Top technology
Linux 13140
Google 12536
Microsoft 12379
Oracle 6843
Apple 6692
Adobe 6387
Ibm 6336
Cisco 5759
Debian 3919
Mozilla 2895
Apache 2864
Redhat 2592
Linux 13140
Google 12536
Microsoft 12379
Oracle 6843
Apple 6692
Adobe 6387
Ibm 6336
Cisco 5759
Debian 3919
Mozilla 2895
Apache 2864
Redhat 2592
MEDIUM 5.3
CVE-2026-66701
Unauthenticated Broken Access Control in Profile Builder <= 3.16.5 versions.
No fix yet
MEDIUM 5.3
CVE-2026-66699
Custom role Broken Access Control in Dokan <= 5.0.10 versions.
No fix yet
MEDIUM 6.5
CVE-2026-66695
Unauthenticated Path Traversal in W3 Total Cache <= 2.10.2 versions.
No fix yet
HIGH 7.1
CVE-2026-66694
Unauthenticated Cross Site Scripting (XSS) in Thrive Architect <= 10.9.3.1 versions.
No fix yet
HIGH 7.1
CVE-2026-66690
Unauthenticated Cross Site Scripting (XSS) in GiveWP <= 4.16.5 versions.
No fix yet
MEDIUM 6.5
CVE-2026-66688
Contributor Cross Site Scripting (XSS) in Ultimate Addons for Elementor <= 1.45.2 versions.
No fix yet
MEDIUM 6.5
CVE-2026-66686
Unauthenticated Cross Site Request Forgery (CSRF) in Plugins Garbage Collector (Database Cleanup) <= 0.14 versions.
No fix yet
MEDIUM 5.3
CVE-2026-66685
Unauthenticated Sensitive Data Exposure in Featured Video Plus <= 2.3.3 versions.
No fix yet
MEDIUM 5.3
CVE-2026-66684
Unauthenticated Sensitive Data Exposure in Export Import Menus <= 1.9.2 versions.
No fix yet
MEDIUM 5.3
CVE-2026-66683
Unauthenticated Sensitive Data Exposure in Custom CSS and JavaScript <= 2.0.16 versions.
No fix yet
CRITICAL 10.0
CVE-2026-66665
Unauthenticated Arbitrary File Upload in Type Hub <= 2.0.6 versions.
No fix yet
HIGH 7.1
CVE-2026-66664
Unauthenticated Cross Site Scripting (XSS) in SEO Plugin by Squirrly SEO <= 14.2.0 versions.
No fix yet
HIGH 7.1
CVE-2026-66663
Unauthenticated Cross Site Scripting (XSS) in WP Data Access <= 5.5.79 versions.
No fix yet
CRITICAL 9.8
CVE-2026-66662
Unauthenticated Privilege Escalation in Frontend Admin by DynamiApps <= 3.29.10 versions.
No fix yet
HIGH 7.1
CVE-2026-66470
Subscriber Broken Access Control in Frontend Admin by DynamiApps <= 3.29.10 versions.
No fix yet
HIGH 7.1
CVE-2026-66457
Unauthenticated Cross Site Scripting (XSS) in Events Manager <= 7.4.1 versions.
No fix yet
MEDIUM 6.5
CVE-2026-66452
Unauthenticated Broken Access Control in Legal Text Connector of the IT-Recht Kanzlei <= 1.0.13 versions.
No fix yet
MEDIUM 6.5
CVE-2026-66451
Unauthenticated Broken Authentication in WP Event SOlution <= 4.1.9 versions.
No fix yet
CRITICAL 9.3
CVE-2026-66447
Unauthenticated SQL Injection in WordPress File Upload <= 5.1.7 versions.
No fix yet
HIGH 7.1
CVE-2026-66440
Unauthenticated Cross Site Scripting (XSS) in WPIDE – File Manager & Code Editor <= 3.5.7 versions.
No fix yet
HIGH 7.1
CVE-2026-66439
Unauthenticated Cross Site Scripting (XSS) in Advanced AJAX Product Filters <= 3.2.0.3 versions.
No fix yet
MEDIUM 6.5
CVE-2026-66425
Unauthenticated Broken Authentication in Gutena Forms – Contact Form, Survey Form, Feedback Form, Booking Form, and Custom Form Builder <= 1.9.0 vers…
No fix yet
CRITICAL 9.8
CVE-2026-65581
Unauthenticated PHP Object Injection in AI ANN <= 1.29.0 versions.
No fix yet
CRITICAL 9.8
CVE-2026-65579
Unauthenticated PHP Object Injection in Agricola <= 1.21.0 versions.
No fix yet
CRITICAL 9.8
CVE-2026-65578
Unauthenticated PHP Object Injection in Agora <= 1.9 versions.
No fix yet
CRITICAL 9.8
CVE-2026-65577
Unauthenticated PHP Object Injection in Advice <= 1.18.0 versions.
No fix yet
CRITICAL 9.8
CVE-2026-65576
Unauthenticated PHP Object Injection in Adrena <= 1.2.14 versions.
No fix yet
CRITICAL 9.8
CVE-2026-65575
Unauthenticated PHP Object Injection in Accalia <= 1.5.3 versions.
No fix yet
CRITICAL 9.8
CVE-2026-65574
Unauthenticated PHP Object Injection in Abogado <= 1.18 versions.
No fix yet
CRITICAL 9.8
CVE-2026-65573
Unauthenticated PHP Object Injection in Abelle <= 1.22 versions.
No fix yet