Browse CVEs

MEDIUM 5.3 CVE-2026-15932 The Support Genix WordPress plugin before 1.4.48 does not prevent directory traversal in its ticket-attachment download route, allowing unauthentica… No fix yet Fix from $1,6002026-08-01 HIGH 8.1 CVE-2026-15368 The User Profile Builder WordPress plugin before 3.16.4 does not correctly bind the automatic login performed after user registration to the newly c… No fix yet Fix from $1,9502026-08-01 HIGH 7.2 CVE-2026-15244 The HUSKY WordPress plugin before 1.4.1 does not sanitize a stored setting value against directory traversal before concatenating it into a file inc… No fix yet Fix from $1,9502026-08-01 MEDIUM 5.3 CVE-2026-14840 The YOP Poll WordPress plugin before 7.0.6 does not validate the connection's origin IP address and instead trusts client-controlled forwarding heade… No fix yet Fix from $1,6002026-08-01 MEDIUM 5.4 CVE-2026-15262 The Admin Columns for ACF Fields WordPress plugin through 0.3.2 does not escape Advanced Custom Fields values before outputting them in the WordPress… No fix yet Fix from $1,6002026-08-01 MEDIUM 5.4 CVE-2026-15234 The Codeless Page Builder WordPress plugin through 1.1.4 does not sanitize or validate a shortcode attribute before using it as an HTML tag name when… No fix yet Fix from $1,6002026-08-01 HIGH 8.1 CVE-2026-14836 The Login & Register Forms WordPress plugin before 3.2.5 does not properly enforce the rate limit on its password-reset verification-code flow, keyi… No fix yet Fix from $1,9502026-08-01 MEDIUM 5.3 CVE-2026-14822 The Event Tickets and Registration WordPress plugin before 5.29.0.1 does not perform any authorization check on one of its order-management REST endp… No fix yet Fix from $1,6002026-08-01 HIGH 8.8 CVE-2026-14596 The DynamicKit for Elementor WordPress plugin before 1.0.3 does not validate the host of a user-supplied URL used as the base of the password-reset l… No fix yet Fix from $1,9502026-08-01 HIGH 8.1 CVE-2026-14309 The Chat On Desk Order Notifications WordPress plugin before 1.0.9 does not verify that the one-time password has been validated before processing a… No fix yet Fix from $1,9502026-08-01 HIGH 7.5 CVE-2026-14839 The Mapster WP Maps WordPress plugin before 1.24.0 does not perform any authorization or post-status check on a public REST endpoint, allowing unauth… No fix yet Fix from $1,9502026-08-01 MEDIUM 6.5 CVE-2026-14561 The Authora : Easy login with mobile number WordPress plugin before 1.7.7 does not keep its one-time login code confidential, returning the code and … No fix yet Fix from $1,6002026-08-01 MEDIUM 6.5 CVE-2026-14315 The Pixel Tag Manager for WooCommerce WordPress plugin before 2.2.1 does not perform an authorization check on one of its AJAX actions, allowing una… No fix yet Fix from $1,6002026-08-01 MEDIUM 5.4 CVE-2026-14292 The Download Manager WordPress plugin before 3.3.66 does not properly escape a package's title before outputting it in the front-end package template… No fix yet Fix from $1,6002026-08-01 HIGH 7.1 CVE-2026-13725 The Dynamic Pricing With Discount Rules for WooCommerce WordPress plugin before 5.0.0 does not validate a nonce or user capabilities on one of its AJ… No fix yet Fix from $1,9502026-08-01 MEDIUM 5.3 CVE-2026-13604 The Pixelavo WordPress plugin before 1.5.4 registers an unauthenticated AJAX action, gated only by a nonce that it emits publicly on every front-end… No fix yet Fix from $1,6002026-08-01 HIGH 7.2 CVE-2026-13158 The Everest Toolkit WordPress plugin through 1.2.3 does not validate the type of files uploaded during demo-content import (the WordPress file-type t… No fix yet Fix from $1,9502026-08-01 HIGH 7.2 CVE-2026-13157 The Demo Import WordPress plugin through 1.1.3 does not validate the type of files uploaded during demo-content import (the WordPress file-type test… No fix yet Fix from $1,9502026-08-01 CRITICAL 9.1 CVE-2026-13596 The Participants Database WordPress plugin before 2.7.8.4 does not properly sanitize and escape a user-supplied parameter before using it in a SQL qu… Mitigation only Fix from $2,3002026-08-01 MEDIUM 6.5 CVE-2026-13329 The Buckaroo Woocommerce Payments Plugin WordPress plugin before 4.9.0 does not perform any capability check or nonce validation on an AJAX action th… No fix yet Fix from $1,6002026-08-01 MEDIUM 5.3 CVE-2026-12966 The Direct Payments for WooCommerce WordPress plugin before 2.5.3 does not verify that the requester owns the targeted WooCommerce order in several … No fix yet Fix from $1,6002026-08-01 MEDIUM 5.4 CVE-2026-12696 The wpForo Forum WordPress plugin before 3.1.2 does not sanitize and escape a user profile field before outputting it inside an HTML attribute on the… No fix yet Fix from $1,6002026-08-01 CRITICAL 9.1 CVE-2026-3141 The FormGent plugin for WordPress is vulnerable to unauthorized arbitrary file deletion due to a missing capability check on the /wp-json/formgent/re… No fix yet Fix from $2,3002026-08-01 MEDIUM 6.4 CVE-2026-7623 The SureForms – Contact Form, Payment Form & Other Custom Form Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'hea… No fix yet Fix from $1,6002026-08-01 HIGH 8.8 CVE-2026-15414 The Subscriptions for WooCommerce plugin for WordPress is vulnerable to Privilege Escalation in versions up to, and including, 2.0.0. This is due to … No fix yet Fix from $1,9502026-08-01 HIGH 7.5 CVE-2026-15006 The Bit integrations – Form Integration, Webhook, Spreadsheets, CRM, LMS & Email Automation plugin for WordPress is vulnerable to Directory Traversal… No fix yet Fix from $1,9502026-08-01 MEDIUM 6.4 CVE-2026-13362 The SendPulse Email Marketing Newsletter plugin for WordPress is vulnerable to Stored Cross-Site Scripting via _sp_form_code Post Meta in all version… No fix yet Fix from $1,6002026-08-01 HIGH 8.0 CVE-2026-9044 An OS command injection vulnerability exists in the VPN module of TP-Link AXE75 V1 routers. This vulnerability allows an adjacent, authenticated atta… Archer Axe75 Firmware 1.5.6+ Fix from $1,9502026-07-31 MEDIUM 5.3 CVE-2026-54909 pion/stun is a Go implementation of STUN. Prior to 3.1.3, XORMappedAddress.GetFromAs can panic while parsing a malformed short XOR-MAPPED-ADDRESS att… Patch available Fix from $1,6002026-07-31 MEDIUM 6.2 CVE-2026-54785 gemini-bridge is a lightweight MCP server bridging AI agents to Google's Gemini AI via the official CLI. From 1.0.0 until 1.3.1, consult_gemini_with_… Patch available Fix from $1,6002026-07-31