| CVE-2026-32702 | 5.3 | medium | cleanuparr project / cleanuparr | Cleanuparr is a tool for automating the cleanup of unwanted or blocked files in Sonarr, Radarr, and supported down | 173d ago |
| CVE-2026-32630 | 5.3 | medium | sindresorhus / file-type | file-type detects the file type of a file, stream, or data. | 173d ago |
| CVE-2026-2456 | 5.3 | medium | mattermost / mattermost server | Mattermost versions 11.3.x <= 11.3.0, 11.2.x <= 11.2.2, 10.11.x <= 10.11.10 Mattermost fails to limit the size of r | 173d ago |
| CVE-2026-2233 | 5.3 | medium | — | The User Frontend: AI Powered Frontend Posting, User Directory, Profile, Membership & User Registration plugin for | 173d ago |
| CVE-2026-20996 | 5.3 | medium | samsung / smart switch | Use of a broken or risky cryptographic algorithm in Smart Switch prior to version 3.7.69.15 allows remote attacker | 173d ago |
| CVE-2026-20995 | 5.3 | medium | samsung / smart switch | Exposure of sensitive functionality to an unauthorized actor in Smart Switch prior to version 3.7.69.15 allows rem | 173d ago |
| CVE-2026-1870 | 5.3 | medium | — | The Thim Kit for Elementor – Pre-built Templates & Widgets for Elementor plugin for WordPress is vulnerable to unau | 173d ago |
| CVE-2025-69243 | 5.3 | medium | raytha / raytha | Raytha CMS is vulnerable to User Enumeration in password reset functionality. | 173d ago |
| CVE-2025-13460 | 5.3 | medium | ibm / aspera console | IBM Aspera Console 3.3.0 through 3.4.8 could allow an attacker to enumerate usernames due to an observable respons | 173d ago |
| CVE-2025-13212 | 5.3 | medium | ibm / aspera console | IBM Aspera Console 3.3.0 through 3.4.8 could allow an authenticated user to cause a denial of service in the email | 173d ago |
| CVE-2016-20035 | 5.3 | medium | wowza / streaming engine | Wowza Streaming Engine 4.5.0 contains a cross-site request forgery vulnerability that allows attackers to perform | 173d ago |
| CVE-2015-20117 | 5.3 | medium | nextclickventures / realtyscript | Next Click Ventures RealtyScript 4.0.2 contains a cross-site request forgery vulnerability that allows unauthentic | 173d ago |
| CVE-2015-20113 | 5.3 | medium | nextclickventures / realtyscript | Next Click Ventures RealtyScript 4.0.2 contains cross-site request forgery and persistent cross-site scripting vul | 173d ago |
| CVE-2013-20005 | 5.3 | medium | — | Qool CMS 2.0 RC2 contains a cross-site request forgery vulnerability that allows attackers to perform administrati | 173d ago |
| CVE-2026-32543 | 5.3 | medium | — | Missing Authorization vulnerability in CyberChimps Responsive Blocks responsive-block-editor-addons allows Exploit | 176d ago |
| CVE-2026-32487 | 5.3 | medium | — | Missing Authorization vulnerability in raratheme Lawyer Landing Page lawyer-landing-page allows Exploiting Incorre | 176d ago |
| CVE-2026-32486 | 5.3 | medium | — | Missing Authorization vulnerability in wptravelengine Travel Booking travel-booking allows Exploiting Incorrectly | 176d ago |
| CVE-2026-32457 | 5.3 | medium | — | Missing Authorization vulnerability in Wombat Plugins Advanced Product Fields (Product Addons) for WooCommerce adv | 176d ago |
| CVE-2026-32453 | 5.3 | medium | — | Missing Authorization vulnerability in ThemeFusion Avada Core fusion-core allows Exploiting Incorrectly Configured | 176d ago |
| CVE-2026-32452 | 5.3 | medium | — | Missing Authorization vulnerability in ThemeFusion Fusion Builder fusion-builder allows Exploiting Incorrectly Con | 176d ago |
| CVE-2026-32440 | 5.3 | medium | — | Missing Authorization vulnerability in Ex-Themes WP Food wp-food allows Exploiting Incorrectly Configured Access C | 176d ago |
| CVE-2026-32439 | 5.3 | medium | — | Missing Authorization vulnerability in WebGeniusLab BigHearts bighearts allows Exploiting Incorrectly Configured A | 176d ago |
| CVE-2026-32438 | 5.3 | medium | — | Missing Authorization vulnerability in vowelweb VW School Education vw-school-education allows Exploiting Incorrec | 176d ago |
| CVE-2026-32437 | 5.3 | medium | — | Missing Authorization vulnerability in vowelweb VW Portfolio vw-portfolio allows Exploiting Incorrectly Configured | 176d ago |
| CVE-2026-32436 | 5.3 | medium | — | Missing Authorization vulnerability in vowelweb VW Photography vw-photography allows Exploiting Incorrectly Config | 176d ago |
| CVE-2026-32435 | 5.3 | medium | — | Missing Authorization vulnerability in vowelweb VW Pet Shop vw-pet-shop allows Exploiting Incorrectly Configured A | 176d ago |
| CVE-2026-32434 | 5.3 | medium | — | Missing Authorization vulnerability in vowelweb VW Fitness vw-fitness allows Exploiting Incorrectly Configured Acc | 176d ago |
| CVE-2026-32432 | 5.3 | medium | — | Missing Authorization vulnerability in codepeople WP Time Slots Booking Form wp-time-slots-booking-form allows Exp | 176d ago |
| CVE-2026-32428 | 5.3 | medium | — | Missing Authorization vulnerability in Ays Pro Popup Like box ays-facebook-popup-likebox allows Exploiting Incorre | 176d ago |
| CVE-2026-32427 | 5.3 | medium | — | Missing Authorization vulnerability in vowelweb VW Education Lite vw-education-lite allows Exploiting Incorrectly | 176d ago |
| CVE-2026-32425 | 5.3 | medium | — | Missing Authorization vulnerability in linknacional Payment Gateway Pix For GiveWP payment-gateway-pix-for-givewp | 176d ago |
| CVE-2026-32421 | 5.3 | medium | — | Missing Authorization vulnerability in Agile Logix Post Timeline post-timeline allows Exploiting Incorrectly Confi | 176d ago |
| CVE-2026-32413 | 5.3 | medium | — | Missing Authorization vulnerability in Maciej Bis Permalink Manager Lite permalink-manager allows Exploiting Incor | 176d ago |
| CVE-2026-32410 | 5.3 | medium | — | Missing Authorization vulnerability in WBW Plugins WBW Currency Switcher for WooCommerce woo-currency allows Explo | 176d ago |
| CVE-2026-32409 | 5.3 | medium | — | Missing Authorization vulnerability in WPMU DEV - Your All-in-One WordPress Platform Forminator forminator allows | 176d ago |
| CVE-2026-32405 | 5.3 | medium | — | Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in xtemos WoodMart woodma | 176d ago |
| CVE-2026-32404 | 5.3 | medium | — | Missing Authorization vulnerability in Studio99 Studio99 WP Monitor studio99-wp-monitor allows Exploiting Incorrec | 176d ago |
| CVE-2026-32402 | 5.3 | medium | — | Missing Authorization vulnerability in Ays Pro Image Slider by Ays ays-slider allows Exploiting Incorrectly Config | 176d ago |
| CVE-2026-32397 | 5.3 | medium | — | Missing Authorization vulnerability in YMC Filter & Grids ymc-smart-filter allows Exploiting Incorrectly Configure | 176d ago |
| CVE-2026-32396 | 5.3 | medium | — | Missing Authorization vulnerability in RadiusTheme Team tlp-team allows Exploiting Incorrectly Configured Access C | 176d ago |
| CVE-2026-32395 | 5.3 | medium | — | Missing Authorization vulnerability in Xpro Xpro Addons For Beaver Builder – Lite xpro-addons-beaver-builder-eleme | 176d ago |
| CVE-2026-32387 | 5.3 | medium | — | Missing Authorization vulnerability in Noor Alam Checkout for PayPal checkout-for-paypal allows Exploiting Incorre | 176d ago |
| CVE-2026-32383 | 5.3 | medium | — | Missing Authorization vulnerability in raratheme Ridhi ridhi allows Exploiting Incorrectly Configured Access Contr | 176d ago |
| CVE-2026-32382 | 5.3 | medium | — | Missing Authorization vulnerability in raratheme Digital Download digital-download allows Exploiting Incorrectly C | 176d ago |
| CVE-2026-32381 | 5.3 | medium | — | Missing Authorization vulnerability in raratheme App Landing Page app-landing-page allows Exploiting Incorrectly C | 176d ago |
| CVE-2026-32380 | 5.3 | medium | — | Missing Authorization vulnerability in raratheme Numinous numinous allows Exploiting Incorrectly Configured Access | 176d ago |
| CVE-2026-32379 | 5.3 | medium | — | Missing Authorization vulnerability in raratheme Rara Academic rara-academic allows Exploiting Incorrectly Configu | 176d ago |
| CVE-2026-32378 | 5.3 | medium | — | Missing Authorization vulnerability in raratheme Book Landing Page book-landing-page allows Exploiting Incorrectly | 176d ago |
| CVE-2026-32377 | 5.3 | medium | — | Missing Authorization vulnerability in raratheme Pranayama Yoga pranayama-yoga allows Exploiting Incorrectly Confi | 176d ago |
| CVE-2026-32376 | 5.3 | medium | — | Missing Authorization vulnerability in raratheme Kalon kalon allows Exploiting Incorrectly Configured Access Contr | 176d ago |
| CVE-2026-32375 | 5.3 | medium | — | Missing Authorization vulnerability in raratheme Travel Diaries travel-diaries allows Exploiting Incorrectly Confi | 176d ago |
| CVE-2026-32374 | 5.3 | medium | — | Missing Authorization vulnerability in raratheme The Minimal the-minimal allows Exploiting Incorrectly Configured | 176d ago |
| CVE-2026-32372 | 5.3 | medium | — | Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in RadiusTheme ShopBuilde | 176d ago |
| CVE-2026-32371 | 5.3 | medium | — | Missing Authorization vulnerability in raratheme Elegant Pink elegant-pink allows Exploiting Incorrectly Configure | 176d ago |
| CVE-2026-32370 | 5.3 | medium | — | Missing Authorization vulnerability in raratheme Influencer influencer allows Exploiting Incorrectly Configured Ac | 176d ago |
| CVE-2026-32363 | 5.3 | medium | — | Missing Authorization vulnerability in Funlus Oy WPLifeCycle free-php-version-info allows Exploiting Incorrectly C | 176d ago |
| CVE-2026-32362 | 5.3 | medium | — | Missing Authorization vulnerability in activity-log.com WP Sessions Time Monitoring Full Automatic activitytime al | 176d ago |
| CVE-2026-32354 | 5.3 | medium | — | Insertion of Sensitive Information Into Sent Data vulnerability in magepeopleteam WpEvently mage-eventpress allows | 176d ago |
| CVE-2026-32350 | 5.3 | medium | — | Missing Authorization vulnerability in wpradiant Chocolate House chocolate-house allows Exploiting Incorrectly Con | 176d ago |
| CVE-2026-32348 | 5.3 | medium | — | Missing Authorization vulnerability in MadrasThemes MAS Videos masvideos allows Exploiting Incorrectly Configured | 176d ago |
