Top technology
Linux 13140
Google 12536
Microsoft 12379
Oracle 6843
Apple 6692
Adobe 6387
Ibm 6336
Cisco 5759
Debian 3919
Mozilla 2895
Apache 2864
Redhat 2592
Linux 13140
Google 12536
Microsoft 12379
Oracle 6843
Apple 6692
Adobe 6387
Ibm 6336
Cisco 5759
Debian 3919
Mozilla 2895
Apache 2864
Redhat 2592
HIGH 8.8
CVE-2026-57785
Unauthenticated Cross Site Request Forgery (CSRF) in ApusListing <= 1.2.63 versions.
Mitigation only
CRITICAL 9.6
CVE-2026-57784
Unauthenticated Cross Site Request Forgery (CSRF) in Ninja Forms File Uploads Extension <= 3.3.26 versions.
No fix yet
HIGH 7.1
CVE-2026-57769
Unauthenticated Cross Site Scripting (XSS) in Grand Photography <= 5.7.8 versions.
No fix yet
HIGH 7.1
CVE-2026-57767
Unauthenticated Cross Site Scripting (XSS) in WP Google Maps Pro <= 10.1.02 versions.
No fix yet
HIGH 7.1
CVE-2026-57735
Unauthenticated Cross Site Scripting (XSS) in Breakdance <= 2.7.1 versions.
No fix yet
MEDIUM 6.5
CVE-2026-57717
Unauthenticated Broken Access Control in Knit Pay <= 9.6.0.0 versions.
No fix yet
MEDIUM 5.3
CVE-2026-57716
Unauthenticated Arbitrary File Deletion in Broadcast Live Video <= 7.2.4 versions.
No fix yet
HIGH 7.1
CVE-2026-57704
Unauthenticated Cross Site Scripting (XSS) in Smart Manager <= 8.90.0 versions.
No fix yet
MEDIUM 6.3
CVE-2026-57703
Subscriber Broken Access Control in Sunshine Photo Cart <= 3.6.10.1 versions.
No fix yet
HIGH 7.1
CVE-2026-57701
Unauthenticated Cross Site Scripting (XSS) in Real Estate Manager Pro <= 12.8.5 versions.
No fix yet
HIGH 7.1
CVE-2026-57699
Subscriber Cross Site Scripting (XSS) in Slider Pro <= 4.8.13 versions.
No fix yet
HIGH 7.1
CVE-2026-57696
Contributor Arbitrary File Deletion in Picture Gallery <= 1.6.5 versions.
No fix yet
HIGH 7.1
CVE-2026-57626
Cross-Site Request Forgery (CSRF) vulnerability in MailPoet allows Cross Site Request Forgery.
This issue affects MailPoet: from 5.30.0 through 5.33…
No fix yet
HIGH 7.1
CVE-2026-57428
Unauthenticated Cross Site Scripting (XSS) in Sprout Clients <= 3.2.3 versions.
No fix yet
HIGH 7.1
CVE-2026-57427
Unauthenticated Cross Site Scripting (XSS) in Download Monitor - WPForms Lock <= 1.0.4 versions.
No fix yet
MEDIUM 6.5
CVE-2026-57425
Unauthenticated Broken Access Control in Autopay dla WooCommerce <= 2.2.27 versions.
No fix yet
HIGH 7.1
CVE-2026-57397
Unauthenticated Cross Site Scripting (XSS) in Coaching <= 3.9.2 versions.
No fix yet
MEDIUM 6.5
CVE-2026-57384
Subscriber Cross Site Scripting (XSS) in WishList Member X <= 3.32.0 versions.
No fix yet
HIGH 7.1
CVE-2026-57374
Unauthenticated Cross Site Scripting (XSS) in Funnel Kit Funnel Builder PRO <= 3.15.0.7 versions.
No fix yet
MEDIUM 6.5
CVE-2026-57373
Customer Cross Site Scripting (XSS) in Funnel Kit Funnel Builder PRO <= 3.15.0.4 versions.
No fix yet
HIGH 7.1
CVE-2026-57370
Unauthenticated Cross Site Scripting (XSS) in Visitor Traffic Real Time Statistics Pro <= 11.9.1 versions.
No fix yet
HIGH 7.1
CVE-2026-57367
Subscriber Broken Access Control in WP Booking System < 5.12.8.1 versions.
No fix yet
MEDIUM 5.3
CVE-2026-27422
Unauthenticated Broken Access Control in YT Player <= 2.0.9 versions.
No fix yet
MEDIUM 5.3
CVE-2026-27418
Unauthenticated Broken Access Control in WP Fast Total Search <= 1.81.282 versions.
No fix yet
MEDIUM 6.5
CVE-2026-27403
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in NerdPress Hubbub Lite allows Stored XSS.
This …
No fix yet
MEDIUM 5.3
CVE-2026-27399
Unauthenticated Broken Access Control in MarketKing <= 2.1.40 versions.
No fix yet
MEDIUM 5.4
CVE-2026-27391
Subscriber Broken Access Control in uListing <= 2.2.0 versions.
No fix yet
MEDIUM 6.7
CVE-2026-27377
Booking Agent Broken Access Control in QuickCal - Appointment Booking Calendar for WordPress <= 1.0.16 versions.
No fix yet
MEDIUM 6.5
CVE-2026-27372
Unauthenticated Sensitive Data Exposure in PeproDev Ultimate Invoice <= 2.2.6 versions.
No fix yet
MEDIUM 5.3
CVE-2026-27355
Unauthenticated Broken Access Control in Ditty <= 3.1.66 versions.
No fix yet