RouterCVE

Search

Published: All 7d 30d 90d 12m
Severity: All Critical High Medium Low

158,556 CVEs · Medium severity

Hide EOL products

CVEs (158,556, showing first 500)

Only the first 500 CVEs (by current sort) are shown when searching without a keyword. Add a search term above to narrow the results.

Showing 126–150 of 158,556 (capped at 500)

CVE ID Severity Patch CVSS Published ↓ Description
CVE-2026-27372 MEDIUM 6.5 2026-07-23 Unauthenticated Sensitive Data Exposure in PeproDev Ultimate Invoice <= 2.2.6 versions.
CVE-2026-27355 MEDIUM 5.3 2026-07-23 Unauthenticated Broken Access Control in Ditty <= 3.1.66 versions.
CVE-2026-25466 MEDIUM 5.3 2026-07-23 Unauthenticated Broken Access Control in WP Go Maps <= 10.1.04 versions.
CVE-2026-25427 MEDIUM 5.4 2026-07-23 Subscriber Broken Access Control in eRoom <= 1.7.1 versions.
CVE-2026-25424 MEDIUM 4.3 2026-07-23 Contributor Broken Access Control in Mediavine Control Panel <= 2.10.10 versions.
CVE-2026-24639 MEDIUM 4.4 2026-07-23 Author Server Side Request Forgery (SSRF) in Photo Block <= 1.7.1 versions.
CVE-2026-24628 MEDIUM 5.9 2026-07-23 Administrator Cross Site Scripting (XSS) in Photo Gallery by Supsystic <= 1.16.3 versions.
CVE-2026-24537 MEDIUM 4.3 2026-07-23 Unauthenticated Cross Site Request Forgery (CSRF) in WP Accessibility Helper (WAH) <= 0.6.6 versions.
CVE-2025-68081 MEDIUM 5.9 2026-07-23 Administrator Cross Site Scripting (XSS) in WP-Polls <= 2.77.3 versions.
CVE-2026-65756 MEDIUM 6.1 2026-07-23 Joomla Extension - regularlabs.com - XSS vector in Keyboard Shortcuts extension - Shortcut configuration accepted arbitrary inline JavaScript.
CVE-2026-16078 MEDIUM 6.5 2026-07-23 The WCPOS – Point of Sale (POS) plugin for WooCommerce plugin for WordPress is vulnerable to Directory Traversal in all versions up to, and including, 1.9.8 via the 'type' &hellip;
CVE-2026-15906 MEDIUM 6.5 2026-07-23 The Premium Packages – Sell Digital Products Securely plugin for WordPress is vulnerable to generic SQL Injection via the 'orderby' parameter in all versions up to, and inc&hellip;
CVE-2026-15827 MEDIUM 5.3 2026-07-23 The GutenKit Blocks plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the /wp-json/gutenkit/v1/mailchimp/get/lists and &hellip;
CVE-2026-15794 MEDIUM 6.4 2026-07-23 The Grid/List View for WooCommerce plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'position' Shortcode Attribute in all versions up to, and including&hellip;
CVE-2026-15786 MEDIUM 4.9 2026-07-23 The WP Encryption – One Click Free SSL Certificate & SSL / HTTPS Redirect, Security & SSL Scan plugin for WordPress is vulnerable to Directory Traversal in all versions up &hellip;
CVE-2026-15761 MEDIUM 6.5 2026-07-23 The Tickera – Sell Tickets & Manage Events plugin for WordPress is vulnerable to generic SQL Injection via the 'tc_event_filter' parameter in all versions up to, and includ&hellip;
CVE-2026-15647 MEDIUM 4.4 2026-07-23 The Brands for WooCommerce plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'br_brand_tooltip' Term Meta Field in all versions up to, and including, 3.&hellip;
CVE-2026-15646 MEDIUM 6.4 2026-07-23 The Brands for WooCommerce plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'style' Shortcode Attribute in all versions up to, and including, 3.8.8 due&hellip;
CVE-2026-15448 MEDIUM 6.5 2026-07-23 The Tickera – Sell Tickets & Manage Events plugin for WordPress is vulnerable to generic SQL Injection via the 'tc_order_status_filter' parameter in all versions up to, and&hellip;
CVE-2026-15404 MEDIUM 6.4 2026-07-23 The Lpagery plugin for WordPress is vulnerable to Stored Cross-Site Scripting via post titles in versions up to, and including, 2.5.7. This is due to insufficient input san&hellip;
CVE-2026-15394 MEDIUM 6.4 2026-07-23 The Header Footer Script Adder – Insert Code in Header, Body & Footer plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'asm_code' Snippet Meta in all v&hellip;
CVE-2026-15348 MEDIUM 6.3 2026-07-23 The Premium Packages – Sell Digital Products Securely plugin for WordPress is vulnerable to Authentication Bypass in all versions up to, and including, 7.0.4 via the `wpdmp&hellip;
CVE-2026-14481 MEDIUM 6.4 2026-07-23 The Equalize Digital Accessibility Checker – WCAG, ADA, EAA and Section 508 compliance plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'html' para&hellip;
CVE-2026-13119 MEDIUM 6.5 2026-07-23 The Registrations For The Events Calendar plugin for WordPress is vulnerable to SQL Injection via JSON keys in the 'standard' parameter handled by the rtec_records_edit AJA&hellip;
CVE-2026-13009 MEDIUM 6.5 2026-07-23 The AI Copilot – Content Generator plugin for WordPress is vulnerable to generic SQL Injection via 'order[0][dir]' Parameter in all versions up to, and including, 1.5.4 due&hellip;