 5.2.10 versions.
No fix yet
MEDIUM 6.5
CVE-2026-65473
Contributor Cross Site Scripting (XSS) in Virtue/Ascend/Pinnacle Toolkit <= 4.9.12 versions.
No fix yet
MEDIUM 5.3
CVE-2026-65472
Unauthenticated Broken Access Control in Kit (formerly ConvertKit) <= 3.3.5 versions.
No fix yet
CRITICAL 9.6
CVE-2026-65471
Unauthenticated Cross Site Request Forgery (CSRF) in Avada Core <= 5.15.6 versions.
Mitigation only
MEDIUM 6.5
CVE-2026-65470
Contributor Cross Site Scripting (XSS) in Fluent Support <= 2.3.0 versions.
No fix yet
MEDIUM 5.3
CVE-2026-65469
Unauthenticated Broken Access Control in AWP Classifieds <= 4.4.7 versions.
No fix yet
MEDIUM 5.3
CVE-2026-65468
Unauthenticated Broken Access Control in JetBooking <= 4.1.2 versions.
No fix yet
MEDIUM 6.5
CVE-2026-65465
Contributor Cross Site Scripting (XSS) in JetElements For Elementor <= 2.9.1.1 versions.
No fix yet
MEDIUM 5.4
CVE-2026-65464
Unauthenticated Cross Site Request Forgery (CSRF) in GiveWP <= 4.16.3 versions.
No fix yet
MEDIUM 5.4
CVE-2026-65463
Subscriber Insecure Direct Object References (IDOR) in Masteriyo - LMS <= 2.3.1 versions.
No fix yet
HIGH 7.6
CVE-2026-65462
Administrator SQL Injection in Uncanny Automator <= 7.3.2 versions.
No fix yet
CRITICAL 9.1
CVE-2026-65461
Administrator Arbitrary File Upload in Really Simple CSV Importer <= 1.3 versions.
Mitigation only
CRITICAL 9.1
CVE-2026-65455
Administrator Arbitrary File Upload in MapSVG <= 8.14.0 versions.
No fix yet
HIGH 8.5
CVE-2026-65454
Contributor SQL Injection in Quiz And Survey Master <= 11.2.0 versions.
No fix yet
MEDIUM 5.3
CVE-2026-65453
Unauthenticated Broken Access Control in Ebook Store <= 6.19 versions.
No fix yet
MEDIUM 5.3
CVE-2026-65452
Unauthenticated Broken Access Control in Ebook Store <= 6.19 versions.
No fix yet
HIGH 8.5
CVE-2026-65451
Contributor SQL Injection in MapSVG <= 8.14.0 versions.
No fix yet
HIGH 8.5
CVE-2026-65450
Contributor SQL Injection in MapSVG <= 8.14.0 versions.
No fix yet
MEDIUM 6.5
CVE-2026-65449
Contributor Cross Site Scripting (XSS) in MapSVG <= 8.14.0 versions.
No fix yet
MEDIUM 5.4
CVE-2026-61981
Unauthenticated Cross Site Request Forgery (CSRF) in Simple Link Directory Pro <= 15.0.8 versions.
No fix yet
MEDIUM 5.3
CVE-2026-61972
Unauthenticated Broken Access Control in ShopLentor Pro <= 2.8.5 versions.
No fix yet
HIGH 7.5
CVE-2026-61954
Unauthenticated Broken Access Control in PayU India <= 3.8.9 versions.
No fix yet
CRITICAL 9.8
CVE-2026-61951
Unauthenticated Privilege Escalation in TrueBooker <= 1.2.3 versions.
No fix yet
CRITICAL 9.3
CVE-2026-61950
Unauthenticated SQL Injection in TrueBooker <= 1.2.3 versions.
No fix yet
CRITICAL 9.3
CVE-2026-61949
Unauthenticated SQL Injection in Bookly <= 27.7 versions.
No fix yet
CRITICAL 9.3
CVE-2026-61948
Unauthenticated SQL Injection in WPDM – Premium Packages <= 6.2.0 versions.
No fix yet
HIGH 7.1
CVE-2026-61947
Unauthenticated Cross Site Scripting (XSS) in Form Vibes – Database Manager for Forms <= 1.5.2 versions.
No fix yet
MEDIUM 6.5
CVE-2026-61946
Unauthenticated Insecure Direct Object References (IDOR) in Easy Appointments <= 3.12.27 versions.
No fix yet