Top technology
Linux 13140
Google 12525
Microsoft 12378
Apple 6692
Oracle 6673
Adobe 6383
Ibm 6286
Cisco 5751
Debian 3919
Mozilla 2886
Apache 2864
Redhat 2586
Linux 13140
Google 12525
Microsoft 12378
Apple 6692
Oracle 6673
Adobe 6383
Ibm 6286
Cisco 5751
Debian 3919
Mozilla 2886
Apache 2864
Redhat 2586
HIGH 7.1
CVE-2026-73396
Subscriber Broken Authentication in MWB HubSpot for WooCommerce <= 1.6.7 versions.
No fix yet
MEDIUM 6.5
CVE-2026-73395
Unauthenticated Insecure Direct Object References (IDOR) in Booking calendar, Appointment Booking System <= 3.2.36 versions.
No fix yet
HIGH 7.1
CVE-2026-73393
Unauthenticated Cross Site Scripting (XSS) in Subscribe2 <= 10.46 versions.
No fix yet
CRITICAL 9.3
CVE-2026-73392
Unauthenticated SQL Injection in Super Store Finder <= 7.8 versions.
No fix yet
HIGH 7.1
CVE-2026-73382
Unauthenticated Cross Site Scripting (XSS) in Site Reviews <= 8.2.0 versions.
No fix yet
CRITICAL 9.1
CVE-2026-73381
Unauthenticated Broken Authentication in Popup by Supsystic <= 1.13.0 versions.
No fix yet
CRITICAL 9.8
CVE-2026-73380
Unauthenticated PHP Object Injection in Popup by Supsystic <= 1.13.0 versions.
No fix yet
MEDIUM 6.5
CVE-2026-73379
Unauthenticated Bypass Vulnerability in Contact Form by Supsystic < 1.10.0 versions.
No fix yet
HIGH 7.1
CVE-2026-73378
Unauthenticated Cross Site Scripting (XSS) in Contact Form by Supsystic < 1.10.0 versions.
No fix yet
HIGH 7.5
CVE-2026-73377
Unauthenticated Broken Access Control in Ultimate Maps by Supsystic < 1.5.0 versions.
No fix yet
CRITICAL 9.8
CVE-2026-73376
Unauthenticated PHP Object Injection in Ultimate Maps by Supsystic < 1.5.0 versions.
No fix yet
HIGH 7.1
CVE-2026-73375
Unauthenticated Cross Site Scripting (XSS) in Ultimate Maps by Supsystic < 1.5.0 versions.
No fix yet
HIGH 7.2
CVE-2026-73367
Unauthenticated Remote File Inclusion in Easy Google Maps < 1.14.2 versions.
No fix yet
CRITICAL 9.8
CVE-2026-73366
Unauthenticated PHP Object Injection in Easy Google Maps <= 1.13.0 versions.
No fix yet
CRITICAL 9.3
CVE-2026-73365
Unauthenticated SQL Injection in JetAppointment <= 2.5.2 versions.
No fix yet
HIGH 7.1
CVE-2026-73362
Unauthenticated Cross Site Scripting (XSS) in URL Shortify <= 2.5.0 versions.
No fix yet
HIGH 7.1
CVE-2026-73361
Unauthenticated Cross Site Scripting (XSS) in Recipe Card Blocks for Gutenberg & Elementor <= 3.4.18 versions.
No fix yet
HIGH 7.1
CVE-2026-73360
Unauthenticated Cross Site Scripting (XSS) in Chaty Pro <= 3.5.8 versions.
No fix yet
MEDIUM 6.5
CVE-2026-73359
Subscriber Cross Site Scripting (XSS) in WP Cookie Notice for GDPR, CCPA & ePrivacy Consent <= 4.3.9 versions.
No fix yet
HIGH 7.1
CVE-2026-73358
Unauthenticated Cross Site Scripting (XSS) in Affiliates Manager <= 2.9.53 versions.
No fix yet
HIGH 8.2
CVE-2026-73356
Unauthenticated Arbitrary Content Deletion in Breeze <= 2.5.12 versions.
No fix yet
CRITICAL 9.3
CVE-2026-73355
Unauthenticated SQL Injection in Affiliates Manager <= 2.9.53 versions.
No fix yet
MEDIUM 6.5
CVE-2026-73352
Unauthenticated Broken Access Control in GiveWP <= 4.16.5.1 versions.
No fix yet
HIGH 7.1
CVE-2026-73351
Unauthenticated Cross Site Scripting (XSS) in WordPress Social Login and Register <= 7.8.1 versions.
No fix yet
HIGH 8.2
CVE-2026-73350
Unauthenticated Broken Authentication in SupportCandy <= 3.5.1 versions.
No fix yet
MEDIUM 6.5
CVE-2026-73348
Unauthenticated Broken Access Control in GiveWP < 4.16.6 versions.
No fix yet
HIGH 7.1
CVE-2026-73345
Customer SQL Injection in License Manager for WooCommerce <= 3.0.18 versions.
No fix yet
CRITICAL 10.0
CVE-2026-73343
Unauthenticated Remote Code Execution (RCE) in WP Compress < 7.20.01 versions.
No fix yet
HIGH 7.1
CVE-2026-73342
Unauthenticated Cross Site Scripting (XSS) in WP Multilang <= 2.4.31 versions.
No fix yet
CRITICAL 9.8
CVE-2026-73341
Unauthenticated PHP Object Injection in RegistrationMagic <= 6.0.9.7 versions.
No fix yet