Products: 20
Vulnerabilities: 32
Known Exploited: 0
0
Critical Level Threats
9
High Level Threats
23
Medium Level Threats
0
Low Level Threats
Vulnerabilities
100806040200
JanFebMarAprMayJunJulAugSepOctNovDec
Critical Level Threats
High Level Threats
Medium Level Threats
Low Level Threats
Products Security index
Actions
Items Per Page
Vulnerabilities
CVE-2026-77189
Charitable <= 1.8.12.1 - Authenticated (Contributor+) SQL Injection via 'order' Shortcode Attribute
Last Modified: Sep 02, 2026
Published: Sep 01, 2026
CVE-2026-3423
Envira Gallery <= 1.12.4 - Authenticated (Author+) Stored Cross-Site Scripting via Gallery Description
Last Modified: Aug 28, 2026
Published: Aug 28, 2026
CVE-2026-16775
Smash Balloon Social Post Feed <= 4.9.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'id' Shortcode Attribute
Last Modified: Aug 17, 2026
Published: Aug 16, 2026
CVE-2026-15452
Smash Balloon Social Photo Feed <= 6.11.3 - Reflected Cross-Site Scripting via REQUEST_URI Query String
Last Modified: Aug 05, 2026
Published: Aug 05, 2026
CVE-2026-12476
Easy Digital Downloads <= 3.6.9 - Authenticated (Shop Manager+) Arbitrary File Upload via 'edd-import-file' Parameter
Last Modified: Jul 29, 2026
Published: Jul 29, 2026
Items Per Page
