Top technology
Linux 13140
Google 12536
Microsoft 12379
Oracle 6843
Apple 6692
Adobe 6387
Ibm 6336
Cisco 5759
Debian 3919
Mozilla 2895
Apache 2864
Redhat 2592
Linux 13140
Google 12536
Microsoft 12379
Oracle 6843
Apple 6692
Adobe 6387
Ibm 6336
Cisco 5759
Debian 3919
Mozilla 2895
Apache 2864
Redhat 2592
CRITICAL 9.8
CVE-2026-66691
Unauthenticated Broken Access Control in Nokri <= 1.6.6 versions.
No fix yet
MEDIUM 6.3
CVE-2026-66689
Unauthenticated Broken Access Control in Anti Spam and list cleaner – AcyChecker <= 2.0.0 versions.
No fix yet
MEDIUM 6.5
CVE-2026-66687
Customer Cross Site Scripting (XSS) in WpBookingly <= 1.3.2 versions.
No fix yet
HIGH 7.7
CVE-2026-66661
Subscriber Privilege Escalation in Directories Pro <= 2.0.5 versions.
No fix yet
MEDIUM 6.5
CVE-2026-66660
Unauthenticated Broken Access Control in Contact Form 7 – PayPal & Stripe Add-on <= 2.5.1 versions.
No fix yet
HIGH 8.5
CVE-2026-66658
Subscriber SQL Injection in Reviewer <= 3.14.2 versions.
No fix yet
HIGH 8.1
CVE-2026-66657
Unauthenticated Local File Inclusion in Biagiotti Core <= 2.1.1 versions.
No fix yet
HIGH 8.1
CVE-2026-66656
Unauthenticated Local File Inclusion in Foton Core <= 1.1.1 versions.
No fix yet
HIGH 7.1
CVE-2026-66655
Unauthenticated Cross Site Scripting (XSS) in MultiParcels Shipping For WooCommerce <= 1.30.36 versions.
No fix yet
MEDIUM 6.0
CVE-2026-66654
Subscriber Server Side Request Forgery (SSRF) in Vehica Core <= 1.0.104 versions.
No fix yet
HIGH 8.1
CVE-2026-66653
Unauthenticated Local File Inclusion in Barista <= 2.5.1 versions.
No fix yet
CRITICAL 9.3
CVE-2026-66478
Unauthenticated SQL Injection in Church Admin <= 5.1.1 versions.
No fix yet
CRITICAL 9.3
CVE-2026-66472
Unauthenticated SQL Injection in Everest Backup <= 2.3.12 versions.
No fix yet
MEDIUM 6.5
CVE-2026-66471
Subscriber Cross Site Scripting (XSS) in Accordion <= 3.0.6 versions.
No fix yet
HIGH 7.5
CVE-2026-66469
Unauthenticated Broken Access Control in Arvow AI SEO Writer <= 1.5.3 versions.
No fix yet
HIGH 7.1
CVE-2026-66468
Unauthenticated Cross Site Scripting (XSS) in Local Delivery Drivers for WooCommerce <= 3.0.0 versions.
No fix yet
MEDIUM 6.5
CVE-2026-66467
Subscriber Cross Site Scripting (XSS) in FluentCommunity <= 2.7.5 versions.
No fix yet
HIGH 7.5
CVE-2026-66466
Unauthenticated Broken Access Control in StoreGrowth: Smart Sales Booster for WooCommerce | BOGO, Upsells, Direct Checkout, Quick View, Side Cart <= …
No fix yet
CRITICAL 9.8
CVE-2026-66465
Unauthenticated Broken Authentication in Cartify <= 1.3.0.1 versions.
No fix yet
MEDIUM 6.5
CVE-2026-66464
Unauthenticated Broken Access Control in Internal Link Optimiser <= 5.2.7 versions.
No fix yet
HIGH 7.5
CVE-2026-66463
Unauthenticated Sensitive Data Exposure in iCARRY <= 2.9 versions.
No fix yet
HIGH 7.5
CVE-2026-66462
Unauthenticated Sensitive Data Exposure in WooCommerce Appointments <= 5.3.8 versions.
No fix yet
HIGH 7.5
CVE-2026-66461
Unauthenticated Broken Access Control in SMEPay: UPI Gateway for WooCommerce <= 1.0.5 versions.
No fix yet
MEDIUM 6.5
CVE-2026-66460
Subscriber Cross Site Scripting (XSS) in AfterShip Tracking <= 1.18.1 versions.
No fix yet
MEDIUM 6.5
CVE-2026-66459
Unauthenticated Broken Access Control in AI for SEO <= 2.4.2 versions.
No fix yet
CRITICAL 9.3
CVE-2026-66458
Unauthenticated SQL Injection in RealPress <= 1.1.2 versions.
No fix yet
MEDIUM 6.5
CVE-2026-66456
Subscriber Cross Site Scripting (XSS) in Profile Extra Fields by BestWebSoft <= 1.3.4 versions.
No fix yet
MEDIUM 6.0
CVE-2026-66455
Subscriber Broken Access Control in ReactPress <= 3.4.0 versions.
No fix yet
MEDIUM 6.5
CVE-2026-66454
Unauthenticated Broken Access Control in WP Social Avatar <= 1.5 versions.
No fix yet
CRITICAL 9.8
CVE-2026-66453
Unauthenticated Broken Authentication in Salon booking system <= 10.30.26 versions.
No fix yet