CVE-2026-32575
7.1 HIGH 7.1Unauthenticated Cross Site Scripting (XSS) in SUMO Affiliates Pro <= 11.7.0 versions.
CVE Vulnerability Database
Complete database of CVE vulnerabilities. Track critical security threats, exploits and patches. Updated daily from NVD NIST.
CVE-2026-32574
7.1 HIGH 7.1Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in EDGARROJAS Smart Forms smart-forms allows DOM-Based XSS.This issue affects Smart Forms: from n/a through 2.6.104.
Edgarrojas
Details
CVE-2026-32572
7.1 HIGH 7.1Unauthenticated Cross Site Scripting (XSS) in WP User Frontend Pro <= 4.2.13 versions.
CVE-2026-32571
6.5 MEDIUM 6.5Subscriber Cross Site Scripting (XSS) in Ohio Extra <= 3.6.8 versions.
Subscriber
Details
CVE-2026-32570
7.1 HIGH 7.1Unauthenticated Cross Site Scripting (XSS) in Progressify - Progressive Web App (PWA) <= 1.6.0 versions.
CVE-2026-32569
7.1 HIGH 7.1Unauthenticated Cross Site Scripting (XSS) in WP Media folder <= 6.2.2 versions.
CVE-2026-32568
9.9 CRITICAL 9.9Subscriber Remote Code Execution (RCE) in WooCommerce Designer Pro <= 1.9.33 versions.
Subscriber
Details
CVE-2026-32557
9.3 CRITICAL 9.3Unauthenticated SQL Injection in WooCommerce Appointments <= 5.3.2 versions.
CVE-2026-25434
8.5 HIGH 8.5Subscriber SQL Injection in WP2LEADS <= 3.5.7 versions.
Subscriber
Details
CVE-2026-25433
7.1 HIGH 7.1Subscriber Broken Access Control in WP2LEADS <= 3.5.7 versions.
Subscriber
Details
Statistics
Total
111040
Critical
11492
High
43200