Unknown vulnerabilities

CVEs per yearBy the year they were published

1. 201813
2. 20191
3. 2021624
4. 20221,125
5. 2023936
6. 2024774
7. 2025597
8. 20262,143

Newest CVEs

• CVE-2026-122001

  Komfortkasse for WooCommerce < 1.4.9 - Administrator Account Creation via CSRF

  Unknown · Komfortkasse for WooCommerce

  Not scored
• CVE-2026-121866

  Exsile SMS Gateway < 2.0.0 - Subscriber+ Privilege Escalation via Arbitrary Option Update

  Unknown · iLeads SMS Gateway by Exsile

  Not scored
• CVE-2026-121858

  Event Tickets with Ticket Scanner < 3.2.9 - Authenticated SQLi via DataTables Search

  Unknown · Event Tickets with Ticket Scanner

  Not scored
• CVE-2026-121857

  Event Tickets with Ticket Scanner < 3.1.14 - Authenticated Ticket Data Disclosure and Removal via executeWCBackend

  Unknown · Event Tickets with Ticket Scanner

  Not scored
• CVE-2026-121848

  Magic Link < 2.2.6 - Subscriber+ Privilege Escalation via Magic Link Generation

  Unknown · Magic Link

  Not scored
• CVE-2026-121796

  Add From Server Reloaded < 6.0.0 - Author+ Stored XSS via SVG Upload

  Unknown · Add From Server Lite

  Not scored
• CVE-2026-121492

  Fiber Admin < 4.0.1 - Unauthenticated Arbitrary Post and Term Order Modification via fiad_cpo_update and fiad_cpo_tax_update

  Unknown · Fiber Admin

  Not scored
• CVE-2026-121491

  Fiber Admin 3.1.0 - 4.0.0 - Unauthenticated RCE via Host Header

  Unknown · Fiber Admin

  Not scored
• CVE-2026-121380

  Tournamatch < 4.7.1 - Unauthenticated Team Invitation Email Disclosure via REST API

  Unknown · Tournamatch

  Not scored
• CVE-2026-121379

  Tournamatch < 4.7.1 - Subscriber+ Arbitrary File Deletion

  Unknown · Tournamatch

  Not scored