CVE-2026-39438

Unauthenticated SQL Injection in ListingPro = 2.9.10 versions...

CVE-2026-27400

Unauthenticated Arbitrary File Deletion in BookPro = 1.1.0 versions...

CVE-2026-24575

Subscriber Broken Access Control in WishList Member X = 3.29.0 versions...

CVE-2026-22334

Subscriber Arbitrary File Download in Woocommerce Book Price = 1.3 versions...

CVE-2026-22332

Unauthenticated SQL Injection in Tutor LMS Pro = 3.9.6 versions...

CVE-2026-22340

Unauthenticated SQL Injection in WPJobster = 6.3.5 versions...

CVE-2026-22330

Unauthenticated Local File Inclusion in Right Way = 4.0 versions...

CVE-2026-22329

Unauthenticated Cross Site Scripting XSS in Skillate = 1.2.10 versions...

CVE-2026-12199

A vulnerability in nltk.app.wordnetapp up to version 3.9.3 allows unauthenticated remote shutdown of the local WordNet Browser HTTP server when started in its default mode. The server listens on all interfaces and processes a specific unauthenticated GET request /SHUTDOWN%20THE%20SERVER to...

CVE-2025-69173

Unauthenticated Local File Inclusion in Tipsy = 1.1 versions...

CVE-2025-69150

Unauthenticated Local File Inclusion in Medeus = 1.14 versions...

CVE-2025-69148

Unauthenticated Local File Inclusion in Quirky = 1.23 versions...

CVE-2025-69137

Subscriber Broken Access Control in Genemy = 1.6.6 versions...

CVE-2025-69143

Unauthenticated Local File Inclusion in Mission = 1.22 versions...

CVE-2025-69136

Unauthenticated Local File Inclusion in Wanium = 1.9.8 versions...

CVE-2025-69125

Unauthenticated Local File Inclusion in Food Drop = 1.3 versions...

CVE-2025-69121

Unauthenticated Local File Inclusion in Deliciosa = 1.10.0 versions...

CVE-2025-69117

Unauthenticated Local File Inclusion in Ingenioso = 1.14.0 versions...

CVE-2025-69112

Unauthenticated Local File Inclusion in Planty = 1.14.0 versions...

CVE-2025-69116

Unauthenticated Local File Inclusion in Iona = 1.0.8 versions...