Top technology
Linux 13140
Google 12536
Microsoft 12379
Oracle 6843
Apple 6692
Adobe 6387
Ibm 6336
Cisco 5759
Debian 3919
Mozilla 2895
Apache 2864
Redhat 2592
Linux 13140
Google 12536
Microsoft 12379
Oracle 6843
Apple 6692
Adobe 6387
Ibm 6336
Cisco 5759
Debian 3919
Mozilla 2895
Apache 2864
Redhat 2592
MEDIUM 6.5
CVE-2026-57731
Contributor Broken Access Control in Flatsome <= 3.20.5 versions.
Mitigation only
HIGH 8.2
CVE-2026-57688
Unauthenticated Broken Access Control in POS Entegratör <= 3.7.103 versions.
Mitigation only
HIGH 8.5
CVE-2026-57687
Contributor SQL Injection in Custom Field Template <= 2.7.8 versions.
Mitigation only
HIGH 7.1
CVE-2026-57686
Unauthenticated Cross Site Scripting (XSS) in WowAddons <= 1.6.14 versions.
Mitigation only
MEDIUM 6.5
CVE-2026-57684
Contributor Cross Site Scripting (XSS) in TheFox <= 3.9.70 versions.
No fix yet
CRITICAL 9.3
CVE-2026-57683
Unauthenticated SQL Injection in WP Fast Total Search <= 1.80.280 versions.
Mitigation only
HIGH 7.1
CVE-2026-57682
Unauthenticated Cross Site Scripting (XSS) in Simple Link Directory <= 15.0.5 versions.
Mitigation only
MEDIUM 6.4
CVE-2026-57681
Subscriber Server Side Request Forgery (SSRF) in GeoDirectory <= 2.8.161 versions.
Mitigation only
MEDIUM 6.5
CVE-2026-57680
Unauthenticated Insecure Direct Object References (IDOR) in Kirki <= 6.0.11 versions.
Mitigation only
CRITICAL 9.3
CVE-2026-57679
Unauthenticated SQL Injection in GeekyBot <= 1.2.5 versions.
No fix yet
HIGH 7.1
CVE-2026-57678
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in ThemePunch Slider Revolution allows Reflected X…
Mitigation only
CRITICAL 9.8
CVE-2026-57677
Unauthenticated PHP Object Injection in Novalnet Payment Gateway for WooCommerce <= 12.10.3 versions.
Mitigation only
HIGH 7.1
CVE-2026-57675
Unauthenticated Cross Site Scripting (XSS) in WP Photo Album Plus <= 9.2.02.004 versions.
Mitigation only
HIGH 7.1
CVE-2026-57674
Unauthenticated Cross Site Scripting (XSS) in Timetics <= 1.0.58 versions.
Mitigation only
HIGH 7.1
CVE-2026-57673
Unauthenticated Cross Site Scripting (XSS) in Optimole <= 4.2.7 versions.
Mitigation only
HIGH 7.1
CVE-2026-57672
Unauthenticated Cross Site Scripting (XSS) in wpDataTables <= 6.5.1.1 versions.
Mitigation only
HIGH 7.1
CVE-2026-57671
Unauthenticated Cross Site Scripting (XSS) in perfmatters <= 2.6.4 versions.
Mitigation only
HIGH 7.1
CVE-2026-57670
Unauthenticated Cross Site Scripting (XSS) in Google Maps CP <= 1.2.5 versions.
No fix yet
MEDIUM 6.5
CVE-2026-57669
Subscriber Broken Access Control in Advanced Contact form 7 DB <= 2.0.9 versions.
Mitigation only
CRITICAL 9.6
CVE-2026-57625
Unauthenticated Cross Site Scripting (XSS) in Admin and Site Enhancements (ASE) Pro <= 8.8.5 versions.
Mitigation only
CRITICAL 10.0
CVE-2026-57624
Unauthenticated Remote Code Execution (RCE) in Blocksy Companion Pro <= 2.1.46 versions.
Mitigation only
CRITICAL 9.0
CVE-2026-57623
Unauthenticated Arbitrary Code Execution in W3 Total Cache <= 2.9.4 versions.
Mitigation only
CRITICAL 9.8
CVE-2026-57621
Unauthenticated PHP Object Injection in Booktics <= 1.0.21 versions.
Mitigation only
HIGH 7.1
CVE-2026-57426
Unauthenticated Cross Site Scripting (XSS) in Modula - PRO <= 2.10.8 versions.
Mitigation only
HIGH 7.1
CVE-2026-57366
Unauthenticated Cross Site Scripting (XSS) in WPAdverts <= 2.3.1 versions.
Mitigation only
HIGH 7.1
CVE-2026-57362
Unauthenticated Cross Site Scripting (XSS) in ChatBot <= 8.3.2 versions.
Mitigation only
HIGH 7.1
CVE-2026-57361
Unauthenticated Cross Site Scripting (XSS) in Survey Maker <= 5.2.2.5 versions.
Mitigation only
HIGH 7.1
CVE-2026-57360
Unauthenticated Cross Site Scripting (XSS) in eCommerce Product Catalog <= 3.5.4 versions.
Mitigation only
HIGH 7.1
CVE-2026-57359
Unauthenticated Cross Site Scripting (XSS) in ReviewX <= 2.3.10 versions.
Mitigation only
HIGH 7.1
CVE-2026-57358
Unauthenticated Cross Site Scripting (XSS) in Customize My Account for WooCommerce <= 4.3.9 versions.
Mitigation only