Top technology
Linux 13140
Google 12536
Microsoft 12379
Oracle 6843
Apple 6692
Adobe 6387
Ibm 6336
Cisco 5759
Debian 3919
Mozilla 2895
Apache 2864
Redhat 2592
Linux 13140
Google 12536
Microsoft 12379
Oracle 6843
Apple 6692
Adobe 6387
Ibm 6336
Cisco 5759
Debian 3919
Mozilla 2895
Apache 2864
Redhat 2592
HIGH 8.5
CVE-2026-57644
Contributor SQL Injection in Restaurant Menu by MotoPress <= 2.4.10 versions.
Mitigation only
HIGH 8.5
CVE-2026-57643
Contributor SQL Injection in WP Post Author <= 3.9.1 versions.
Mitigation only
HIGH 8.5
CVE-2026-57642
Contributor SQL Injection in Gallery <= 4.7.8 versions.
Mitigation only
MEDIUM 6.5
CVE-2026-57641
Unauthenticated Cross Site Request Forgery (CSRF) in Real Estate 7 <= 3.5.9 versions.
Mitigation only
MEDIUM 6.5
CVE-2026-57638
Contributor Cross Site Scripting (XSS) in Fluent Booking <= 2.1.0 versions.
No fix yet
HIGH 8.5
CVE-2026-57636
Contributor SQL Injection in wpForo Forum <= 3.0.9 versions.
Mitigation only
MEDIUM 6.5
CVE-2026-57635
Unauthenticated Cross Site Request Forgery (CSRF) in FunnelKit Payment Gateway for Stripe WooCommerce <= 1.14.0.3 versions.
Mitigation only
MEDIUM 5.3
CVE-2026-57633
Unauthenticated Sensitive Data Exposure in WCBoost – Products Compare <= 1.1.0 versions.
Mitigation only
MEDIUM 5.4
CVE-2026-57632
Subscriber Broken Access Control in Email Marketing for WooCommerce by Omnisend <= 1.19.0 versions.
Mitigation only
HIGH 7.6
CVE-2026-57631
Administrator SQL Injection in Popup box <= 6.0.1 versions.
Mitigation only
MEDIUM 5.3
CVE-2026-57630
Unauthenticated Insecure Direct Object References (IDOR) in Blocksy Companion Pro <= 2.1.46 versions.
Mitigation only
MEDIUM 6.5
CVE-2026-57629
Contributor Cross Site Scripting (XSS) in StatCounter <= 2.1.1 versions.
Mitigation only
HIGH 7.6
CVE-2026-57628
Administrator SQL Injection in WP All Import <= 4.0.1 versions.
Mitigation only
MEDIUM 6.5
CVE-2026-57618
Contributor Cross Site Scripting (XSS) in Neve PRO <= 3.1.2 versions.
Mitigation only
MEDIUM 6.5
CVE-2026-57617
Contributor Cross Site Scripting (XSS) in SeedProd Pro < 6.19.5 versions.
Mitigation only
MEDIUM 6.5
CVE-2026-57431
Author Cross Site Scripting (XSS) in Featured Image <= 2.1 versions.
Mitigation only
HIGH 7.1
CVE-2026-57325
Unauthenticated Cross Site Scripting (XSS) in NanoMag <= 1.8 versions.
Mitigation only
MEDIUM 6.5
CVE-2026-57324
Unauthenticated Broken Access Control in GIFT4U <= 1.0.10 versions.
No fix yet
MEDIUM 5.8
CVE-2026-57323
Unauthenticated Broken Access Control in Flash & HTML5 Video <= 2.11.0 versions.
No fix yet
HIGH 7.1
CVE-2026-57322
Unauthenticated Cross Site Scripting (XSS) in weMail <= 2.1.2 versions.
Mitigation only
HIGH 7.1
CVE-2026-57321
Contributor Arbitrary File Deletion in H5P <= 1.17.7 versions.
No fix yet
HIGH 7.1
CVE-2026-57319
Unauthenticated Cross Site Scripting (XSS) in FOX <= 1.4.8 versions.
Mitigation only
MEDIUM 6.5
CVE-2026-57318
Subscriber Sensitive Data Exposure in Site Reviews <= 8.0.11 versions.
Mitigation only
HIGH 7.1
CVE-2026-57317
Unauthenticated Cross Site Scripting (XSS) in Simply Schedule Appointments <= 1.6.12.2 versions.
Mitigation only
MEDIUM 6.5
CVE-2026-57316
Subscriber Sensitive Data Exposure in GetGenie <= 4.4.2 versions.
Mitigation only
HIGH 8.5
CVE-2026-57315
Contributor Remote Code Execution (RCE) in Blocksy Companion Pro <= 2.1.45 versions.
Mitigation only
HIGH 7.1
CVE-2026-57314
Unauthenticated Cross Site Scripting (XSS) in SureCart <= 4.3.2 versions.
Mitigation only
MEDIUM 6.5
CVE-2026-57313
Subscriber Cross Site Scripting (XSS) in SureCart <= 4.2.2 versions.
Mitigation only
HIGH 7.1
CVE-2026-57312
Unauthenticated Cross Site Scripting (XSS) in Everest Forms <= 3.4.8 versions.
Mitigation only
HIGH 7.1
CVE-2026-56072
Unauthenticated Cross Site Scripting (XSS) in WoodMart <= 8.5.3 versions.
Mitigation only