Top technology
Linux 13140
Google 12536
Microsoft 12379
Oracle 6843
Apple 6692
Adobe 6387
Ibm 6336
Cisco 5759
Debian 3919
Mozilla 2895
Apache 2864
Redhat 2592
Linux 13140
Google 12536
Microsoft 12379
Oracle 6843
Apple 6692
Adobe 6387
Ibm 6336
Cisco 5759
Debian 3919
Mozilla 2895
Apache 2864
Redhat 2592
HIGH 8.1
CVE-2026-66450
Unauthenticated Local File Inclusion in Geo Mashup <= 1.13.18 versions.
No fix yet
HIGH 7.1
CVE-2026-66449
Unauthenticated Cross Site Scripting (XSS) in Geo Mashup <= 1.13.18 versions.
No fix yet
CRITICAL 9.3
CVE-2026-66446
Subscriber SQL Injection in If-So Dynamic Content Personalization <= 1.10 versions.
No fix yet
MEDIUM 6.5
CVE-2026-66444
Subscriber Sensitive Data Exposure in Payment Forms for Paystack <= 4.0.5 versions.
No fix yet
HIGH 7.5
CVE-2026-66443
Unauthenticated Sensitive Data Exposure in REST API Log <= 1.7.1 versions.
No fix yet
HIGH 7.5
CVE-2026-66441
Unauthenticated Broken Access Control in MultiVendorX <= 5.0.10 versions.
No fix yet
CRITICAL 9.3
CVE-2026-66436
Unauthenticated SQL Injection in Active Products Tables for WooCommerce <= 1.1.1 versions.
No fix yet
HIGH 7.5
CVE-2026-66432
Subscriber Sensitive Data Exposure in WPJAM Basic <= 7.0.2.1 versions.
No fix yet
HIGH 7.5
CVE-2026-66431
Unauthenticated Broken Access Control in Bitcoin Lightning Payment Gateway for WooCommerce (via CLINK) <= 1.0.7 versions.
No fix yet
HIGH 8.5
CVE-2026-66430
Subscriber SQL Injection in Visitor Traffic Real Time Statistics Pro <= 11.10 versions.
No fix yet
HIGH 7.1
CVE-2026-66429
Unauthenticated Cross Site Scripting (XSS) in Visitor Traffic Real Time Statistics Pro <= 11.10 versions.
No fix yet
HIGH 7.1
CVE-2026-66426
Unauthenticated Cross Site Scripting (XSS) in WP-Stats <= 2.56 versions.
No fix yet
CRITICAL 9.8
CVE-2026-66424
Unauthenticated Privilege Escalation in SMS Alert Order Notifications <= 3.9.7 versions.
No fix yet
HIGH 7.7
CVE-2026-65582
Subscriber Arbitrary File Download in AI Hub <= 1.3.10 versions.
No fix yet
HIGH 7.1
CVE-2026-65580
Unauthenticated Cross Site Scripting (XSS) in Agrion <= 1.0.0 versions.
No fix yet
HIGH 7.5
CVE-2026-61984
Unauthenticated Broken Access Control in WPMobile.App <= 11.77 versions.
No fix yet
HIGH 7.5
CVE-2026-61980
Unauthenticated Arbitrary File Download in OMGF Pro <= 5.2.7 versions.
No fix yet
HIGH 8.1
CVE-2026-61979
Unauthenticated Privilege Escalation in SAML SP Single Sign On <= 5.4.3 versions.
No fix yet
MEDIUM 6.5
CVE-2026-61978
Unauthenticated Broken Access Control in Secure Card Gateway for ePay Paycenter (Piraeus Bank) <= 1.0.32 versions.
No fix yet
HIGH 7.1
CVE-2026-61974
Unauthenticated Cross Site Scripting (XSS) in Mang Board WP <= 2.3.4 versions.
No fix yet
CRITICAL 9.3
CVE-2026-61969
Unauthenticated SQL Injection in Listdom <= 5.6.0 versions.
No fix yet
CRITICAL 9.8
CVE-2026-61967
Unauthenticated Privilege Escalation in miniorange otp verification <= 5.5.1 versions.
No fix yet
CRITICAL 9.3
CVE-2026-61966
Subscriber SQL Injection in WPJAM Basic <= 7.0.1 versions.
No fix yet
HIGH 7.1
CVE-2026-61965
Unauthenticated Cross Site Scripting (XSS) in GeekyBot <= 1.2.6 versions.
No fix yet
CRITICAL 10.0
CVE-2026-61962
Unauthenticated Arbitrary Code Execution in WP BASE Booking <= 6.3.0 versions.
No fix yet
HIGH 7.1
CVE-2026-61960
Unauthenticated Cross Site Scripting (XSS) in WP Full Stripe Free <= 8.5.0 versions.
No fix yet
HIGH 7.5
CVE-2026-48702
Rekor is a software supply chain transparency log. Starting in version 0.3.0 and prior to version 1.5.2, the `Package.Unmarshal()` function in `pkg/t…
No fix yet
HIGH 7.4
CVE-2026-28189
Unauthenticated Arbitrary File Deletion in Participants Database <= 2.7.8.4 versions.
No fix yet
HIGH 7.3
CVE-2026-28188
Unauthenticated Broken Access Control in Hydra Booking <= 1.2.2 versions.
No fix yet
HIGH 7.1
CVE-2026-28187
Unauthenticated Cross Site Scripting (XSS) in Knowledge Base for Documentation, FAQs with AI Assistance <= 17.211.0 versions.
No fix yet