CVE-2026-39751
7.5 HIGH 7.5Unauthenticated Broken Access Control in PayPlug for WooCommerce (Official) <= 3.1.0 versions.
CVE Vulnerability Database
Complete database of CVE vulnerabilities. Track critical security threats, exploits and patches. Updated daily from NVD NIST.
CVE-2026-39750
7.1 HIGH 7.1Unauthenticated Cross Site Scripting (XSS) in StoreGrowth: Smart Sales Booster for WooCommerce | BOGO, Upsells, Direct Checkout, Quick View, Side Cart <= 2.0.6 versions.
CVE-2026-39749
6.5 MEDIUM 6.5Subscriber Broken Access Control in App for Cloudflare® <= 1.10.1 versions.
Cloudflare
Details
CVE-2026-39748
7.1 HIGH 7.1Unauthenticated Cross Site Scripting (XSS) in EduMall <= 4.5.3 versions.
CVE-2026-39747
8.5 HIGH 8.5Subscriber SQL Injection in Woffice <= 5.4.35 versions.
Subscriber
Details
CVE-2026-39746
9.3 CRITICAL 9.3Unauthenticated SQL Injection in Booknetic <= 4.8.5 versions.
CVE-2026-39745
7.1 HIGH 7.1Unauthenticated Cross Site Scripting (XSS) in Contact Form to DB by BestWebSoft <= 1.7.6 versions.
CVE-2026-39731
7.1 HIGH 7.1Unauthenticated Cross Site Scripting (XSS) in Database for CF7 <= 1.2.6 versions.
CVE-2026-39730
7.1 HIGH 7.1Missing Authorization vulnerability in Marcin Wise Chat wise-chat allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Wise Chat: from n/a through 3.4.3.
CVE-2026-39729
7.2 HIGH 7.2Unauthenticated Sensitive Data Exposure in Edwiser Bridge <= 4.3.4 versions.
Statistics
Total
111072
Critical
11496
High
43219