| CVE-2026-0156 | 7.5 | — | — | — | google / android | In checkSsrcCollisionOnRcv of RtpSession.cpp, there is a possible memory safety issue due to a missing null check. | 134d ago |
| CVE-2026-12398 | 7.5 | — | — | — | — | A command injection vulnerability was found in galaxy_ng. | 134d ago |
| CVE-2026-12317 | 7.5 | — | — | — | mozilla / firefox | Memory safety bug fixed in Firefox 152. | 134d ago |
| CVE-2026-12314 | 7.5 | — | — | — | mozilla / firefox | Memory safety bug fixed in Firefox 152. | 134d ago |
| CVE-2026-12312 | 7.5 | — | — | — | mozilla / firefox | Memory safety bug fixed in Firefox 152. | 134d ago |
| CVE-2026-12310 | 7.5 | — | — | — | mozilla / firefox | Memory safety bug fixed in Firefox 152. | 134d ago |
| CVE-2026-12305 | 7.5 | — | — | — | mozilla / firefox | Memory safety bug fixed in Firefox 152. | 134d ago |
| CVE-2026-8176 | 7.5 | — | — | — | — | The LatePoint – Calendar Booking Plugin for Appointments and Events plugin for WordPress is vulnerable to Privilege | 134d ago |
| CVE-2026-52711 | 7.5 | — | — | — | — | Unauthenticated Broken Access Control in WooCommerce POS <= 1.8.14 versions. | 134d ago |
| CVE-2026-39490 | 7.5 | — | — | — | — | Unauthenticated Broken Access Control in JupiterX Core <= 4.14.1 versions. | 134d ago |
| CVE-2025-68045zero day | 7.5 | 0.22% | 1/3 | 1d before | — | Unauthenticated Broken Access Control in WP Event SOlution <= 4.1.12 versions. | 134d ago |
| CVE-2026-52699 | 7.5 | — | — | — | — | Unauthenticated Insecure Direct Object References (IDOR) in VikRentCar <= 1.4.5 versions. | 135d ago |
| CVE-2026-52695 | 7.5 | — | — | — | — | Unauthenticated Sensitive Data Exposure in ABC Crypto Checkout <= 1.8.2 versions. | 135d ago |
| CVE-2026-52694 | 7.5 | — | — | — | — | Unauthenticated Sensitive Data Exposure in Signature Add-On for WooCommerce <= 2.0 versions. | 135d ago |
| CVE-2026-52692 | 7.5 | — | — | — | — | Unauthenticated Sensitive Data Exposure in Affiliates Manager <= 2.9.50 versions. | 135d ago |
| CVE-2026-49112 | 7.5 | — | — | — | — | Unauthenticated Path Traversal in Shared Files <= 1.7.64 versions. | 135d ago |
| CVE-2026-49110 | 7.5 | — | — | — | — | Unauthenticated Broken Authentication in Upsell Order Bump Offer for WooCommerce <= 3.1.4 versions. | 135d ago |
| CVE-2026-49083exploited | 7.5 | 0.34% | 1/3 | +129d | — | Contributor Privilege Escalation in LatePoint <= 5.5.1 versions. | 135d ago |
| CVE-2026-49078 | 7.5 | — | — | — | — | Unauthenticated Other Vulnerability Type in WP Travel Engine <= 6.7.10 versions. | 135d ago |
| CVE-2026-49070 | 7.5 | — | — | — | — | Unauthenticated Broken Access Control in Knit Pay <= 9.4.0.0 versions. | 135d ago |
| CVE-2026-49068 | 7.5 | — | — | — | — | Subscriber Sensitive Data Exposure in Coupon Affiliates <= 7.8.1 versions. | 135d ago |
| CVE-2026-49066 | 7.5 | — | — | — | — | Unauthenticated Sensitive Data Exposure in Conekta Payment Gateway <= 6.0.0 versions. | 135d ago |
| CVE-2026-49061 | 7.5 | — | — | — | — | Unauthenticated Arbitrary File Download in WPC Product Options for WooCommerce <= 3.2.1 versions. | 135d ago |
| CVE-2026-49056 | 7.5 | — | — | — | — | Unauthenticated Sensitive Data Exposure in WooCommerce PDF Invoices, Packing Slips, Delivery Notes and Shipping La | 135d ago |
| CVE-2026-48883 | 7.5 | — | — | — | — | Unauthenticated Broken Access Control in WPC Product Bundles for WooCommerce <= 8.5.3 versions. | 135d ago |
| CVE-2026-48873 | 7.5 | — | — | — | — | Unauthenticated Broken Access Control in Montonio for WooCommerce <= 10.1.2 versions. | 135d ago |
| CVE-2026-48872 | 7.5 | — | — | — | — | Unauthenticated Sensitive Data Exposure in EmbedPress <= 4.5.2 versions. | 135d ago |
| CVE-2026-48868 | 7.5 | — | — | — | — | Unauthenticated Insecure Direct Object References (IDOR) in Simple Shopping Cart <= 5.2.9 versions. | 135d ago |
| CVE-2026-48835 | 7.5 | — | — | — | — | Unauthenticated Broken Access Control in Contact Form by WPForms <= 1.10.0.4 versions. | 135d ago |
| CVE-2026-48708 | 7.5 | — | — | — | — | OliveTin gives access to predefined shell commands from a web interface. | 135d ago |
| CVE-2026-47261 | 7.5 | — | — | — | bytecodealliance / wasmtime | Wasmtime is a runtime for WebAssembly. | 135d ago |
| CVE-2026-45441 | 7.5 | — | — | — | — | Unauthenticated Other Vulnerability Type in WpEvently <= 5.3.3 versions. | 135d ago |
| CVE-2026-42668 | 7.5 | — | — | — | — | Unauthenticated Broken Authentication in Email Marketing for WooCommerce by Omnisend <= 1.18.0 versions. | 135d ago |
| CVE-2026-42667 | 7.5 | — | — | — | — | Unauthenticated Sensitive Data Exposure in Bookly <= 27.4 versions. | 135d ago |
| CVE-2026-42666 | 7.5 | — | — | — | — | Unauthenticated Broken Access Control in Salon booking system <= 10.30.25 versions. | 135d ago |
| CVE-2026-42384 | 7.5 | — | — | — | — | Unauthenticated Sensitive Data Exposure in Simply Schedule Appointments < 1.6.11.2 versions. | 135d ago |
| CVE-2026-40789 | 7.5 | — | — | — | — | Unauthenticated Sensitive Data Exposure in Amelia <= 2.2 versions. | 135d ago |
| CVE-2026-40781 | 7.5 | — | — | — | — | Unauthenticated Broken Authentication in ReviewX <= 2.3.6 versions. | 135d ago |
| CVE-2026-40776 | 7.5 | — | — | — | — | Unauthenticated Broken Access Control in WP Event SOlution <= 4.1.8 versions. | 135d ago |
| CVE-2026-40774 | 7.5 | — | — | — | — | Unauthenticated Broken Access Control in Booking Package <= 1.7.06 versions. | 135d ago |
| CVE-2026-40767 | 7.5 | — | — | — | — | Unauthenticated Broken Access Control in wpForo Forum < 3.0.2 versions. | 135d ago |
| CVE-2026-40762 | 7.5 | — | — | — | — | Unauthenticated SQL Injection in WPGraphQL < 2.11.1 versions. | 135d ago |
| CVE-2026-40741 | 7.5 | — | — | — | — | Unauthenticated Broken Access Control in Redsys for WooCommerce Light <= 7.0.0 versions. | 135d ago |
| CVE-2026-39534 | 7.5 | — | — | — | — | Unauthenticated Broken Access Control in WP Directory Kit <= 1.5.0 versions. | 135d ago |
| CVE-2026-39533 | 7.5 | — | — | — | — | Unauthenticated Broken Access Control in AWP Classifieds <= 4.4.4 versions. | 135d ago |
| CVE-2026-39524 | 7.5 | — | — | — | — | Unauthenticated Broken Access Control in Masteriyo - LMS <= 2.1.5 versions. | 135d ago |
| CVE-2026-39513 | 7.5 | — | — | — | — | Unauthenticated Broken Access Control in Easy Appointments <= 3.12.21 versions. | 135d ago |
| CVE-2026-39503 | 7.5 | — | — | — | — | Unauthenticated Broken Access Control in Easy Digital Downloads <= 3.6.5 versions. | 135d ago |
| CVE-2026-39480 | 7.5 | — | — | — | — | Unauthenticated Sensitive Data Exposure in Backup Migration <= 2.1.1 versions. | 135d ago |
| CVE-2026-34898 | 7.5 | — | — | — | — | Unauthenticated Broken Access Control in Event Tickets Manager for WooCommerce <= 1.5.3 versions. | 135d ago |
| CVE-2026-34891 | 7.5 | — | — | — | — | Unauthenticated Sensitive Data Exposure in IDPay Payment Gateway for Woocommerce <= 2.2.5 versions. | 135d ago |
| CVE-2026-34886 | 7.5 | — | — | — | — | Unauthenticated Broken Access Control in Simple Membership <= 4.7.1 versions. | 135d ago |
| CVE-2026-27089 | 7.5 | — | — | — | — | Unauthenticated Bypass Vulnerability in WpTravelly <= 2.1.7 versions. | 135d ago |
| CVE-2026-25425 | 7.5 | — | — | — | — | Unauthenticated Broken Access Control in User Registration <= 5.1.2 versions. | 135d ago |
| CVE-2025-59133 | 7.5 | — | — | — | — | Custom role Insecure Direct Object References (IDOR) in Projectopia <= 5.1.25.2 versions. | 135d ago |
| CVE-2026-50889 | 7.5 | — | — | — | lldap / lldap | An input handling flaw in the HTTP refresh token process of LLDAP v0.6.2 allows attackers to cause a Denial of Ser | 135d ago |
| CVE-2026-50885 | 7.5 | — | — | — | — | Incorrect access control in the share-based read endpoints of Sismics Docs (Teedy) v1.11 allow unauthorized attack | 135d ago |
| CVE-2026-50882 | 7.5 | — | — | — | — | An issue in the /api/v0/pastes endpoint of anna-is-cute paste v0.1.1 allows attackers to cause a Denial of Service | 135d ago |
| CVE-2026-50879 | 7.5 | — | — | — | — | An issue in the uploadPostHandler component of Andrei Marcu linx-server v2.3.8 allows attackers to cause a Denial | 135d ago |
| CVE-2026-50878 | 7.5 | — | — | — | — | An issue in the attachment handling component of Feuerhamster MailForm v1.1.0 allows attackers to cause a Denial o | 135d ago |
