CVE-2026-39726
7.1 HIGH 7.1Unauthenticated Cross Site Scripting (XSS) in Lumise Product Designer <= 2.1.1 versions.
CVE Vulnerability Database
Complete database of CVE vulnerabilities. Track critical security threats, exploits and patches. Updated daily from NVD NIST.
CVE-2026-39724
7.1 HIGH 7.1Unauthenticated Cross Site Scripting (XSS) in HTTP Requests Manager <= 1.3.11 versions.
CVE-2026-39722
7.1 HIGH 7.1Unauthenticated Cross Site Scripting (XSS) in WPLMS <= 4.972 versions.
CVE-2026-39720
7.1 HIGH 7.1Unauthenticated Cross Site Scripting (XSS) in Mapster WP Maps <= 2.0.4 versions.
CVE-2026-39719
7.2 HIGH 7.2Unauthenticated Server Side Request Forgery (SSRF) in PDF Smart Viewer for Elementor <= 1.0.4 versions.
CVE-2026-32581
7.1 HIGH 7.1Subscriber SQL Injection in Mooberry Book Manager 4.16.2 versions.
Subscriber
Details
CVE-2026-32580
7.5 HIGH 7.5Unauthenticated SQL Injection in WooCommerce Lottery <= 2.2.9 versions.
CVE-2026-32579
10.0 CRITICAL 10.0Unauthenticated Arbitrary File Upload in Kognetiks Chatbot for WordPress <= 2.4.9 versions.
WordPress
Details
CVE-2026-32578
7.1 HIGH 7.1Subscriber Broken Access Control in ECPay Ecommerce for WooCommerce <= 1.1.2606090 versions.
Subscriber
Details
CVE-2026-32577
7.1 HIGH 7.1Unauthenticated Cross Site Scripting (XSS) in Frontend File Manager <= 23.6 versions.
Statistics
Total
109628
Critical
11367
High
42704