Unknown vulnerabilities

CVEs per yearBy the year they were published

1. 20211
2. 20216
3. 20221,176
4. 2022860
5. 20238
6. 202415
7. 2025271
8. 2025977
9. 2025827
10. 20261,987
11. 20263

Newest CVEs

• CVE-2026-118983

  VikWidgetsLoader < 1.12.3 - Contributor+ Stored XSS via Speakers and Cookies Policy Blocks

  Unknown · VikWidgetsLoader

  Not scored
• CVE-2026-118783

  All-in-One Video Gallery < 5.0.0 - Contributor+ Stored XSS via Shortcode Attribute

  Unknown · All-in-One Video Gallery

  Not scored
• CVE-2026-118637

  Simple Download Monitor < 4.1.3 - Contributor+ Private Download Item Title and Description Disclosure via [sdm_show_download_info] Shortcode

  Unknown · Simple Download Monitor

  Not scored
• CVE-2026-118523

  EventPrime < 4.3.6.1 - Unauthenticated Pending Post Disclosure via Public Post Status Override

  Unknown · EventPrime

  Not scored
• CVE-2026-118422

  Stape Conversion Tracking 2.3.0 - 2.3.10 - Unauthenticated SSRF and Same-Origin XSS via Proxy Sub-Path

  Unknown · Stape Conversion Tracking

  Not scored
• CVE-2026-118407

  Premium Packages < 7.3.1 - Subscriber+ Guest Order Takeover

  Unknown · Premium Packages

  Not scored
• CVE-2026-118404

  Premium Packages < 7.3.1 - Unauthenticated Cross-User Saved Cart Disclosure via IDOR

  Unknown · Premium Packages

  Not scored
• CVE-2026-118403

  Premium Packages < 7.3.1 - Unauthenticated Guest Order Status Disclosure

  Unknown · Premium Packages

  Not scored
• CVE-2026-115426

  WPvivid Backup & Migration < 0.9.138 - Admin+ Path Traversal via Local Backup Directory Setting

  Unknown · WPvivid — Backup, Migration & Staging

  Not scored
• CVE-2026-115262

  Duplicator < 5.1.0 - Subscriber+ SQLi via Charset and Collation Rewriter During Restore

  Unknown · Duplicator

  Not scored