91232 matches found
CVE-2026-66429: Improper Neutralization of Input During Web Page Generation
Unauthenticated Cross Site Scripting XSS in Visitor Traffic Real Time Statistics Pro = 11.10 versions...
CVE-2026-66424: Incorrect Privilege Assignment
Unauthenticated Privilege Escalation in SMS Alert Order Notifications = 3.9.7 versions...
CVE-2026-65580: Improper Neutralization of Input During Web Page Generation
Unauthenticated Cross Site Scripting XSS in Agrion = 1.0.0 versions...
CVE-2026-61980: Improper Limitation of a Pathname to a Restricted Directory
Unauthenticated Arbitrary File Download in OMGF Pro = 5.2.7 versions...
CVE-2026-61978: Missing Authorization
Unauthenticated Broken Access Control in Secure Card Gateway for ePay Paycenter Piraeus Bank = 1.0.32 versions...
CVE-2026-61967: Weak Password Recovery Mechanism for Forgotten Password
Unauthenticated Privilege Escalation in miniorange otp verification = 5.5.1 versions...
CVE-2026-61960: Improper Neutralization of Input During Web Page Generation
Unauthenticated Cross Site Scripting XSS in WP Full Stripe Free = 8.5.0 versions...
CVE-2026-28185: Insufficient Verification of Data Authenticity
Unauthenticated Broken Authentication in Log in with Google = 1.4.2 versions...
CVE-2026-73403: Missing Authorization
Unauthenticated Broken Access Control in User Registration = 5.2.6 versions...
CVE-2026-66698: Improper Neutralization of Input During Web Page Generation
Unauthenticated Cross Site Scripting XSS in SureDash = 1.10.1 versions...
CVE-2026-66661: Incorrect Privilege Assignment
Subscriber Privilege Escalation in Directories Pro = 2.0.5 versions...
CVE-2026-66658: Improper Neutralization of Special Elements used in an SQL Command
Subscriber SQL Injection in Reviewer = 3.14.2 versions...
CVE-2026-73401: Missing Authorization
Unauthenticated Broken Access Control in InstaWP Connect = 0.1.3.7 versions...
CVE-2026-73357: Improper Neutralization of Input During Web Page Generation
Donor Cross Site Scripting XSS in GiveWP 4.16.6 versions...
CVE-2026-73353: Missing Authorization
Unauthenticated Broken Access Control in Revolut Gateway for WooCommerce 4.22.10 versions...
CVE-2026-73346: Improper Neutralization of Special Elements used in an SQL Command
Administrator SQL Injection in MailChimp For WooCommerce 6.2 versions...
CVE-2026-66700: Improper Neutralization of Input During Web Page Generation
Unauthenticated Cross Site Scripting XSS in Smart Online Order for Clover = 1.6.1 versions...
CVE-2026-66691: Weak Password Recovery Mechanism for Forgotten Password
Unauthenticated Broken Access Control in Nokri = 1.6.6 versions...