CVE-2026-104672
7.1 HIGH 7.1Unauthenticated Cross Site Scripting (XSS) in GiveWP <= 4.17.0 versions.
CVE Vulnerability Database
Complete database of CVE vulnerabilities. Track critical security threats, exploits and patches. Updated daily from NVD NIST.
CVE-2026-104670
7.1 HIGH 7.1Unauthenticated Cross Site Scripting (XSS) in LearnPress <= 4.4.9 versions.
CVE-2026-104406
7.3 HIGH 7.3Unauthenticated Broken Access Control in picu <= 3.10.1 versions.
CVE-2026-104405
8.1 HIGH 8.1Unauthenticated Privilege Escalation in GiveWP <= 4.17.0 versions.
CVE-2026-104399
6.9 MEDIUM 6.9Insertion of Sensitive Information Into Sent Data vulnerability in StylemixThemes Motors allows Retrieve Embedded Sensitive Data. This issue affects Motors: from n/a through 1.4.124.
Insertion
Details
CVE-2026-104395
7.1 HIGH 7.1Unauthenticated Cross Site Scripting (XSS) in picu <= 3.10.1 versions.
CVE-2026-104394
7.1 HIGH 7.1Unauthenticated Cross Site Scripting (XSS) in Charitable <= 1.8.12.3 versions.
CVE-2026-104387
7.2 HIGH 7.2Unauthenticated Broken Access Control in PowerPress Podcasting <= 11.17.9 versions.
CVE-2026-104385
7.5 HIGH 7.5Unauthenticated Sensitive Data Exposure in Groundhogg <= 4.8.3 versions.
CVE-2026-103346
7.1 HIGH 7.1Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Tomlister Payflex Payment Gateway payflex-payment-gateway allows Reflected XSS.This issue affects Payflex Payment Gateway: from n/a through 2.7.1.
Statistics
Total
110977
Critical
11492
High
43185