Skip to contentUnknown vulnerabilities
Newest
- unknown wp verify apiWP Verify API <= 1.0.0 - Unauthenticated SQLi via 'verify' ParameterCVE-2026-892998.6 High
- unknown loja automáticaLoja Automática <= 1.0.0 - Unauthenticated SQLi via 'id' ParameterCVE-2026-892978.6 High
- unknown aspl product quotationASPL Product Quotation <= 1.1.0 - Unauthenticated SQLi via 'quote_id' ParameterCVE-2026-892878.6 High
- unknown datalist itDatalist it <= 0.0.3 - Unauthenticated SQLi via dli_fronted_actionCVE-2026-892858.6 High
- unknown wp posts password batch managerWP Posts Password Batch Manager <= 1.1 - Unauthenticated Bulk Post Password RewriteCVE-2026-892838.6 High
- unknown wp-partnerWP-Partner <= 1.2.1 - Unauthenticated SQLi via 'id' ParameterCVE-2026-892348.6 High
- unknown recordbrowserRecordBrowser <= 1.1.7 - Unauthenticated SQLi via 'recordid' ParameterCVE-2026-892328.6 High
- unknown wpcues basic quizWpCues Basic Quiz <= 1.6.5 - Unauthenticated SQLi via Quiz Result SubmissionCVE-2026-892148.6 High
- unknown llavero.ioLlavero.io <= 0.1.4 - Unauthenticated Blind SQLi via 'cill_login' ParameterCVE-2026-892138.6 High
- unknown site setup wizardSite Setup Wizard <= 1.5.8 - Unauthenticated SQLi via ssw_check_admin_email_existsCVE-2026-891958.6 High
- unknown social web suiteSocial Web Suite <= 4.1.12 - Unauthenticated Blind SQLi via Unset Shared SecretCVE-2026-889308.6 High
- unknown keyword collectorKeyWord Collector <= 1.4 - Unauthenticated Stored XSS and Settings Update via WPKeyWordSettingsCVE-2026-889058.8 High
- unknown topcontentTopcontent <= 1.2.1 - Unauthenticated Stored XSS via Content WebhookCVE-2026-889038.8 High
- unknown disable usersDisable Users <= 1.0.5 - Disabled Account Authentication Bypass via XML-RPC and Application PasswordsCVE-2026-888278.8 High
- unknown smugmug embedSmugMug Embed <= 3.13 - Unauthenticated Stored XSS via saveSelectedAlbumsCVE-2026-888268.8 High
- unknown simple membershipSimple Membership < 4.8.3 - Newly Registered Member Password Disclosure via URL Query StringCVE-2026-887854.7 Medium
- unknown buddypress instant chatBuddyPress Instant Chat <= 1.6 - Unauthenticated Stored XSS via Chat MessageCVE-2026-877648.8 High
- unknown adwised web push notificationAdwised Web Push Notification <= 2.5.7 - Unauthenticated Stored XSS via Secret Key Type JugglingCVE-2026-877628.8 High
- unknown adwised web push notificationAdwised Web Push Notification <= 2.5.7 - Subscriber+ Stored XSS via Pop-up SettingsCVE-2026-877618.0 High
- unknown web vitals trackingWeb Vitals Tracking <= 5.4.2 - Unauthenticated Stored XSS via Tracking Beacon Metric NameCVE-2026-877608.8 High
- unknown hootboardHootBoard <= 3.1.4 - Unauthenticated Stored XSS via Board Configuration REST EndpointCVE-2026-867988.8 High
- unknown insurifyInsurify <= 1.0 - Unauthenticated Arbitrary Option Deletion via removeimg_popupCVE-2026-867179.1 Critical
- unknown quick quotesQuick quotes <= 1.0.0 - Unauthenticated Integer-Value Option UpdateCVE-2026-867069.1 Critical
- unknown crowdfundlyCrowdfundly <= 2.2.2 - Crowdfundly Manager+ Privilege EscalationCVE-2026-851267.2 High
- unknown insurifyInsurify <= 1.0 - Unauthenticated Arbitrary Option Creation and Overwrite via saveemailtemplatedesignCVE-2026-851219.1 Critical
- unknown ai content generator marketingAI Content Generator Marketing <= 1.0.0 - Unauthenticated Privilege Escalation via Arbitrary Option Update and DeletionCVE-2026-851189.8 Critical
- unknown freeton wpFreeton WP <= 1.0.0 - Unauthenticated Account Takeover via 'secod' ParameterCVE-2026-847379.8 Critical
- unknown mindstien quick loginMindstien Quick Login <= 1.0 - Unauthenticated Administrator Account Takeover via 'mql_pass' ParameterCVE-2026-847349.8 Critical
- unknown click5 crm add-on to contact form 7click5 CRM add-on to Contact Form 7 <= 1.0.4 - Unauthenticated Stored XSS via post_notificationsCVE-2026-842618.8 High
- unknown click5 crm add-on to gravity formsclick5 CRM add-on to Gravity Forms <= 1.0.3 - Unauthenticated Stored XSS via post_notificationsCVE-2026-842608.8 High
- unknown click5 crm add-on to wpformsclick5 CRM add-on to WPForms <= 1.0.3 - Unauthenticated Stored XSS via post_notificationsCVE-2026-842598.8 High
- unknown click5 crm add-on to ninja formsclick5 CRM add-on to Ninja Forms <= 1.0.1 - Unauthenticated Stored XSS via post_notificationsCVE-2026-842588.8 High
- unknown click5 crm add-on to contact form 7click5 CRM add-on to Contact Form 7 <= 1.0.4 - Unauthenticated Arbitrary Options UpdateCVE-2026-842549.8 Critical
- unknown click5 crm add-on to gravity formsclick5 CRM add-on to Gravity Forms <= 1.0.3 - Unauthenticated Arbitrary Options UpdateCVE-2026-842539.8 Critical
- unknown click5 crm add-on to wpformsclick5 CRM add-on to WPForms <= 1.0.3 - Unauthenticated Arbitrary Options UpdateCVE-2026-842529.8 Critical
- unknown click5 crm add-on to ninja formsclick5 CRM add-on to Ninja Forms <= 1.0.1 - Unauthenticated Arbitrary Options UpdateCVE-2026-842519.8 Critical
- unknown fundiin cho woocommerceFundiin <= 3.4.0 - Unauthenticated Payment Gateway Settings Update and Credential DisclosureCVE-2026-816499.1 Critical
- unknown tcard wpTcard WP <= 1.8.0 - Unauthenticated SQLi via group_id ParameterCVE-2026-814208.6 High
- robosoft robo galleryRobo Gallery < 5.2.6 - Contributor+ Stored XSS via Gallery SettingsCVE-2026-811566.8 Medium
- robosoft robo galleryRobo Gallery < 5.2.6 - Author+ Stored XSS via Gallery Search LabelCVE-2026-811556.8 Medium
- robosoft robo galleryRobo Gallery < 5.2.6 - Author+ Stored XSS via Image Alt TextCVE-2026-811546.8 Medium
- robosoft robo galleryRobo Gallery < 5.2.6 - Author+ Stored XSS via Image Overlay Effect MetaCVE-2026-811536.8 Medium
- unknown woocommerce bookings, woocommerce bookings +1 moreWooCommerce Bookings < 3.11.0 - Unauthenticated Denial of ServiceCVE-2026-148547.5 High
- unknown dokan: ai powered woocommerce multivendor marketplace solutionDokan < 5.2.0 - Vendor+ Cross-Vendor Commission Settings Disclosure via Commission REST EndpointCVE-2026-1076942.7 Low
- unknown squadenoSquadeno < 1.12.0 - Trainer+ Section and Age Group Reassignment via Quick EditCVE-2026-1075072.7 Low
- unknown weddingcity liteWeddingCity Lite <= 1.0.4 - Unauthenticated Arbitrary Post and Attachment DeletionCVE-2026-1060297.5 High
- unknown envira galleryEnvira Gallery < 1.16.2 - Author+ IDOR via ShortcodeCVE-2026-1046842.7 Low
- unknown envira galleryEnvira Gallery < 1.16.2 - Contributor Missing Authorization via Convert Gallery REST RouteCVE-2026-1046822.7 Low
- unknown envira galleryEnvira Gallery < 1.16.2 - Author+ Non-Public Post Title and Excerpt Disclosure via Gallery REST FieldCVE-2026-1046812.7 Low
- unknown envira galleryEnvira Gallery < 1.16.2 - Multisite Subsite Admin+ Arbitrary Plugin Installation via Onboarding WizardCVE-2026-1046807.2 High
- Show moreLoading…