CVE Monitor
286241 CVEs found
CVE-2026-49058
CRITICAL
17 Jun 2026
Unauthenticated Privilege Escalation in LoginPress Pro <= 6.2.2 versions.
CVE-2026-48967
HIGH
17 Jun 2026
Subscriber SQL Injection in Geo Mashup <= 1.13.19 versions.
CVE-2026-48875
CRITICAL
17 Jun 2026
Unauthenticated SQL Injection in JetSmartFilters <= 3.8.1 versions.
CVE-2026-45436
MEDIUM
17 Jun 2026
Subscriber Broken Access Control in WPBakery Page Builder <= 8.7.2 versions.
CVE-2026-42629
HIGH
17 Jun 2026
Unauthenticated Broken Authentication in PowerPack Pro for Elementor < v2.13.0 versions.
CVE-2026-42385
HIGH
17 Jun 2026
Unauthenticated Cross Site Scripting (XSS) in Profile Builder Pro <= 3.15.0 versions.
CVE-2026-42380
CRITICAL
17 Jun 2026
Unauthenticated PHP Object Injection in AI Lab < 5.4.2 versions.
CVE-2026-41557
HIGH
17 Jun 2026
Unauthenticated Cross Site Scripting (XSS) in Kapee < 1.7.1 versions.
CVE-2026-40783
CRITICAL
17 Jun 2026
Contributor Remote Code Execution (RCE) in Blocksy Companion Pro <= 2.1.37 versions.
CVE-2026-40768
HIGH
17 Jun 2026
Unauthenticated Insecure Direct Object References (IDOR) in Salon booking system <= 10.30.24 versions.
CVE-2026-40765
HIGH
17 Jun 2026
Unauthenticated Cross Site Scripting (XSS) in collectchat <= 2.4.9 versions.
CVE-2026-40753
HIGH
17 Jun 2026
Unauthenticated PHP Object Injection in EasyMeals <= 1.5.1 versions.
CVE-2026-40749
CRITICAL
17 Jun 2026
Subscriber Arbitrary File Upload in Charity Zone <= 1.1.1 versions.
CVE-2026-40748
CRITICAL
17 Jun 2026
Subscriber Arbitrary File Upload in Kids Gift Shop <= 0.5.4 versions.
CVE-2026-40747
CRITICAL
17 Jun 2026
Subscriber Arbitrary File Upload in Ecommerce Zone <= 0.9.7 versions.
CVE-2026-40746
CRITICAL
17 Jun 2026
Subscriber Arbitrary File Upload in Restaurant Zone <= 0.7.8 versions.
CVE-2026-40735
HIGH
17 Jun 2026
Unauthenticated PHP Object Injection in Reina <= 2.1 versions.
CVE-2026-40731
HIGH
17 Jun 2026
Unauthenticated Local File Inclusion in ChapterOne <= 1.7 versions.
CVE-2026-40726
HIGH
17 Jun 2026
Unauthenticated Broken Access Control in User Registration Stripe <= 1.3.14 versions.
CVE-2026-40725
CRITICAL
17 Jun 2026
Unauthenticated PHP Object Injection in WooCommerce Product Filters < 2.0.6 versions.
CVE-2026-40724
MEDIUM
17 Jun 2026
CP Client Arbitrary File Download in Client Portal (Pro) <= 5.6.2 versions.
CVE-2026-40723
MEDIUM
17 Jun 2026
Subscriber Broken Access Control in Bricks Builder <= 2.1.4 versions.
CVE-2026-40721
HIGH
17 Jun 2026
Contributor Local File Inclusion in Element Pack Pro <= 9.0.6 versions.
CVE-2026-39597
HIGH
17 Jun 2026
Unauthenticated Cross Site Scripting (XSS) in WPZOOM Addons for Elementor <= 1.3.4 versions.
CVE-2026-39596
CRITICAL
17 Jun 2026
Unauthenticated SQL Injection in Blocksy Companion Pro < 2.1.29 versions.
Page 373 of 400