Top technology
Linux 13140
Google 12536
Microsoft 12379
Oracle 6843
Apple 6692
Adobe 6387
Ibm 6336
Cisco 5759
Debian 3919
Mozilla 2895
Apache 2864
Redhat 2592
Linux 13140
Google 12536
Microsoft 12379
Oracle 6843
Apple 6692
Adobe 6387
Ibm 6336
Cisco 5759
Debian 3919
Mozilla 2895
Apache 2864
Redhat 2592
MEDIUM 6.5
CVE-2026-61945
Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in MultiVendorX WooCommerce Product Stock Alert allows Retri…
No fix yet
HIGH 7.1
CVE-2026-61944
Unauthenticated Cross Site Scripting (XSS) in Bookly <= 27.7 versions.
No fix yet
HIGH 7.5
CVE-2026-61943
Unauthenticated Broken Access Control in WPDM – Premium Packages <= 6.2.0 versions.
No fix yet
CRITICAL 10.0
CVE-2026-59555
Unauthenticated Arbitrary File Deletion in Participants Database <= 2.7.8.3 versions.
No fix yet
HIGH 7.5
CVE-2026-59554
Unauthenticated Broken Authentication in Ziina <= 1.2.21 versions.
No fix yet
HIGH 7.5
CVE-2026-59547
Unauthenticated Broken Access Control in Payment Gateway for PayPal on WooCommerce <= 9.1.4 versions.
No fix yet
HIGH 8.1
CVE-2026-59545
Unauthenticated Broken Authentication in miniOrange Discord Integration <= 2.2.4 versions.
No fix yet
CRITICAL 9.8
CVE-2026-59544
Unauthenticated PHP Object Injection in Thrive Quiz Builder <= 10.9.3.0 versions.
No fix yet
CRITICAL 9.9
CVE-2026-59543
Subscriber Remote Code Execution (RCE) in Advanced Views <= 3.8.11 versions.
No fix yet
HIGH 7.7
CVE-2026-59542
Subscriber Arbitrary File Deletion in Kali Forms <= 2.4.18 versions.
No fix yet
HIGH 8.8
CVE-2026-59541
Subscriber Privilege Escalation in WP BASE Booking <= 6.3.1 versions.
Mitigation only
CRITICAL 9.8
CVE-2026-59540
Unauthenticated Privilege Escalation in SMS Alert Order Notifications <= 3.9.6 versions.
No fix yet
CRITICAL 9.3
CVE-2026-59526
Unauthenticated SQL Injection in MapSVG <= 8.14.0 versions.
No fix yet
CRITICAL 9.3
CVE-2026-59525
Unauthenticated SQL Injection in Participants Database <= 2.7.8.3 versions.
No fix yet
MEDIUM 6.5
CVE-2026-59524
Unauthenticated Broken Authentication in Easy Digital Downloads <= 3.6.7 versions.
No fix yet
MEDIUM 6.5
CVE-2026-59522
Subscriber Broken Access Control in WP ERP <= 1.17.5 versions.
No fix yet
HIGH 7.1
CVE-2026-59517
Unauthenticated Cross Site Scripting (XSS) in Easy Form Builder <= 4.0.12 versions.
No fix yet
CRITICAL 9.3
CVE-2026-59514
Unauthenticated SQL Injection in Buddyboss Platform <= 3.0.5 versions.
No fix yet
MEDIUM 6.5
CVE-2026-59513
Subscriber Cross Site Scripting (XSS) in Masteriyo - LMS <= 2.3.0 versions.
No fix yet
HIGH 7.1
CVE-2026-59512
Unauthenticated Cross Site Scripting (XSS) in Product Enquiry for WooCommerce <= 2.2.34.43 versions.
No fix yet
HIGH 7.1
CVE-2026-57809
Unauthenticated Cross Site Scripting (XSS) in AffiliateWP <= 2.34.0 versions.
No fix yet
MEDIUM 6.5
CVE-2026-57808
Subscriber Arbitrary Content Deletion in WP EasyPay <= 4.5.0 versions.
No fix yet
HIGH 8.8
CVE-2026-57785
Unauthenticated Cross Site Request Forgery (CSRF) in ApusListing <= 1.2.63 versions.
Mitigation only
CRITICAL 9.6
CVE-2026-57784
Unauthenticated Cross Site Request Forgery (CSRF) in Ninja Forms File Uploads Extension <= 3.3.26 versions.
No fix yet
HIGH 7.1
CVE-2026-57769
Unauthenticated Cross Site Scripting (XSS) in Grand Photography <= 5.7.8 versions.
No fix yet
HIGH 7.1
CVE-2026-57767
Unauthenticated Cross Site Scripting (XSS) in WP Google Maps Pro <= 10.1.02 versions.
No fix yet
HIGH 7.1
CVE-2026-57735
Unauthenticated Cross Site Scripting (XSS) in Breakdance <= 2.7.1 versions.
No fix yet
MEDIUM 6.5
CVE-2026-57717
Unauthenticated Broken Access Control in Knit Pay <= 9.6.0.0 versions.
No fix yet
MEDIUM 5.3
CVE-2026-57716
Unauthenticated Arbitrary File Deletion in Broadcast Live Video <= 7.2.4 versions.
No fix yet
HIGH 7.1
CVE-2026-57704
Unauthenticated Cross Site Scripting (XSS) in Smart Manager <= 8.90.0 versions.
No fix yet