Employer / Sales Representative Arbitrary File Upload in Workreap Core <= 3.4.5 versions....
Universal Security Vulnerabilities & CVE Catalog
Fast, deterministic intelligence across 396,747 official Common Vulnerabilities and Exposures (CVEs) with CVSS v3.1 vector breakdowns, threat severity scores, and verified remediation links.
Unauthenticated Cross Site Scripting (XSS) in Midtrans-WooCommerce <= 2.32.3 versions....
Unauthenticated Insecure Direct Object References (IDOR) in Wappointment <= 2.7.7 versions....
Contributor Arbitrary File Download in Piotnet Addons For Elementor <= 7.1.71 versions....
Contributor Arbitrary File Deletion in Jobs for WordPress <= 2.8.2 versions....
Unauthenticated Broken Access Control in PayPlug for WooCommerce (Official) <= 3.1.0 versions....
Unauthenticated Cross Site Scripting (XSS) in StoreGrowth: Smart Sales Booster for WooCommerce | BOGO, Upsells, Direct Checkout, Quick View, Side Cart <= 2.0.6 versions....
Subscriber Broken Access Control in App for Cloudflareยฎ <= 1.10.1 versions....
Unauthenticated Cross Site Scripting (XSS) in Contact Form to DB by BestWebSoft <= 1.7.6 versions....
Unauthenticated Cross Site Scripting (XSS) in Database for CF7 <= 1.2.6 versions....
Missing Authorization vulnerability in Marcin Wise Chat wise-chat allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Wise Chat: from n/a through 3.4.2....
Unauthenticated Sensitive Data Exposure in Edwiser Bridge <= 4.3.4 versions....
Unauthenticated Server Side Request Forgery (SSRF) in Instapage Plugin <= 3.7.2 versions....
Subscriber Cross Site Scripting (XSS) in WC Fields Factory <= 4.1.12 versions....
Unauthenticated Cross Site Scripting (XSS) in Lumise Product Designer <= 2.1.1 versions....
Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. Duplicate toย CVE-2026-1829....
Unauthenticated Cross Site Scripting (XSS) in HTTP Requests Manager <= 1.3.11 versions....