Top technology
Linux 13140
Google 12536
Microsoft 12379
Oracle 6843
Apple 6692
Adobe 6387
Ibm 6336
Cisco 5759
Debian 3919
Mozilla 2895
Apache 2864
Redhat 2592
Linux 13140
Google 12536
Microsoft 12379
Oracle 6843
Apple 6692
Adobe 6387
Ibm 6336
Cisco 5759
Debian 3919
Mozilla 2895
Apache 2864
Redhat 2592
HIGH 8.1
CVE-2026-28186
Subscriber Broken Access Control in Travelfic Toolkit <= 1.5.1 versions.
No fix yet
CRITICAL 9.8
CVE-2026-28185
Unauthenticated Broken Authentication in Log in with Google <= 1.4.2 versions.
No fix yet
HIGH 8.5
CVE-2026-28184
Subscriber SQL Injection in Form Maker by 10Web <= 1.15.44 versions.
No fix yet
MEDIUM 6.5
CVE-2026-28182
Subscriber Cross Site Scripting (XSS) in AcyMailing SMTP Newsletter <= 10.11.1 versions.
No fix yet
MEDIUM 6.5
CVE-2026-28181
Subscriber Broken Access Control in AcyMailing SMTP Newsletter <= 10.11.1 versions.
No fix yet
HIGH 8.8
CVE-2026-28176
Unauthenticated PHP Object Injection in Booking Activities <= 1.18.4 versions.
No fix yet
HIGH 7.1
CVE-2026-28175
Unauthenticated Cross Site Scripting (XSS) in Visitors Traffic Real Time Statistics <= 8.11 versions.
No fix yet
MEDIUM 6.5
CVE-2026-28174
Customer Sensitive Data Exposure in WP Event SOlution <= 4.1.18 versions.
No fix yet
HIGH 7.1
CVE-2026-28173
Customer Arbitrary Content Deletion in WP Event SOlution <= 4.1.19 versions.
No fix yet
HIGH 7.1
CVE-2026-28170
Unauthenticated Cross Site Scripting (XSS) in Blog Floating Button <= 1.4.20 versions.
No fix yet
HIGH 8.5
CVE-2026-28168
Subscriber SQL Injection in CubeWP <= 1.1.30 versions.
No fix yet
HIGH 8.8
CVE-2026-28161
Subscriber Privilege Escalation in Service Finder Booking <= 6.2 versions.
No fix yet
MEDIUM 6.5
CVE-2026-28159
Subscriber Broken Access Control in Service Finder Booking <= 6.2 versions.
No fix yet
HIGH 7.1
CVE-2026-28158
Unauthenticated Cross Site Scripting (XSS) in Do Lasso <= 358 versions.
No fix yet
HIGH 7.5
CVE-2026-28157
Subscriber Path Traversal in Do Lasso <= 358 versions.
No fix yet
HIGH 8.5
CVE-2026-28156
Subscriber SQL Injection in Do Lasso <= 358 versions.
No fix yet
MEDIUM 6.5
CVE-2026-28155
Unauthenticated Insecure Direct Object References (IDOR) in Do Lasso <= 358 versions.
No fix yet
CRITICAL 9.8
CVE-2026-28149
Unauthenticated PHP Object Injection in Headless Single Sign On <= 1.6 versions.
No fix yet
CRITICAL 9.8
CVE-2026-28148
Unauthenticated Bypass Vulnerability in Headless Single Sign On <= 1.6 versions.
No fix yet
CRITICAL 9.3
CVE-2026-28142
Unauthenticated SQL Injection in Web Directory Free <= 1.7.13 versions.
No fix yet
CRITICAL 9.8
CVE-2026-28008
Unauthenticated Broken Authentication in OAuth Single Sign On – SSO (OAuth Client) <= 7.0.0 versions.
No fix yet
HIGH 7.1
CVE-2026-28004
Unauthenticated Cross Site Scripting (XSS) in Business Directory <= 6.4.25 versions.
No fix yet
HIGH 7.1
CVE-2026-28003
Unauthenticated Cross Site Scripting (XSS) in Maspik – Spam blacklist <= 2.9.1 versions.
No fix yet
HIGH 8.5
CVE-2026-28002
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Arraytics Booktics allows Blind SQL Injection.
…
No fix yet
CRITICAL 9.3
CVE-2026-28001
Unauthenticated SQL Injection in WP Directory Kit <= 1.5.4 versions.
No fix yet
MEDIUM 6.5
CVE-2026-27999
Subscriber Broken Access Control in Tourfic <= 2.23.1 versions.
No fix yet
CRITICAL 10.0
CVE-2026-27544
Unauthenticated Remote Code Execution (RCE) in QA Analytics <= 5.2.0.0 versions.
No fix yet
HIGH 8.1
CVE-2026-27543
Unauthenticated Privilege Escalation in MStore API <= 4.20.0 versions.
No fix yet
HIGH 7.1
CVE-2026-27539
Unauthenticated Cross Site Scripting (XSS) in Welcart e-Commerce <= 2.11.31 versions.
No fix yet
HIGH 7.5
CVE-2026-27538
Unauthenticated SQL Injection in WP Directory Kit <= 1.5.4 versions.
No fix yet