radar

ONE Sentinel

shield

CVE Tracker

174,462 total CVEs

Live vulnerability feed from the National Vulnerability Database

8.8
CVE-2026-57659open_in_newHIGH2026-06-26

Unauthenticated Cross Site Request Forgery (CSRF) in Paid Memberships Pro - Add Member From Admin <= 0.7.2 versions.

9.1
CVE-2026-57658open_in_newCRIT2026-06-26

Administrator Arbitrary File Upload in TemplateSpare <= 4.2.0 versions.

4.3
CVE-2026-57657open_in_newMED2026-06-26

Unauthenticated Cross Site Request Forgery (CSRF) in Gmail SMTP <= 1.2.3.19 versions.

5.9
CVE-2026-57656open_in_newMED2026-06-26

Author Cross Site Scripting (XSS) in Hester Core <= 1.1.8 versions.

8.2
CVE-2026-57655open_in_newHIGH2026-06-26

Unauthenticated Cross Site Request Forgery (CSRF) in Child Theme Wizard <= 1.4 versions.

6.5
CVE-2026-57654open_in_newMED2026-06-26

Affiliate Broken Access Control in Affiliates Manager <= 2.9.49 versions.

8.5
CVE-2026-57653open_in_newHIGH2026-06-26

Contributor SQL Injection in WP Job Portal <= 2.5.2 versions.

5.3
CVE-2026-57652open_in_newMED2026-06-26

Unauthenticated Insecure Direct Object References (IDOR) in JS Help Desk <= 3.1.0 versions.

6.5
CVE-2026-57651open_in_newMED2026-06-26

Contributor Cross Site Scripting (XSS) in Ghost Kit <= 3.6.0 versions.

6.5
CVE-2026-57650open_in_newMED2026-06-26

Contributor Cross Site Scripting (XSS) in Magazine Blocks <= 1.8.3 versions.

4.3
CVE-2026-57649open_in_newMED2026-06-26

Subscriber Broken Access Control in Shoppable Images Lite <= 1.3 versions.

4.3
CVE-2026-57648open_in_newMED2026-06-26

Contributor Broken Access Control in Nelio Content <= 4.3.4 versions.

7.5
CVE-2026-57647open_in_newHIGH2026-06-26

Contributor Local File Inclusion in Panorama Viewer – 360 Degree Image + Video Viewer <= 1.6.1 versions.

5.4
CVE-2026-57646open_in_newMED2026-06-26

Subscriber Insecure Direct Object References (IDOR) in Majestic Support <= 1.1.7 versions.

8.1
CVE-2026-57645open_in_newHIGH2026-06-26

newsletters_subscribers Broken Access Control in Newsletters <= 4.13 versions.

8.5
CVE-2026-57644open_in_newHIGH2026-06-26

Contributor SQL Injection in Restaurant Menu by MotoPress <= 2.4.10 versions.

8.5
CVE-2026-57643open_in_newHIGH2026-06-26

Contributor SQL Injection in WP Post Author <= 3.9.1 versions.

8.5
CVE-2026-57642open_in_newHIGH2026-06-26

Contributor SQL Injection in Gallery <= 4.7.8 versions.

6.5
CVE-2026-57641open_in_newMED2026-06-26

Unauthenticated Cross Site Request Forgery (CSRF) in Real Estate 7 <= 3.5.9 versions.

4.3
CVE-2026-57640open_in_newMED2026-06-26

Subscriber Broken Access Control in MasterStudy LMS <= 3.7.30 versions.

6.5
CVE-2026-57638open_in_newMED2026-06-26

Contributor Cross Site Scripting (XSS) in Fluent Booking <= 2.1.0 versions.

4.3
CVE-2026-57637open_in_newMED2026-06-26

Unauthenticated Cross Site Request Forgery (CSRF) in Abandoned Cart Lite for WooCommerce <= 6.8.0 versions.

8.5
CVE-2026-57636open_in_newHIGH2026-06-26

Contributor SQL Injection in wpForo Forum <= 3.0.9 versions.

6.5
CVE-2026-57635open_in_newMED2026-06-26

Unauthenticated Cross Site Request Forgery (CSRF) in FunnelKit Payment Gateway for Stripe WooCommerce <= 1.14.0.3 versions.

4.3
CVE-2026-57634open_in_newMED2026-06-26

Contributor Insecure Direct Object References (IDOR) in PPWP <= 1.9.19 versions.

Showing 2076-2100 of 174,462 CVEs

chevron_left1...838485...6979chevron_right