Search
35,912 CVEs · Medium severity
CVEs (35,912, showing first 500)
Only the first 500 CVEs (by current sort) are shown when searching without a keyword. Add a search term above to narrow the results.
Showing 426–450 of 35,912 (capped at 500)
| CVE ID | Severity | Patch | CVSS | Published ↓ | Description |
|---|---|---|---|---|---|
| CVE-2026-86611 | MEDIUM | Patched | 4.3 | 2026-10-21 | The Download Manager WordPress plugin before 3.3.71, Download Manager WordPress plugin before 7.5.9 does not have CSRF checks in some places, allowing attackers to make a l… |
| CVE-2026-81813 | MEDIUM | Patched | 6.8 | 2026-10-21 | The Elementor Website Builder WordPress plugin before 4.3.5 does not sanitize the text content of SVG files, checking only their elements and attributes, allowing users wi… |
| CVE-2026-81812 | MEDIUM | Patched | 6.4 | 2026-10-21 | The Elementor Website Builder WordPress plugin before 4.3.5 does not sanitize uploaded SVG files on every upload route, allowing users with the Author role and above to up… |
| CVE-2026-15261 | MEDIUM | Patched | 5.3 | 2026-10-21 | The TI WooCommerce Wishlist WordPress plugin before 2.13.0 does not enforce the same owner-only access control on its REST API that it applies on the front-end, allowing un… |
| CVE-2026-111957 | MEDIUM | Patched | 5.3 | 2026-10-21 | The SUMIT Payment Gateway for WooCommerce WordPress plugin before 4.0.0 does not bind the payment it confirms with the provider to the order being completed, nor check the … |
| CVE-2026-111956 | MEDIUM | Patched | 5.9 | 2026-10-21 | The WholesaleX WordPress plugin before 3.0.9 does not protect or remove the user-import file it keeps in a publicly accessible location under a predictable name, allowing … |
| CVE-2026-111955 | MEDIUM | Patched | 6.5 | 2026-10-21 | The WholesaleX WordPress plugin before 3.0.9 does not check that a stored account confirmation code is set before comparing it with the one supplied in a request, allowing… |
| CVE-2026-111947 | MEDIUM | Patched | 5.5 | 2026-10-21 | The Pricing Table WordPress Plugin WordPress plugin before 4.1.3 does not perform authorisation checks when duplicating a legacy pricing table, allowing users with the con… |
| CVE-2026-111596 | MEDIUM | Patched | 5.3 | 2026-10-21 | The Kliken: Ads + Pixel for Meta WordPress plugin before 1.2.3 does not verify that a visitor holds an order's key before outputting that order's details on the order confi… |
| CVE-2026-110982 | MEDIUM | Patched | 4.9 | 2026-10-21 | The AI Engine WordPress plugin before 3.8.6 does not check that the caller is allowed to edit the targeted object before updating its title and excerpt, allowing users wit… |
| CVE-2026-110651 | MEDIUM | Patched | 6.8 | 2026-10-21 | The Swift Performance Lite WordPress plugin before 2.3.7.4 does not properly sanitize and escape a value before using it in a SQL statement, which could allow users with th… |
| CVE-2026-110514 | MEDIUM | Patched | 4.9 | 2026-10-21 | The WPZOOM Portfolio Lite WordPress plugin before 1.4.34 does not check that a user is allowed to edit a post before changing its type and order, which could allow users w… |
| CVE-2026-109926 | MEDIUM | Patched | 4.3 | 2026-10-21 | The Productive Commerce WordPress plugin before 1.1.49 does not perform a capability check in one of its AJAX actions and exposes the nonce that guards it on every admin-a… |
| CVE-2026-108073 | MEDIUM | Patched | 5.3 | 2026-10-21 | The SureCart WordPress plugin before 4.9.5 does not restrict which related objects an anonymous visitor may include when reading a single upsell funnel through its REST AP… |
| CVE-2026-107790 | MEDIUM | Patched | 6.8 | 2026-10-21 | The HireZoot WordPress plugin before 4.1.1 does not sanitise and escape some of its stored data before outputting it in the admin dashboard, and additionally reverses the … |
| CVE-2026-107789 | MEDIUM | Patched | 5.3 | 2026-10-21 | The SmartyParcel WordPress plugin before 1.23.4 does not perform authorisation checks when serving shipping label downloads, allowing unauthenticated users to obtain the s… |
| CVE-2026-107788 | MEDIUM | Patched | 4.3 | 2026-10-21 | The SmartyParcel WordPress plugin before 1.23.4 does not perform authorisation checks when deleting shipping label records, allowing any authenticated user such as a subsc… |
| CVE-2026-107128 | MEDIUM | Patched | 5.0 | 2026-10-21 | The Uncanny Toolkit for LearnDash WordPress plugin before 3.8.2 does not verify that the acting user is permitted to manage the targeted accounts before changing their veri… |
| CVE-2026-106932 | MEDIUM | Patched | 6.5 | 2026-10-21 | The Moloni WordPress plugin before 5.0.14 does not perform capability or nonce checks on several of its authenticated AJAX actions, relying only on whether the site holds a… |
| CVE-2026-105999 | MEDIUM | Patched | 5.3 | 2026-10-21 | The Booking Package WordPress plugin before 1.7.31 does not perform authorization checks before returning calendar-account configuration in a response, allowing unauthentic… |
| CVE-2026-105998 | MEDIUM | Patched | 5.3 | 2026-10-21 | The Booking Package WordPress plugin before 1.7.31 does not perform any authorization or validity check before resetting its premium subscription state, allowing unauthenti… |
| CVE-2026-105996 | MEDIUM | Patched | 4.8 | 2026-10-21 | The Booking Package WordPress plugin before 1.7.31 does not generate booking cancellation tokens using a secure source of randomness, deriving them instead from values it e… |
| CVE-2026-105992 | MEDIUM | Patched | 5.3 | 2026-10-21 | The Ettrick Escape Room Booking WordPress plugin before 1.3.1 does not verify a booking's payment status against the payment provider before marking it paid and confirmed, … |
| CVE-2026-103302 | MEDIUM | Patched | 5.3 | 2026-10-21 | The Payment Gateway for Idram WordPress plugin before 2.1.6 does not verify the authenticity of incoming payment notifications, because the merchant credentials used to com… |
| CVE-2026-100145 | MEDIUM | Patched | 6.5 | 2026-10-21 | The Synchrony Financing WordPress plugin before 1.1.2 does not properly authorise requests to one of its REST routes that modifies WooCommerce orders, allowing unauthentica… |