Unknown vulnerabilities
6,099 published CVEs name Unknown among the affected products.
- Published CVEs
- 6,099
- Last 12 months
- 2,076
- Critical
- 376
- Known exploited
- 0
Critical 376High 1,254Medium 4,165Low 297Not scored 7
CVEs per yearBy the year they were published
- 20211
- 20216
- 20221,176
- 2022860
- 20238
- 202415
- 2025271
- 2025977
- 2025827
- 20261,955
- 20263
Newest CVEs
- CVE-2026-91075
Eupago Gateway For Woocommerce 4.5.0 - 4.7.5 - Unauthenticated Payment Confirmation Bypass
Unknown · Eupago Gateway For Woocommerce
Medium5.3 - CVE-2026-103327
CryptoCloud - Crypto Payment Gateway 3.0.0 - 3.0.1 - Unauthenticated Arbitrary Order Payment Forgery via Empty-Default Webhook Secret
Unknown · CryptoCloud
Medium5.3 - CVE-2026-104647
weMail <= 2.1.6 - Editor+ Incorrect Authorization via User::can()
Unknown · weMail
Not scored - CVE-2026-104648
weMail <= 2.1.6 - Editor+ API Key Disclosure
Unknown · weMail
Not scored - CVE-2026-103379
WATI Chat and Notification <= 1.1.8 - Unauthenticated Customer Order PII Disclosure via Leaked API Token
Unknown · WATI Chat and Notification
Not scored - CVE-2026-105967
Gallery for Social Photo <= 1.0.0.41 - Unauthenticated SSRF via next_url Parameter
Unknown · Gallery for Social Photo
Not scored - CVE-2026-106004
DT LMS <= 1.2 - Unauthenticated Arbitrary Course Completion Revocation
Unknown · DT LMS
Not scored - CVE-2026-105993
DT Directory Lite Addon <= 1.1 - Unauthenticated Plugin Settings Update
Unknown · DT Directory Lite Addon
Not scored - CVE-2026-115205
AZEXO Store Locator <= 1.4 - Subscriber+ Arbitrary Post Deletion via azt_delete_item
Unknown · AZEXO Store Locator
Not scored - CVE-2026-103310
PayHere Payment Gateway 2.4.0 - 2.4.5 - Unauthenticated Payment Bypass via Unverified Payment Notification
Unknown · PayHere Payment Gateway
Medium5.3
Products with the most CVEs
Most common weaknesses
- CWE-79 Cross-site scripting (XSS)2,144
- CWE-352 Cross-site request forgery (CSRF)583
- CWE-89 SQL injection451
- CWE-862 Missing authorization419
- CWE-200 Exposure of sensitive information237
- CWE-639 Authorization bypass through a user-controlled key (IDOR)219
- CWE-284 Improper access control130
- CWE-287 Improper authentication125
- CWE-434 Unrestricted file upload115
- CWE-863 Incorrect authorization100