Top technology
Linux 13140
Google 12536
Microsoft 12379
Oracle 6843
Apple 6692
Adobe 6387
Ibm 6336
Cisco 5759
Debian 3919
Mozilla 2895
Apache 2864
Redhat 2592
Linux 13140
Google 12536
Microsoft 12379
Oracle 6843
Apple 6692
Adobe 6387
Ibm 6336
Cisco 5759
Debian 3919
Mozilla 2895
Apache 2864
Redhat 2592
MEDIUM 5.3
CVE-2026-65501
Unauthenticated Insecure Direct Object References (IDOR) in Shiptastic for WooCommerce <= 5.1.0 versions.
No fix yet
HIGH 7.5
CVE-2026-65500
Unauthenticated Broken Access Control in Manual - Documentation, Knowledge Base & Education WordPress Theme <= 7.5.4 versions.
No fix yet
MEDIUM 6.5
CVE-2026-65499
Unauthenticated Broken Access Control in PeproDev Ultimate Invoice <= 2.2.6 versions.
No fix yet
MEDIUM 5.3
CVE-2026-65498
Unauthenticated Sensitive Data Exposure in Complianz <= 7.5.0 versions.
No fix yet
HIGH 7.2
CVE-2026-65497
Administrator PHP Object Injection in Complianz <= 7.5.0 versions.
No fix yet
HIGH 7.5
CVE-2026-65495
Unauthenticated Broken Access Control in Dokan Pro <= 5.0.3 versions.
No fix yet
HIGH 7.1
CVE-2026-65494
Subscriber SQL Injection in Dokan Pro <= 5.0.2 versions.
No fix yet
HIGH 7.5
CVE-2026-65493
Subscriber PHP Object Injection in Dokan Pro <= 5.0.2 versions.
No fix yet
HIGH 7.1
CVE-2026-65492
Unauthenticated Cross Site Scripting (XSS) in Dokan Pro <= 5.0.0 versions.
No fix yet
MEDIUM 5.3
CVE-2026-65490
Unauthenticated Sensitive Data Exposure in Create by Mediavine <= 2.5.3 versions.
No fix yet
MEDIUM 5.3
CVE-2026-65489
Unauthenticated Broken Access Control in LA-Studio Element Kit for Elementor <= 1.6.2 versions.
No fix yet
HIGH 7.1
CVE-2026-65488
Unauthenticated Cross Site Request Forgery (CSRF) in LA-Studio Element Kit for Elementor <= 1.6.2 versions.
No fix yet
MEDIUM 5.3
CVE-2026-65487
Unauthenticated Broken Access Control in Photography <= 7.7.6 versions.
No fix yet
MEDIUM 5.3
CVE-2026-65486
Unauthenticated Broken Access Control in Event post <= 6.0.1 versions.
No fix yet
MEDIUM 5.3
CVE-2026-65485
Unauthenticated Broken Access Control in Content Control <= 2.6.5 versions.
No fix yet
MEDIUM 6.3
CVE-2026-65484
Contributor Broken Access Control in Style Kits <= 2.6.5 versions.
No fix yet
MEDIUM 5.9
CVE-2026-65483
Author Cross Site Scripting (XSS) in HashThemes Demo Importer <= 1.4.2 versions.
No fix yet
MEDIUM 6.5
CVE-2026-65482
Contributor Cross Site Scripting (XSS) in LA-Studio Element Kit for Elementor <= 1.6.2 versions.
No fix yet
HIGH 7.5
CVE-2026-65481
Contributor Local File Inclusion in Vino <= 1.9 versions.
No fix yet
MEDIUM 6.5
CVE-2026-65480
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in CodexThemes TheGem allows DOM-Based XSS.
This …
No fix yet
MEDIUM 5.4
CVE-2026-65479
Subscriber Broken Access Control in Reviewer <= 3.14.2 versions.
No fix yet
MEDIUM 5.4
CVE-2026-65478
Subscriber Broken Access Control in ListingPro <= 2.9.10 versions.
No fix yet
HIGH 7.5
CVE-2026-65477
Contributor Local File Inclusion in Tonda Core <= 2.1.2 versions.
No fix yet
MEDIUM 5.3
CVE-2026-65476
Unauthenticated Broken Access Control in Civi <= 2.2.4 versions.
No fix yet
MEDIUM 6.5
CVE-2026-65475
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WP Chill Modula Image Gallery allows Stored XSS…
No fix yet
MEDIUM 5.3
CVE-2026-65474
Unauthenticated Sensitive Data Exposure in Ninja Tables <= 5.2.10 versions.
No fix yet
MEDIUM 6.5
CVE-2026-65473
Contributor Cross Site Scripting (XSS) in Virtue/Ascend/Pinnacle Toolkit <= 4.9.12 versions.
No fix yet
MEDIUM 5.3
CVE-2026-65472
Unauthenticated Broken Access Control in Kit (formerly ConvertKit) <= 3.3.5 versions.
No fix yet
CRITICAL 9.6
CVE-2026-65471
Unauthenticated Cross Site Request Forgery (CSRF) in Avada Core <= 5.15.6 versions.
Mitigation only
MEDIUM 6.5
CVE-2026-65470
Contributor Cross Site Scripting (XSS) in Fluent Support <= 2.3.0 versions.
No fix yet