Searching...
Please wait while we search the database
| CVE ID | Severity | Description | Published | Actions |
|---|---|---|---|---|
|
CVE-2026-54802
|
HIGH |
Unauthenticated Broken Authentication in SMS Alert Order Notifications <= 3.9.3 versions.
|
17 Jun 2026
|
|
|
CVE-2026-54196
|
MEDIUM |
Subscriber Privilege Escalation in JetFormBuilder <= 3.6.1 versions.
|
17 Jun 2026
|
|
|
CVE-2026-54195
|
HIGH |
Unauthenticated Cross Site Scripting (XSS) in JetFormBuilder <= 3.6.0.1 versions.
|
17 Jun 2026
|
|
|
CVE-2026-54192
|
HIGH |
Unauthenticated Cross Site Scripting (XSS) in Popup box <= 6.2.9 versions.
|
17 Jun 2026
|
|
|
CVE-2026-54189
|
HIGH |
Unauthenticated Cross Site Scripting (XSS) in JetEngine <= 3.8.10 versions.
|
17 Jun 2026
|
|
|
CVE-2026-54188
|
HIGH |
Unauthenticated Cross Site Scripting (XSS) in JetEngine <= 3.8.10 versions.
|
17 Jun 2026
|
|
|
CVE-2026-54187
|
CRITICAL |
Unauthenticated SQL Injection in JetEngine <= 3.8.10.1 versions.
|
17 Jun 2026
|
|
|
CVE-2026-54186
|
CRITICAL |
Unauthenticated SQL Injection in JobSearch <= 3.2.9 versions.
|
17 Jun 2026
|
|
|
CVE-2026-54185
|
HIGH |
Subscriber SQL Injection in Cornerstone < 7.8.8 versions.
|
17 Jun 2026
|
|
|
CVE-2026-54184
|
HIGH |
Unauthenticated Insecure Direct Object References (IDOR) in Clean Login <= 1.15 versions.
|
17 Jun 2026
|
|
|
CVE-2026-52706
|
CRITICAL |
Unauthenticated PHP Object Injection in JetEngine <= 3.8.10 versions.
|
17 Jun 2026
|
|
|
CVE-2026-52705
|
CRITICAL |
Unauthenticated Arbitrary File Upload in SigmaForms Pro – AI Generated Forms <= 1.4.5 versions.
|
17 Jun 2026
|
|
|
CVE-2026-52698
|
HIGH |
Subscriber Sensitive Data Exposure in PushEngage – Web Push Notifications, eCommerce Automation & Chat Widget <= 4.2.3 versions.
|
17 Jun 2026
|
|
|
CVE-2026-52696
|
HIGH |
Unauthenticated Sensitive Data Exposure in JetBlog <= 2.4.8 versions.
|
17 Jun 2026
|
|
|
CVE-2026-49778
|
HIGH |
Unauthenticated Cross Site Scripting (XSS) in WPFunnels Pro <= 2.9.4 versions.
|
17 Jun 2026
|
|
|
CVE-2026-49767
|
CRITICAL |
Unauthenticated Broken Authentication in wpForo Forum <= 3.1.0 versions.
|
17 Jun 2026
|
|
|
CVE-2026-49107
|
CRITICAL |
Unauthenticated PHP Object Injection in Thrive Apprentice < 10.8.10.2 versions.
|
17 Jun 2026
|
|
|
CVE-2026-49084
|
CRITICAL |
Unauthenticated SQL Injection in JetEngine < 3.8.9.1 versions.
|
17 Jun 2026
|
|
|
CVE-2026-49081
|
HIGH |
Unauthenticated Broken Access Control in User Registration Stripe <= 1.3.12 versions.
|
17 Jun 2026
|
|
|
CVE-2026-49079
|
CRITICAL |
Unauthenticated SQL Injection in JetSearch <= 3.5.17 versions.
|
17 Jun 2026
|
|
|
CVE-2026-49076
|
CRITICAL |
Unauthenticated SQL Injection in JetEngine <= 3.8.9.1 versions.
|
17 Jun 2026
|
|
|
CVE-2026-49075
|
CRITICAL |
Contributor PHP Object Injection in JetEngine <= 3.8.9.1 versions.
|
17 Jun 2026
|
|
|
CVE-2026-49074
|
HIGH |
Unauthenticated Cross Site Scripting (XSS) in JetEngine <= 3.8.9.1 versions.
|
17 Jun 2026
|
|
|
CVE-2026-49072
|
MEDIUM |
Unauthenticated Broken Access Control in WooCommerce Anti-Fraud <= 7.2.6 versions.
|
17 Jun 2026
|
|
|
CVE-2026-49071
|
MEDIUM |
Unauthenticated Broken Authentication in WooCommerce Dropshipping <= 5.2.4 versions.
|
17 Jun 2026
|
CVE-2026-54802
HIGH
17 Jun 2026
Unauthenticated Broken Authentication in SMS Alert Order Notifications <= 3.9.3 versions.
CVE-2026-54196
MEDIUM
17 Jun 2026
Subscriber Privilege Escalation in JetFormBuilder <= 3.6.1 versions.
CVE-2026-54195
HIGH
17 Jun 2026
Unauthenticated Cross Site Scripting (XSS) in JetFormBuilder <= 3.6.0.1 versions.
CVE-2026-54192
HIGH
17 Jun 2026
Unauthenticated Cross Site Scripting (XSS) in Popup box <= 6.2.9 versions.
CVE-2026-54189
HIGH
17 Jun 2026
Unauthenticated Cross Site Scripting (XSS) in JetEngine <= 3.8.10 versions.
CVE-2026-54188
HIGH
17 Jun 2026
Unauthenticated Cross Site Scripting (XSS) in JetEngine <= 3.8.10 versions.
CVE-2026-54187
CRITICAL
17 Jun 2026
Unauthenticated SQL Injection in JetEngine <= 3.8.10.1 versions.
CVE-2026-54186
CRITICAL
17 Jun 2026
Unauthenticated SQL Injection in JobSearch <= 3.2.9 versions.
CVE-2026-54185
HIGH
17 Jun 2026
Subscriber SQL Injection in Cornerstone < 7.8.8 versions.
CVE-2026-54184
HIGH
17 Jun 2026
Unauthenticated Insecure Direct Object References (IDOR) in Clean Login <= 1.15 versions.
CVE-2026-52706
CRITICAL
17 Jun 2026
Unauthenticated PHP Object Injection in JetEngine <= 3.8.10 versions.
CVE-2026-52705
CRITICAL
17 Jun 2026
Unauthenticated Arbitrary File Upload in SigmaForms Pro – AI Generated Forms <= 1.4.5 versions.
CVE-2026-52698
HIGH
17 Jun 2026
Subscriber Sensitive Data Exposure in PushEngage – Web Push Notifications, eCommerce Automation & Chat Widget <= 4.2.3 versions.
CVE-2026-52696
HIGH
17 Jun 2026
Unauthenticated Sensitive Data Exposure in JetBlog <= 2.4.8 versions.
CVE-2026-49778
HIGH
17 Jun 2026
Unauthenticated Cross Site Scripting (XSS) in WPFunnels Pro <= 2.9.4 versions.
CVE-2026-49767
CRITICAL
17 Jun 2026
Unauthenticated Broken Authentication in wpForo Forum <= 3.1.0 versions.
CVE-2026-49107
CRITICAL
17 Jun 2026
Unauthenticated PHP Object Injection in Thrive Apprentice < 10.8.10.2 versions.
CVE-2026-49084
CRITICAL
17 Jun 2026
Unauthenticated SQL Injection in JetEngine < 3.8.9.1 versions.
CVE-2026-49081
HIGH
17 Jun 2026
Unauthenticated Broken Access Control in User Registration Stripe <= 1.3.12 versions.
CVE-2026-49079
CRITICAL
17 Jun 2026
Unauthenticated SQL Injection in JetSearch <= 3.5.17 versions.
CVE-2026-49076
CRITICAL
17 Jun 2026
Unauthenticated SQL Injection in JetEngine <= 3.8.9.1 versions.
CVE-2026-49075
CRITICAL
17 Jun 2026
Contributor PHP Object Injection in JetEngine <= 3.8.9.1 versions.
CVE-2026-49074
HIGH
17 Jun 2026
Unauthenticated Cross Site Scripting (XSS) in JetEngine <= 3.8.9.1 versions.
CVE-2026-49072
MEDIUM
17 Jun 2026
Unauthenticated Broken Access Control in WooCommerce Anti-Fraud <= 7.2.6 versions.
CVE-2026-49071
MEDIUM
17 Jun 2026
Unauthenticated Broken Authentication in WooCommerce Dropshipping <= 5.2.4 versions.
Page 372 of 400
Page 372 of 400