The archive.

AgniHD1 vulnerability on this pageMax CVSS 9.8Priority 39KEV 0

CVE-2026-66465 · AgniHD Cartify

WordPress Cartify theme <= 1.3.0.1 - Account Takeover vulnerability

Dimitri Grassi1 vulnerability on this pageMax CVSS 9.8Priority 39KEV 0

CVE-2026-66453 · Dimitri Grassi Salon booking system

WordPress Salon booking system plugin <= 10.30.26 - Broken Authentication vulnerability

miniOrange4 vulnerabilities on this pageMax CVSS 9.8Priority 39KEV 0

CVE-2026-28008 · miniOrange OAuth Single Sign On – SSO (OAuth Client)

WordPress OAuth Single Sign On – SSO (OAuth Client) plugin <= 7.0.0 - Broken Authentication vulnerability

CVE-2026-28149 · miniOrange Headless Single Sign On

WordPress Headless Single Sign On plugin <= 1.6 - PHP Object Injection vulnerability

CVE-2026-61967 · miniOrange miniorange otp verification

WordPress miniorange otp verification plugin <= 5.5.1 - Privilege Escalation vulnerability

CVE-2026-28148 · miniOrange Headless Single Sign On

WordPress Headless Single Sign On plugin <= 1.6 - Bypass Vulnerability vulnerability

EPSS 0.3%CVSS 9.8

Priority5 vulnerabilities on this pageMax CVSS 10.0Priority 39KEV 0

CVE-2026-59500 · Priority Portal Generator addon to Priority ERP (developed by Soft Solutions)

Priority - CWE-287: Improper Authentication

EPSS 0.5%CVSS 10.0

CVE-2026-59503 · Priority Portal Generator addon to Priority ERP (developed by Soft Solutions)

Priority – CWE-200: Exposure of Sensitive Information to an Unauthorized Actor CWE-359: Exposure of Private Personal Information to an Unauthorized Actor

EPSS 0.4%CVSS 9.1

CVE-2026-59504 · Priority Portal Generator addon to Priority ERP (developed by Soft Solutions)

Priority – CWE-602: Client-Side Enforcement of Server-Side Security

EPSS 0.4%CVSS 9.1

CVE-2026-59506 · Priority Portal Generator addon to Priority ERP (developed by Soft Solutions)

Priority – CWE-306: Missing Authentication for Critical Function

CVE-2026-59507 · Priority Portal Generator addon to Priority ERP (developed by Soft Solutions)

Priority – CWE-798: Use of Hard-coded Credentials CWE-200: Exposure of Sensitive Information to an Unauthorized Actor CWE-284: Improper Access Control

EPSS 0.3%CVSS 9.3

Unknown2 vulnerabilities on this pageMax CVSS 10.0Priority 39KEV 0

CVE-2026-15413 · Unknown Link Factory

Link Factory - Backdoor

EPSS 0.5%CVSS 10.0

CVE-2026-14182 · Unknown Customer Email Verification for WooCommerce

Customer Email Verification for WooCommerce < 3.2.6 - Unauthenticated Account Takeover via Type-Juggling Authentication Bypass

Cozy Vision Technologies Pvt. Ltd.1 vulnerability on this pageMax CVSS 9.8Priority 38KEV 0

CVE-2026-66424 · Cozy Vision Technologies Pvt. Ltd. SMS Alert Order Notifications

WordPress SMS Alert Order Notifications plugin <= 3.9.7 - Privilege Escalation vulnerability

OpenStack1 vulnerability on this pageMax CVSS 9.6Priority 38KEV 0

CVE-2026-71193 · OpenStack Designate

In OpenStack Designate before 22.0.1, zone creation checks (_is_subzone, _is_superzone, and the duplicate-zone DB constraint) are scoped…

EPSS 0.5%CVSS 9.6

RsyncProject5 vulnerabilities on this pageMax CVSS 9.2Priority 38KEV 0

scriptsbundle1 vulnerability on this pageMax CVSS 9.8Priority 38KEV 0

CVE-2026-66691 · scriptsbundle Nokri

WordPress Nokri theme <= 1.6.6 - Broken Access Control vulnerability

andy_moyle1 vulnerability on this pageMax CVSS 9.3Priority 35KEV 0

CVE-2026-66478 · andy_moyle Church Admin

WordPress Church Admin plugin <= 5.1.1 - SQL Injection vulnerability

denishua1 vulnerability on this pageMax CVSS 9.3Priority 35KEV 0

CVE-2026-61966 · denishua WPJAM Basic

WordPress WPJAM Basic plugin <= 7.0.1 - SQL Injection vulnerability

everestthemes1 vulnerability on this pageMax CVSS 9.3Priority 35KEV 0

CVE-2026-66472 · everestthemes Everest Backup

WordPress Everest Backup plugin <= 2.3.12 - SQL Injection vulnerability

If-So Dynamic Content1 vulnerability on this pageMax CVSS 9.3Priority 35KEV 0

CVE-2026-66446 · If-So Dynamic Content If-So Dynamic Content Personalization

WordPress If-So Dynamic Content Personalization plugin <= 1.10 - SQL Injection vulnerability

RealMag7771 vulnerability on this pageMax CVSS 9.3Priority 35KEV 0

CVE-2026-66436 · RealMag777 Active Products Tables for WooCommerce

WordPress Active Products Tables for WooCommerce plugin <= 1.1.1 - SQL Injection vulnerability

Shamalli1 vulnerability on this pageMax CVSS 9.3Priority 35KEV 0

CVE-2026-28142 · Shamalli Web Directory Free

WordPress Web Directory Free plugin <= 1.7.13 - SQL Injection vulnerability

ThimPress1 vulnerability on this pageMax CVSS 9.3Priority 35KEV 0

CVE-2026-66458 · ThimPress RealPress

WordPress RealPress plugin <= 1.1.2 - SQL Injection vulnerability

Webilia Inc.1 vulnerability on this pageMax CVSS 9.3Priority 35KEV 0

CVE-2026-61969 · Webilia Inc. Listdom

WordPress Listdom plugin <= 5.6.0 - SQL Injection vulnerability

WPDirectoryKit1 vulnerability on this pageMax CVSS 9.3Priority 35KEV 0

CVE-2026-28001 · WPDirectoryKit WP Directory Kit

WordPress WP Directory Kit plugin <= 1.5.4 - SQL Injection vulnerability