Top technology
Linux 13140
Google 12536
Microsoft 12379
Oracle 6843
Apple 6692
Adobe 6387
Ibm 6336
Cisco 5759
Debian 3919
Mozilla 2895
Apache 2864
Redhat 2592
Linux 13140
Google 12536
Microsoft 12379
Oracle 6843
Apple 6692
Adobe 6387
Ibm 6336
Cisco 5759
Debian 3919
Mozilla 2895
Apache 2864
Redhat 2592
CRITICAL 9.8
CVE-2026-65572
Unauthenticated PHP Object Injection in A.Williams <= 1.3.1 versions.
No fix yet
CRITICAL 9.8
CVE-2026-65571
Unauthenticated PHP Object Injection in 69 Clothing <= 1.2.11.1 versions.
No fix yet
HIGH 8.1
CVE-2026-65570
Unauthenticated Bypass Vulnerability in Login with phone number <= 1.8.70 versions.
No fix yet
HIGH 8.5
CVE-2026-65569
Subscriber SQL Injection in WP Job Portal <= 2.5.6 versions.
No fix yet
HIGH 7.1
CVE-2026-65565
Unauthenticated Cross Site Scripting (XSS) in Survey Maker <= 5.2.3.3 versions.
No fix yet
HIGH 7.1
CVE-2026-65560
Unauthenticated Cross Site Scripting (XSS) in Houzez Property Feed <= 2.5.48 versions.
No fix yet
HIGH 7.2
CVE-2026-65559
Shop manager Privilege Escalation in Order Delivery Date for WooCommerce <= 4.6.0 versions.
No fix yet
CRITICAL 9.8
CVE-2026-65556
Unauthenticated PHP Object Injection in WPBruiser {no- Captcha anti-Spam} <= 3.1.43 versions.
No fix yet
HIGH 7.1
CVE-2026-65554
Subscriber Broken Access Control in AnsPress – Question and answer 4.4.4 versions.
No fix yet
CRITICAL 10.0
CVE-2026-65553
Unauthenticated Remote Code Execution (RCE) in Spider Analyser – WordPress搜索引擎蜘蛛分析插件 <= 2.1.3 versions.
No fix yet
CRITICAL 9.8
CVE-2026-65552
Subscriber PHP Object Injection in Export User Data <= 2.2.6 versions.
No fix yet
HIGH 7.2
CVE-2026-65549
Author PHP Object Injection in Jeg Kit for Elementor <= 3.2.10 versions.
No fix yet
CRITICAL 9.9
CVE-2026-65548
Contributor Remote Code Execution (RCE) in Betheme <= 28.4.2 versions.
No fix yet
HIGH 8.5
CVE-2026-65547
Subscriber SQL Injection in Creative Mail <= 1.6.9 versions.
No fix yet
CRITICAL 9.3
CVE-2026-65546
Unauthenticated SQL Injection in Qode Tours <= 3.1.3.1 versions.
No fix yet
HIGH 7.1
CVE-2026-65545
Unauthenticated Cross Site Scripting (XSS) in AI Engine <= 3.6.8 versions.
No fix yet
HIGH 7.1
CVE-2026-65544
Unauthenticated Cross Site Scripting (XSS) in Super Socializer <= 7.14.5 versions.
No fix yet
HIGH 7.5
CVE-2026-65543
Subscriber Sensitive Data Exposure in Vimeo <= 1.2.2 versions.
No fix yet
HIGH 8.8
CVE-2026-65542
Unauthenticated Broken Authentication in Super Socializer <= 7.14.5 versions.
No fix yet
HIGH 7.3
CVE-2026-65541
Unauthenticated Broken Access Control in Staff Training <= 1.0.7 versions.
No fix yet
HIGH 7.5
CVE-2026-65523
Unauthenticated Insecure Direct Object References (IDOR) in Formidable Forms Signature Online Contract Automation <= 2.0.1 versions.
No fix yet
CRITICAL 9.3
CVE-2026-65520
Unauthenticated SQL Injection in WP OAuth Server <= 6.2.0 versions.
No fix yet
HIGH 7.1
CVE-2026-65517
Unauthenticated Cross Site Scripting (XSS) in Easy PayPal Buy Now Button <= 2.0.4 versions.
No fix yet
HIGH 7.1
CVE-2026-65515
Unauthenticated Cross Site Scripting (XSS) in AffiliateWP <= 2.35.0 versions.
No fix yet
HIGH 7.1
CVE-2026-65513
Unauthenticated Cross Site Scripting (XSS) in Simply Schedule Appointments <= 1.6.12.10 versions.
No fix yet
HIGH 7.1
CVE-2026-65509
Unauthenticated Cross Site Scripting (XSS) in wpDataTables <= 7.5.1 versions.
No fix yet
CRITICAL 9.3
CVE-2026-65508
Unauthenticated SQL Injection in Simply Schedule Appointments <= 1.6.12.10 versions.
No fix yet
CRITICAL 9.8
CVE-2026-65507
Unauthenticated Privilege Escalation in AIWU <= 1.5.6 versions.
No fix yet
HIGH 7.5
CVE-2026-65504
Unauthenticated Broken Access Control in BOX NOW Delivery Croatia <= 3.3.0 versions.
No fix yet
MEDIUM 5.3
CVE-2026-65502
Unauthenticated Bypass Vulnerability in Element Pack Elementor Addons <= 8.7.13 versions.
No fix yet