Vulnerabilities
Recent vulnerabilities
Recent vulnerabilities from
Select from 81 available sources using the dropdown above.
| ID | Description | Published | Updated |
|---|---|---|---|
| fkie_cve-2026-97660 | The WPC Product Options for WooCommerce plugin for WordPress is vulnerable to Stored Cross-Site Scr… | 2026-10-03T07:16:49.530 | 2026-10-03T16:16:49.930 |
| fkie_cve-2026-97652 | The WP Statistics – Simple, privacy-friendly Google Analytics alternative plugin for WordPress is v… | 2026-10-02T10:17:10.163 | 2026-10-03T16:16:49.813 |
| fkie_cve-2026-97644 | The Groundhogg — CRM, Newsletters, and Marketing Automation plugin for WordPress is vulnerable to P… | 2026-10-03T04:18:04.917 | 2026-10-03T16:16:49.700 |
| fkie_cve-2026-97641 | The Relevanssi – A Better Search plugin for WordPress is vulnerable to Stored Cross-Site Scripting … | 2026-10-02T08:17:05.837 | 2026-10-03T16:16:49.590 |
| fkie_cve-2026-97637 | The JSON API Auth plugin for WordPress is vulnerable to Authentication Bypass via Cached Session Co… | 2026-10-02T08:17:05.660 | 2026-10-03T16:16:49.480 |
| fkie_cve-2026-97363 | The WebSocket Application Programming Interface lacks restrictions on the number of authentication … | 2026-10-02T22:16:56.910 | 2026-10-03T16:16:49.350 |
| fkie_cve-2026-97344 | The Wp Social Login and Register Social Counter plugin for WordPress is vulnerable to Stored Cross-… | 2026-10-03T06:16:49.707 | 2026-10-03T16:16:49.240 |
| fkie_cve-2026-97343 | The Burst Statistics – Simple WordPress Analytics (Google Analytics Alternative) plugin for WordPre… | 2026-10-03T07:16:49.363 | 2026-10-03T16:16:49.130 |
| fkie_cve-2026-97342 | The JetFormBuilder — Dynamic Blocks Form Builder plugin for WordPress is vulnerable to Stored Cross… | 2026-10-02T08:17:05.317 | 2026-10-03T16:16:49.020 |
| fkie_cve-2026-97341 | The Visitor Traffic Real Time Statistics plugin for WordPress is vulnerable to Stored DOM-Based Cro… | 2026-10-03T06:16:49.323 | 2026-10-03T16:16:48.910 |
| fkie_cve-2026-97338 | The Download Manager plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Display … | 2026-10-02T08:17:05.150 | 2026-10-03T16:16:48.800 |
| fkie_cve-2026-97337 | The Simple Membership plugin for WordPress is vulnerable to unauthorized modification of data and s… | 2026-10-03T06:16:48.943 | 2026-10-03T16:16:48.693 |
| fkie_cve-2026-97273 | Unauthenticated Cross Site Scripting (XSS) in Premmerce Wishlist for WooCommerce <= 1.1.13 versions. | 2026-10-01T15:17:38.247 | 2026-10-03T16:16:48.590 |
| fkie_cve-2026-97258 | Subscriber Broken Access Control in Aruba Migration Tool <= 1.0.4 versions. | 2026-10-01T15:17:37.660 | 2026-10-03T16:16:48.480 |
| fkie_cve-2026-97212 | The WebSocket backend uses charging station identifiers to uniquely associate sessions but allows m… | 2026-10-02T22:16:56.760 | 2026-10-03T16:16:48.353 |
| fkie_cve-2026-96962 | The Pie Register WordPress plugin before 3.8.4.14 does not restrict access to an invitation-code r… | 2026-10-03T06:16:48.670 | 2026-10-03T16:16:48.203 |
| fkie_cve-2026-96871 | The Mang Board plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'data_type… | 2026-10-02T08:17:04.813 | 2026-10-03T16:16:48.097 |
| fkie_cve-2026-96813 | The Form Maker by 10Web – Mobile-Friendly Drag & Drop Contact Form Builder plugin for WordPress is … | 2026-10-01T09:17:10.837 | 2026-10-03T16:16:47.987 |
| fkie_cve-2026-96650 | The Strong Testimonials plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'plat… | 2026-10-03T06:16:48.290 | 2026-10-03T16:16:47.880 |
| fkie_cve-2026-96647 | The Listdom: AI-powered Business Directory with Classifieds Ads Listings plugin for WordPress is vu… | 2026-10-02T08:17:04.643 | 2026-10-03T16:16:47.760 |
| fkie_cve-2026-96613 | The Meari IoT Cloud Platform OpenAPI Service is vulnerable to an authorization flaw that allows aut… | 2026-10-02T16:16:52.490 | 2026-10-03T16:16:47.607 |
| fkie_cve-2026-96575 | The Transliterator – Multilingual and Multi-script Text Conversion plugin for WordPress is vulnerab… | 2026-10-03T06:16:47.920 | 2026-10-03T16:16:47.407 |
| fkie_cve-2026-96567 | The MW WP Form plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'post_id' … | 2026-10-02T08:17:04.310 | 2026-10-03T16:16:47.273 |
| fkie_cve-2026-96566 | The Newsletter – Send awesome emails from WordPress plugin for WordPress is vulnerable to Stored Cr… | 2026-10-02T08:17:04.117 | 2026-10-03T16:16:47.163 |
| fkie_cve-2026-96564 | The SEOPress – AI SEO Plugin & On-site SEO plugin for WordPress is vulnerable to Stored Cross-Site … | 2026-10-03T06:16:47.607 | 2026-10-03T16:16:47.050 |
| fkie_cve-2026-96451 | Authorization Bypass Through User-Controlled Key vulnerability in Ultimate Member Ultimate Member u… | 2026-10-03T16:16:46.920 | 2026-10-03T16:16:46.920 |
| fkie_cve-2026-96270 | The Ultimate Member – User Profile, Registration, Login, Member Directory, Content Restriction & Me… | 2026-10-03T03:16:37.687 | 2026-10-03T16:16:46.807 |
| fkie_cve-2026-96267 | The WP Visitor Statistics (Real Time Traffic) plugin for WordPress is vulnerable to generic SQL Inj… | 2026-10-03T07:16:49.200 | 2026-10-03T16:16:46.693 |
| fkie_cve-2026-96256 | The Gutenberg Essential Blocks – Page Builder for Gutenberg Blocks & Patterns plugin for WordPress … | 2026-10-01T10:17:17.613 | 2026-10-03T16:16:46.580 |
| fkie_cve-2026-95865 | The Beaver Builder Page Builder – Drag and Drop Website Builder plugin for WordPress is vulnerable … | 2026-10-03T03:16:37.533 | 2026-10-03T16:16:46.470 |