Vulnerability index

Browse CVEs

10,000+ matching
Filters
Severity

Filters apply as you choose them.

Unclassified CRITICAL 9.8
CVE-2026-66691

Unauthenticated Broken Access Control in Nokri <= 1.6.6 versions.

No fix yet
Fix from $5,750 2026-08-13
Unclassified MEDIUM 6.3
CVE-2026-66689

Unauthenticated Broken Access Control in Anti Spam and list cleaner &#8211; AcyChecker <= 2.0.0 versions.

No fix yet
Fix from $4,000 2026-08-13
Unclassified MEDIUM 6.5
CVE-2026-66687

Customer Cross Site Scripting (XSS) in WpBookingly <= 1.3.2 versions.

No fix yet
Fix from $4,000 2026-08-13
Unclassified HIGH 7.7
CVE-2026-66661

Subscriber Privilege Escalation in Directories Pro <= 2.0.5 versions.

No fix yet
Fix from $4,900 2026-08-13
Unclassified MEDIUM 6.5
CVE-2026-66660

Unauthenticated Broken Access Control in Contact Form 7 – PayPal & Stripe Add-on <= 2.5.1 versions.

No fix yet
Fix from $4,000 2026-08-13
Unclassified HIGH 8.5
CVE-2026-66658

Subscriber SQL Injection in Reviewer <= 3.14.2 versions.

No fix yet
Fix from $4,900 2026-08-13
Unclassified HIGH 8.1
CVE-2026-66657

Unauthenticated Local File Inclusion in Biagiotti Core <= 2.1.1 versions.

No fix yet
Fix from $4,900 2026-08-13
Unclassified HIGH 8.1
CVE-2026-66656

Unauthenticated Local File Inclusion in Foton Core <= 1.1.1 versions.

No fix yet
Fix from $4,900 2026-08-13
Unclassified HIGH 7.1
CVE-2026-66655

Unauthenticated Cross Site Scripting (XSS) in MultiParcels Shipping For WooCommerce <= 1.30.36 versions.

No fix yet
Fix from $4,900 2026-08-13
Unclassified MEDIUM 6.0
CVE-2026-66654

Subscriber Server Side Request Forgery (SSRF) in Vehica Core <= 1.0.104 versions.

No fix yet
Fix from $4,000 2026-08-13
Unclassified HIGH 8.1
CVE-2026-66653

Unauthenticated Local File Inclusion in Barista <= 2.5.1 versions.

No fix yet
Fix from $4,900 2026-08-13
Unclassified CRITICAL 9.3
CVE-2026-66478

Unauthenticated SQL Injection in Church Admin <= 5.1.1 versions.

No fix yet
Fix from $5,750 2026-08-13
Unclassified CRITICAL 9.3
CVE-2026-66472

Unauthenticated SQL Injection in Everest Backup <= 2.3.12 versions.

No fix yet
Fix from $5,750 2026-08-13
Unclassified MEDIUM 6.5
CVE-2026-66471

Subscriber Cross Site Scripting (XSS) in Accordion <= 3.0.6 versions.

No fix yet
Fix from $4,000 2026-08-13
Unclassified HIGH 7.5
CVE-2026-66469

Unauthenticated Broken Access Control in Arvow AI SEO Writer <= 1.5.3 versions.

No fix yet
Fix from $4,900 2026-08-13
Unclassified HIGH 7.1
CVE-2026-66468

Unauthenticated Cross Site Scripting (XSS) in Local Delivery Drivers for WooCommerce <= 3.0.0 versions.

No fix yet
Fix from $4,900 2026-08-13
Unclassified MEDIUM 6.5
CVE-2026-66467

Subscriber Cross Site Scripting (XSS) in FluentCommunity <= 2.7.5 versions.

No fix yet
Fix from $4,000 2026-08-13
Unclassified HIGH 7.5
CVE-2026-66466

Unauthenticated Broken Access Control in StoreGrowth: Smart Sales Booster for WooCommerce | BOGO, Upsells, Direct Checkout, Quick View, Side Cart <= …

No fix yet
Fix from $4,900 2026-08-13
Unclassified CRITICAL 9.8
CVE-2026-66465

Unauthenticated Broken Authentication in Cartify <= 1.3.0.1 versions.

No fix yet
Fix from $5,750 2026-08-13
Unclassified MEDIUM 6.5
CVE-2026-66464

Unauthenticated Broken Access Control in Internal Link Optimiser <= 5.2.7 versions.

No fix yet
Fix from $4,000 2026-08-13
Unclassified HIGH 7.5
CVE-2026-66463

Unauthenticated Sensitive Data Exposure in iCARRY <= 2.9 versions.

No fix yet
Fix from $4,900 2026-08-13
Unclassified HIGH 7.5
CVE-2026-66462

Unauthenticated Sensitive Data Exposure in WooCommerce Appointments <= 5.3.8 versions.

No fix yet
Fix from $4,900 2026-08-13
Unclassified HIGH 7.5
CVE-2026-66461

Unauthenticated Broken Access Control in SMEPay: UPI Gateway for WooCommerce <= 1.0.5 versions.

No fix yet
Fix from $4,900 2026-08-13
Unclassified MEDIUM 6.5
CVE-2026-66460

Subscriber Cross Site Scripting (XSS) in AfterShip Tracking <= 1.18.1 versions.

No fix yet
Fix from $4,000 2026-08-13
Unclassified MEDIUM 6.5
CVE-2026-66459

Unauthenticated Broken Access Control in AI for SEO <= 2.4.2 versions.

No fix yet
Fix from $4,000 2026-08-13
Unclassified CRITICAL 9.3
CVE-2026-66458

Unauthenticated SQL Injection in RealPress <= 1.1.2 versions.

No fix yet
Fix from $5,750 2026-08-13
Unclassified MEDIUM 6.5
CVE-2026-66456

Subscriber Cross Site Scripting (XSS) in Profile Extra Fields by BestWebSoft <= 1.3.4 versions.

No fix yet
Fix from $4,000 2026-08-13
Unclassified MEDIUM 6.0
CVE-2026-66455

Subscriber Broken Access Control in ReactPress <= 3.4.0 versions.

No fix yet
Fix from $4,000 2026-08-13
Unclassified MEDIUM 6.5
CVE-2026-66454

Unauthenticated Broken Access Control in WP Social Avatar <= 1.5 versions.

No fix yet
Fix from $4,000 2026-08-13
Unclassified CRITICAL 9.8
CVE-2026-66453

Unauthenticated Broken Authentication in Salon booking system <= 10.30.26 versions.

No fix yet
Fix from $5,750 2026-08-13