CVE-2026-42637
MEDIUM 6.5
Unauthenticated Settings Change in PayPlug for WooCommerce (Official) <= 3.1.0 versions....
📅 2026-10-06
Inspect Dossier →
National Vulnerability Database • Synced Real-Time from NIST NVD & MITRE
Universal Security Vulnerabilities & CVE Catalog
Fast, deterministic intelligence across 396,747 official Common Vulnerabilities and Exposures (CVEs) with CVSS v3.1 vector breakdowns, threat severity scores, and verified remediation links.
Found 63,872 matching advisories
Page 153 of 2,662
CVE-2026-42636
HIGH 7.1
Unauthenticated Cross Site Scripting (XSS) in WP Cookie Notice for GDPR, CCPA & ePrivacy Consent <= 4.4.6 versions....
📅 2026-10-06
Inspect Dossier →
CVE-2026-42635
HIGH 7.1
Unauthenticated Cross Site Scripting (XSS) in WooCommerce Simple Auctions <= 3.0.10 versions....
📅 2026-10-06
Inspect Dossier →
CVE-2026-42634
HIGH 7.1
Unauthenticated Cross Site Scripting (XSS) in Video Background Block – Use video as background in the section. <= 2.0.3 versions....
📅 2026-10-06
Inspect Dossier →
CVE-2026-42418
HIGH 7.1
Unauthenticated Cross Site Scripting (XSS) in Social Rocket <= 1.3.5 versions....
📅 2026-10-06
Inspect Dossier →
📅 2026-10-06
Inspect Dossier →
📅 2026-10-06
Inspect Dossier →
CVE-2026-42415
CRITICAL 9.3
Unauthenticated SQL Injection in Porto Theme - Functionality <= 3.9.3 versions....
📅 2026-10-06
Inspect Dossier →
📅 2026-10-06
Inspect Dossier →
CVE-2026-42413
HIGH 7.5
Unauthenticated Sensitive Data Exposure in Snapshotify – All-in-One Backup & Restore & Migrate <= 1.3.2 versions....
📅 2026-10-06
Inspect Dossier →
CVE-2026-41562
HIGH 7.5
Unauthenticated Sensitive Data Exposure in Norvis Backup <= 1.1.0 versions....
📅 2026-10-06
Inspect Dossier →
CVE-2026-41561
HIGH 7.5
Unauthenticated Sensitive Data Exposure in Museder RestoreOne <= 2.7.276 versions....
📅 2026-10-06
Inspect Dossier →
CVE-2026-41560
HIGH 7.5
Unauthenticated Broken Access Control in WXD Backup Lite <= 1.0.2 versions....
📅 2026-10-06
Inspect Dossier →
CVE-2026-41559
HIGH 7.5
Unauthenticated Sensitive Data Exposure in SafeSnap – Verified WordPress Backup & Restore <= 2.1.2 versions....
📅 2026-10-06
Inspect Dossier →
CVE-2026-41555
CRITICAL 9.3
Unauthenticated SQL Injection in Newsletter Subscription Form – User Subscriptions Form, Capture Email <= 1.5.9 versions....
📅 2026-10-06
Inspect Dossier →
CVE-2026-40807
HIGH 7.1
Unauthenticated Cross Site Scripting (XSS) in CF7 Views – Complete Entry Management for Contact Form 7 <= 3.2.6 versions....
📅 2026-10-06
Inspect Dossier →
CVE-2026-40806
HIGH 7.1
Unauthenticated Cross Site Scripting (XSS) in Blog, Posts and Category Filter for Elementor <= 2.1.0 versions....
📅 2026-10-06
Inspect Dossier →
📅 2026-10-06
Inspect Dossier →
CVE-2026-39797
CRITICAL 9.8
Unauthenticated PHP Object Injection in GDPR Framework By Data443 <= 2.5.0 versions....
📅 2026-10-06
Inspect Dossier →
CVE-2026-39796
HIGH 7.5
Unauthenticated Broken Access Control in Advanced Posts Listing – Show Post List Easily <= 1.0.8 versions....
📅 2026-10-06
Inspect Dossier →
CVE-2026-39795
CRITICAL 9.3
Unauthenticated SQL Injection in SendPress Newsletters <= 1.26.1.20 versions....
📅 2026-10-06
Inspect Dossier →
CVE-2026-39794
HIGH 7.5
Unauthenticated Broken Access Control in WooCommerce Multivendor Marketplace – REST API <= 1.6.3 versions....
📅 2026-10-06
Inspect Dossier →
📅 2026-10-06
Inspect Dossier →
CVE-2026-39792
HIGH 8.6
Unauthenticated Arbitrary File Deletion in Simple File List <= 6.3.11 versions....
📅 2026-10-06
Inspect Dossier →
Showing Page 153 of 2,662
• 63,872 matching CVEs (out of 396,747 NIST advisories)