Top technology
Linux 13140
Google 12536
Microsoft 12379
Oracle 6843
Apple 6692
Adobe 6387
Ibm 6336
Cisco 5759
Debian 3919
Mozilla 2895
Apache 2864
Redhat 2592
Linux 13140
Google 12536
Microsoft 12379
Oracle 6843
Apple 6692
Adobe 6387
Ibm 6336
Cisco 5759
Debian 3919
Mozilla 2895
Apache 2864
Redhat 2592
MEDIUM 5.3
CVE-2026-65490
Unauthenticated Sensitive Data Exposure in Create by Mediavine <= 2.5.3 versions.
No fix yet
MEDIUM 5.3
CVE-2026-65489
Unauthenticated Broken Access Control in LA-Studio Element Kit for Elementor <= 1.6.2 versions.
No fix yet
HIGH 7.1
CVE-2026-65488
Unauthenticated Cross Site Request Forgery (CSRF) in LA-Studio Element Kit for Elementor <= 1.6.2 versions.
No fix yet
MEDIUM 5.3
CVE-2026-65487
Unauthenticated Broken Access Control in Photography <= 7.7.6 versions.
No fix yet
MEDIUM 5.3
CVE-2026-65486
Unauthenticated Broken Access Control in Event post <= 6.0.1 versions.
No fix yet
MEDIUM 5.3
CVE-2026-65485
Unauthenticated Broken Access Control in Content Control <= 2.6.5 versions.
No fix yet
MEDIUM 6.3
CVE-2026-65484
Contributor Broken Access Control in Style Kits <= 2.6.5 versions.
No fix yet
MEDIUM 5.9
CVE-2026-65483
Author Cross Site Scripting (XSS) in HashThemes Demo Importer <= 1.4.2 versions.
No fix yet
MEDIUM 6.5
CVE-2026-65482
Contributor Cross Site Scripting (XSS) in LA-Studio Element Kit for Elementor <= 1.6.2 versions.
No fix yet
HIGH 7.5
CVE-2026-65481
Contributor Local File Inclusion in Vino <= 1.9 versions.
No fix yet
MEDIUM 6.5
CVE-2026-65480
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in CodexThemes TheGem allows DOM-Based XSS.
This …
No fix yet
MEDIUM 5.4
CVE-2026-65479
Subscriber Broken Access Control in Reviewer <= 3.14.2 versions.
No fix yet
MEDIUM 5.4
CVE-2026-65478
Subscriber Broken Access Control in ListingPro <= 2.9.10 versions.
No fix yet
HIGH 7.5
CVE-2026-65477
Contributor Local File Inclusion in Tonda Core <= 2.1.2 versions.
No fix yet
MEDIUM 5.3
CVE-2026-65476
Unauthenticated Broken Access Control in Civi <= 2.2.4 versions.
No fix yet
MEDIUM 6.5
CVE-2026-65475
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WP Chill Modula Image Gallery allows Stored XSS…
No fix yet
MEDIUM 5.3
CVE-2026-65474
Unauthenticated Sensitive Data Exposure in Ninja Tables <= 5.2.10 versions.
No fix yet
MEDIUM 6.5
CVE-2026-65473
Contributor Cross Site Scripting (XSS) in Virtue/Ascend/Pinnacle Toolkit <= 4.9.12 versions.
No fix yet
MEDIUM 5.3
CVE-2026-65472
Unauthenticated Broken Access Control in Kit (formerly ConvertKit) <= 3.3.5 versions.
No fix yet
CRITICAL 9.6
CVE-2026-65471
Unauthenticated Cross Site Request Forgery (CSRF) in Avada Core <= 5.15.6 versions.
Mitigation only
MEDIUM 6.5
CVE-2026-65470
Contributor Cross Site Scripting (XSS) in Fluent Support <= 2.3.0 versions.
No fix yet
MEDIUM 5.3
CVE-2026-65469
Unauthenticated Broken Access Control in AWP Classifieds <= 4.4.7 versions.
No fix yet
MEDIUM 5.3
CVE-2026-65468
Unauthenticated Broken Access Control in JetBooking <= 4.1.2 versions.
No fix yet
MEDIUM 6.5
CVE-2026-65465
Contributor Cross Site Scripting (XSS) in JetElements For Elementor <= 2.9.1.1 versions.
No fix yet
MEDIUM 5.4
CVE-2026-65464
Unauthenticated Cross Site Request Forgery (CSRF) in GiveWP <= 4.16.3 versions.
No fix yet
MEDIUM 5.4
CVE-2026-65463
Subscriber Insecure Direct Object References (IDOR) in Masteriyo - LMS <= 2.3.1 versions.
No fix yet
HIGH 7.6
CVE-2026-65462
Administrator SQL Injection in Uncanny Automator <= 7.3.2 versions.
No fix yet
CRITICAL 9.1
CVE-2026-65461
Administrator Arbitrary File Upload in Really Simple CSV Importer <= 1.3 versions.
Mitigation only
CRITICAL 9.1
CVE-2026-65455
Administrator Arbitrary File Upload in MapSVG <= 8.14.0 versions.
No fix yet
HIGH 8.5
CVE-2026-65454
Contributor SQL Injection in Quiz And Survey Master <= 11.2.0 versions.
No fix yet