Browse CVEs

CRITICAL 9.8 CVE-2026-57738 Deserialization of Untrusted Data vulnerability in axiomthemes 777 triple-seven allows Object Injection.This issue affects 777: from n/a through <= 1… Mitigation only Fix from $2,3002026-07-13 HIGH 7.1 CVE-2026-57734 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in tagDiv tagDiv Composer td-composer allows Refle… Mitigation only Fix from $1,9502026-07-13 HIGH 7.1 CVE-2026-57733 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in tagDiv tagDiv Cloud Library td-cloud-library al… Mitigation only Fix from $1,9502026-07-13 HIGH 7.1 CVE-2026-57732 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in tagDiv tagDiv Opt-In Builder td-subscription al… Mitigation only Fix from $1,9502026-07-13 HIGH 7.5 CVE-2026-57729 Missing Authorization vulnerability in UX-themes Flatsome flatsome allows Exploiting Incorrectly Configured Access Control Security Levels.This issue… No fix yet Fix from $1,9502026-07-13 HIGH 7.1 CVE-2026-57728 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in UX-themes Flatsome flatsome allows Reflected XS… Mitigation only Fix from $1,9502026-07-13 HIGH 7.5 CVE-2026-57727 Missing Authorization vulnerability in Themeum Kirki kirki allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects… Mitigation only Fix from $1,9502026-07-13 CRITICAL 9.3 CVE-2026-57726 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Themeum Kirki kirki allows Blind SQL Injection.… Mitigation only Fix from $2,3002026-07-13 HIGH 7.1 CVE-2026-57725 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Themeum Kirki kirki allows Stored XSS.This issu… Mitigation only Fix from $1,9502026-07-13 CRITICAL 9.8 CVE-2026-57724 Deserialization of Untrusted Data vulnerability in Themeum Kirki kirki allows Object Injection.This issue affects Kirki: from n/a through <= 6.0.12. Mitigation only Fix from $2,3002026-07-13 CRITICAL 10.0 CVE-2026-57719 Unrestricted Upload of File with Dangerous Type vulnerability in CodeRevolution Aimogen Pro aimogen-pro allows Using Malicious Files.This issue affec… Mitigation only Fix from $2,3002026-07-13 HIGH 7.1 CVE-2026-57718 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Unlimited Elements Unlimited Elements For Eleme… Mitigation only Fix from $1,9502026-07-13 HIGH 7.1 CVE-2026-57715 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WPManageNinja Fluent CRM fluent-crm allows Refl… Mitigation only Fix from $1,9502026-07-13 CRITICAL 9.3 CVE-2026-57714 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in LatePoint LatePoint latepoint allows Blind SQL … No fix yet Fix from $2,3002026-07-13 HIGH 8.8 CVE-2026-57713 Deserialization of Untrusted Data vulnerability in Marcus (aka @msykes) Events Manager events-manager allows Object Injection.This issue affects Even… Mitigation only Fix from $1,9502026-07-13 HIGH 7.1 CVE-2026-57712 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WPZOOM WPZOOM Portfolio wpzoom-portfolio allows… Mitigation only Fix from $1,9502026-07-13 MEDIUM 6.5 CVE-2026-57711 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in PSM Plugins SupportCandy supportcandy allows St… Mitigation only Fix from $1,6002026-07-13 CRITICAL 9.9 CVE-2026-57710 Unrestricted Upload of File with Dangerous Type vulnerability in quantumcloud WoowBot Pro Max woowbot-pro-max allows Using Malicious Files.This issue… No fix yet Fix from $2,3002026-07-13 HIGH 8.6 CVE-2026-57709 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in WP Swings Membership For WooCommerce membership-for-w… Mitigation only Fix from $1,9502026-07-13 HIGH 7.1 CVE-2026-57708 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in CRM Perks Contact Form Entries contact-form-ent… Mitigation only Fix from $1,9502026-07-13 CRITICAL 9.3 CVE-2026-57707 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in quantumcloud Simple Business Directory Pro simp… Mitigation only Fix from $2,3002026-07-13 HIGH 7.1 CVE-2026-57706 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Dokan, Inc. Dokan dokan-lite allows Reflected X… Mitigation only Fix from $1,9502026-07-13 HIGH 7.5 CVE-2026-57705 Missing Authorization vulnerability in Nexcess Event Tickets event-tickets allows Exploiting Incorrectly Configured Access Control Security Levels.Th… Mitigation only Fix from $1,9502026-07-13 CRITICAL 9.3 CVE-2026-57702 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Melograno Venture Studio Amelia ameliabooking a… Mitigation only Fix from $2,3002026-07-13 MEDIUM 6.5 CVE-2026-57698 Authentication Bypass Using an Alternate Path or Channel vulnerability in VillaTheme Abandoned Cart Recovery for WooCommerce woo-abandoned-cart-recov… Mitigation only Fix from $1,6002026-07-13 HIGH 7.5 CVE-2026-57697 Authentication Bypass Using an Alternate Path or Channel vulnerability in Metagauss ProfileGrid profilegrid-user-profiles-groups-and-communities all… Mitigation only Fix from $1,9502026-07-13 HIGH 7.1 CVE-2026-57695 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Dan Rossiter Document Gallery document-gallery … Mitigation only Fix from $1,9502026-07-13 MEDIUM 6.5 CVE-2026-57694 Authorization Bypass Through User-Controlled Key vulnerability in Themeum Tutor LMS tutor allows Exploiting Incorrectly Configured Access Control Sec… Mitigation only Fix from $1,6002026-07-13 MEDIUM 6.5 CVE-2026-57693 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Spacetime Ad Inserter ad-inserter allows Exploi… Mitigation only Fix from $1,6002026-07-13 MEDIUM 5.8 CVE-2026-57691 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Eli Anti-Malware Security and Brute-Force Firew… Mitigation only Fix from $1,6002026-07-13