Lucene search
+L

277090 matches found

CVE
CVE
added 2026/08/13 1:37 p.m.38 views

CVE-2026-66466

The CVE concerns the WordPress StoreGrowth: Smart Sales Booster for WooCommerce | BOGO, Upsells, Direct Checkout, Quick View, Side Cart plugin (versions

7.5CVSS5.2AI score0.00238EPSS
SaveExploits0References1
ATTACKERKB
ATTACKERKB
added 2026/08/13 1:37 p.m.7 views

CVE-2026-66467

Subscriber Cross Site Scripting XSS in FluentCommunity = 2.7.5 versions...

6.5CVSS5.1AI score0.00205EPSS
SaveExploits0References2
Cvelist
Cvelist
added 2026/08/13 1:37 p.m.36 views

CVE-2026-66467 WordPress FluentCommunity plugin <= 2.7.5 - Cross Site Scripting (XSS) vulnerability

Subscriber Cross Site Scripting XSS in FluentCommunity = 2.7.5 versions...

6.5CVSS0.00205EPSS
SaveExploits0References1
ATTACKERKB
ATTACKERKB
added 2026/08/13 1:37 p.m.7 views

CVE-2026-66465

Unauthenticated Broken Authentication in Cartify = 1.3.0.1 versions...

9.8CVSS5.2AI score0.00392EPSS
SaveExploits0References2
CVE
CVE
added 2026/08/13 1:37 p.m.58 views

CVE-2026-66465

CVE-2026-66465 affects WordPress Cartify theme (Cartify Multipurpose) versions up to and including 1.3.0.1, with unauthenticated broken authentication that can lead to account takeover. The connected documents confirm the vulnerability type and the affected version range but do not provide remedi...

9.8CVSS5.2AI score0.00392EPSS
SaveExploits0References1
CVE
CVE
added 2026/08/13 1:37 p.m.27 views

CVE-2026-66464

CVE-2026-66464 affects the WordPress plugin Internal Link Optimiser up to version 5.2.7. The vulnerability is described as unauthenticated broken access control, enabling access checks to be bypassed without user authentication. The connected records confirm the product, plugin/component, and the...

6.5CVSS5.2AI score0.00188EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2026/08/13 1:37 p.m.37 views

CVE-2026-66464 WordPress Internal Link Optimiser plugin <= 5.2.7 - Broken Access Control vulnerability

Unauthenticated Broken Access Control in Internal Link Optimiser = 5.2.7 versions...

6.5CVSS0.00188EPSS
SaveExploits0References1
EUVD
EUVD
added 2026/08/13 1:37 p.m.10 views

EUVD-2026-57883

Unauthenticated Broken Access Control in Internal Link Optimiser = 5.2.7 versions...

6.5CVSS5.2AI score0.00188EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2026/08/13 1:37 p.m.36 views

CVE-2026-66463 WordPress iCARRY plugin <= 2.9 - Sensitive Data Exposure vulnerability

Unauthenticated Sensitive Data Exposure in iCARRY = 2.9 versions...

7.5CVSS0.00294EPSS
SaveExploits0References1
CVE
CVE
added 2026/08/13 1:37 p.m.44 views

CVE-2026-66463

The CVE-2026-66463 entry concerns the WordPress iCARRY plugin, affected versions &lt;= 2.9, with an Unauthenticated Sensitive Data Exposure vulnerability. The available documents specify vulnerable software (iCARRY

7.5CVSS5.2AI score0.00294EPSS
SaveExploits0References1
ATTACKERKB
ATTACKERKB
added 2026/08/13 1:37 p.m.10 views

CVE-2026-66464

Unauthenticated Broken Access Control in Internal Link Optimiser = 5.2.7 versions...

6.5CVSS5.2AI score0.00188EPSS
SaveExploits0References2
Cvelist
Cvelist
added 2026/08/13 1:37 p.m.39 views

CVE-2026-66462 WordPress WooCommerce Appointments plugin <= 5.3.8 - Sensitive Data Exposure vulnerability

Unauthenticated Sensitive Data Exposure in WooCommerce Appointments = 5.3.8 versions...

7.5CVSS0.00303EPSS
SaveExploits0References1
CVE
CVE
added 2026/08/13 1:37 p.m.38 views

CVE-2026-66461

CVE-2026-66461 is a vulnerability in the WordPress SMEPay: UPI Gateway for WooCommerce plugin (versions

7.5CVSS5.2AI score0.00238EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2026/08/13 1:37 p.m.31 views

CVE-2026-66461 WordPress SMEPay: UPI Gateway for WooCommerce plugin <= 1.0.5 - Payment Bypass vulnerability

Unauthenticated Broken Access Control in SMEPay: UPI Gateway for WooCommerce = 1.0.5 versions...

7.5CVSS0.00238EPSS
SaveExploits0References1
CVE
CVE
added 2026/08/13 1:37 p.m.63 views

CVE-2026-66462

Summary (CVE-2026-66462) : Unauthenticated sensitive data exposure in the WordPress WooCommerce Appointments plugin, versions ≤ 5.3.8. The vulnerability affects the plugin itself (no vendor/component details beyond the plugin) and is described as unauthenticated exposure of sensitive data. No exp...

7.5CVSS5.2AI score0.00303EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2026/08/13 1:37 p.m.51 views

CVE-2026-66460 WordPress AfterShip Tracking plugin <= 1.18.1 - Cross Site Scripting (XSS) vulnerability

Subscriber Cross Site Scripting XSS in AfterShip Tracking = 1.18.1 versions...

6.5CVSS0.00205EPSS
SaveExploits0References1
ATTACKERKB
ATTACKERKB
added 2026/08/13 1:37 p.m.8 views

CVE-2026-66460

Subscriber Cross Site Scripting XSS in AfterShip Tracking = 1.18.1 versions...

6.5CVSS5.1AI score0.00205EPSS
SaveExploits0References2
EUVD
EUVD
added 2026/08/13 1:37 p.m.8 views

EUVD-2026-57879

Subscriber Cross Site Scripting XSS in AfterShip Tracking = 1.18.1 versions...

6.5CVSS5.1AI score0.00205EPSS
SaveExploits0References1
CVE
CVE
added 2026/08/13 1:37 p.m.37 views

CVE-2026-66460

CVE-2026-66460 affects the WordPress AfterShip Tracking plugin for WooCommerce, version

6.5CVSS5.1AI score0.00205EPSS
SaveExploits0References1
ATTACKERKB
ATTACKERKB
added 2026/08/13 1:37 p.m.9 views

CVE-2026-66458

Unauthenticated SQL Injection in RealPress = 1.1.2 versions...

9.3CVSS5.7AI score0.00283EPSS
SaveExploits0References2
Rows per page
Query Builder