Vulnerabilities

search
ID
Packages
Summary
Published
arrow_upward
Attributes
CVE-2026-18072
  • WordPress:Plugin/advanced-responsive-video-embedder
 Advanced Responsive Video Embedder for Rumble, Odysee, YouTube, Vimeo, Kick …... 29 Jul
  • No fix available
  • Severity - 9.8 (Critical)
CVE-2026-5626
  • WordPress:Plugin/survey-form-block
 Survey Form Block <= 1.0.1 - Missing Authorization to Authenticated... 29 Jul
  • No fix available
  • Severity - 4.3 (Medium)
CVE-2026-15344
  • WordPress:Plugin/wp-photo-album-plus
 WP Photo Album Plus <= 9.2.04.002 - Authenticated (Administrator+) SQL... 29 Jul
  • No fix available
  • Severity - 4.9 (Medium)
CVE-2026-12476
  • WordPress:Plugin/easy-digital-downloads
 Easy Digital Downloads <= 3.6.9 - Authenticated (Shop Manager+) Arbitrary File... 29 Jul
  • No fix available
  • Severity - 7.2 (High)
CVE-2026-17161
  • WordPress:Plugin/product-blocks
 WowStore <= 4.4.24 - Authenticated (Contributor+) Stored Cross-Site Scripting... 29 Jul
  • No fix available
  • Severity - 6.4 (Medium)
CVE-2026-17162
  • WordPress:Plugin/product-blocks
 WowStore <= 4.4.24 - Authenticated (Contributor+) Stored Cross-Site Scripting... 29 Jul
  • No fix available
  • Severity - 6.4 (Medium)
CVE-2026-17166
  • WordPress:Plugin/mage-eventpress
 Event Booking Manager for WooCommerce <= 5.3.7 - Missing Authorization to... 29 Jul
  • No fix available
  • Severity - 4.3 (Medium)
CVE-2026-12144
  • WordPress:Plugin/woo-wholesale-pricing
 Wholesale for WooCommerce <= 2.0.5 - Authenticated (Author+) Privilege... 29 Jul
  • No fix available
  • Severity - 8.8 (High)
CVE-2026-12939
  • WordPress:Plugin/newsletters-lite
 Newsletters <= 4.15 - Authenticated (Contributor+) Stored Cross-Site Scripting... 29 Jul
  • No fix available
  • Severity - 6.4 (Medium)
CVE-2026-12938
  • WordPress:Plugin/newsletters-lite
 Newsletters <= 4.15 - Authenticated (Contributor+) Stored Cross-Site Scripting... 29 Jul
  • No fix available
  • Severity - 6.4 (Medium)
CVE-2026-15735
  • WordPress:Plugin/contact-form-to-any-api
 Contact Form to Any API <= 3.0.6 - Authenticated (Contributor+) Stored... 29 Jul
  • No fix available
  • Severity - 6.4 (Medium)
CVE-2026-4912
  • WordPress:Plugin/media-cleaner
 Media Cleaner: Clean your WordPress! <= 7.0.3 - Authenticated (Administrator+)... 28 Jul
  • No fix available
  • Severity - 4.1 (Medium)
CVE-2026-5114
  • WordPress:Plugin/speedycache
 SpeedyCache <= 1.3.8 - Authenticated (Administrator+) Arbitrary File Read 28 Jul
  • No fix available
  • Severity - 4.9 (Medium)
CVE-2026-15304
  • WordPress:Plugin/plugin-organizer
 Plugin Organizer <= 10.2.4 - Authenticated (Subscriber+) SQL Injection 28 Jul
  • No fix available
  • Severity - 6.5 (Medium)
CVE-2026-15992
  • WordPress:Plugin/password-requirements
 WP Password Policy <= 3.7.1 - Authenticated (Subscriber+) Privilege Escalation 28 Jul
  • No fix available
  • Severity - 8.8 (High)
CVE-2026-15393
  • WordPress:Plugin/cozy-addons
 Cozy Blocks <= 2.2.11 - Authenticated (Contributor+) Stored Cross-Site... 28 Jul
  • No fix available
  • Severity - 6.4 (Medium)
Load more...