Latest CVE Vulnerabilities

3.3 LOW

CVE-2026-13573 — llvm llvm-project ValueSymbolTable ValueSymbolTable.cpp insert stack-based overflow

A vulnerability was found in llvm llvm-project up to 22.1.6. This affects the function llvm::StringMap::insert in the library /lib/IR/ValueSymbolTable.cpp of the component ValueSymbolTable Module. Th…

llvm-project | Memory Corruption

Jun 29, 2026 Jun 29, 2026

Jun 29, 2026

8.7 HIGH

CVE-2026-56124 — phpUploader < 2.0.2 Unauthenticated Database Exposure via index model

phpUploader before 2.0.2 contains an unauthenticated information disclosure vulnerability that allows remote attackers to access the full contents of the uploaded-files database table by visiting any…

Remote | Information Disclosure

Jun 29, 2026 Jun 29, 2026

Jun 29, 2026

6.5 MEDIUM

CVE-2026-13572 — itsourcecode Hospital Management System insertbillingrecord.php sql injection

A vulnerability has been found in itsourcecode Hospital Management System 1.0. The impacted element is an unknown function of the file /insertbillingrecord.php. The manipulation of the argument patie…

hospital_management_system | Remote | Injection

Jun 29, 2026 Jun 29, 2026

Jun 29, 2026

6.5 MEDIUM

CVE-2026-57341 — WordPress Colissimo Officiel : Méthodes de livraison pour WooCommerce plugin <= 2.9.0 - I…

Unauthenticated Insecure Direct Object References (IDOR) in Colissimo Officiel : Méthodes de livraison pour WooCommerce <= 2.9.0 versions.

Remote | Authorization

Jun 29, 2026 Jun 29, 2026

Jun 29, 2026

6.5 MEDIUM

CVE-2026-57340 — WordPress Japanized For WooCommerce plugin <= 2.9.12 - Broken Access Control vulnerability

Unauthenticated Broken Access Control in Japanized For WooCommerce <= 2.9.12 versions.

Remote | Authorization

Jun 29, 2026 Jun 29, 2026

Jun 29, 2026

6.5 MEDIUM

CVE-2026-57339 — WordPress Business Directory plugin <= 6.4.23 - Broken Access Control vulnerability

Unauthenticated Broken Access Control in Business Directory <= 6.4.23 versions.

Remote | Authorization

Jun 29, 2026 Jun 29, 2026

Jun 29, 2026

7.1 HIGH

CVE-2026-57338 — WordPress ARForms plugin <= 7.1.2 - Reflected Cross Site Scripting (XSS) vulnerability

Unauthenticated Cross Site Scripting (XSS) in ARForms <= 7.1.2 versions.

arforms | Remote | Cross-Site Scripting

Jun 29, 2026 Jun 29, 2026

Jun 29, 2026

7.1 HIGH

CVE-2026-57337 — WordPress Landing Page Builder plugin <= 1.5.3.5 - Cross Site Scripting (XSS) vulnerabili…

Unauthenticated Cross Site Scripting (XSS) in Landing Page Builder <= 1.5.3.5 versions.

landing_page_builder | Remote | Cross-Site Scripting

Jun 29, 2026 Jun 29, 2026

Jun 29, 2026

7.1 HIGH

CVE-2026-57336 — WordPress Jobify theme <= 4.3.2 - Cross Site Scripting (XSS) vulnerability

Unauthenticated Cross Site Scripting (XSS) in Jobify <= 4.3.2 versions.

jobify | Remote | Cross-Site Scripting

Jun 29, 2026 Jun 29, 2026

Jun 29, 2026

6.5 MEDIUM

CVE-2026-57335 — WordPress Ads by WPQuads plugin <= 3.0.3 - Broken Access Control vulnerability

Subscriber Broken Access Control in Ads by WPQuads <= 3.0.3 versions.

Remote | Authorization

Jun 29, 2026 Jun 29, 2026

Jun 29, 2026

6.5 MEDIUM

CVE-2026-57334 — WordPress WP User Frontend plugin <= 4.3.7 - Broken Access Control vulnerability

Unauthenticated Broken Access Control in WP User Frontend <= 4.3.7 versions.

wp_user_frontend | Remote | Authentication

Jun 29, 2026 Jun 29, 2026

Jun 29, 2026

7.1 HIGH

CVE-2026-57333 — WordPress Link Whisper Free plugin <= 0.9.4 - Reflected Cross Site Scripting (XSS) vulner…

Unauthenticated Cross Site Scripting (XSS) in Link Whisper Free <= 0.9.4 versions.

Remote | Cross-Site Scripting

Jun 29, 2026 Jun 29, 2026

Jun 29, 2026

7.1 HIGH

CVE-2026-57332 — WordPress Wallet System for WooCommerce plugin <= 2.7.6 - Broken Access Control vulnerabi…

Subscriber Broken Access Control in Wallet System for WooCommerce <= 2.7.6 versions.

wallet_system_for_woocommerce | Remote | Authorization

Jun 29, 2026 Jun 29, 2026

Jun 29, 2026

9.9 CRITICAL

CVE-2026-57331 — WordPress Paid Videochat Turnkey Site plugin <= 7.4.8 - Arbitrary File Deletion vulnerabi…

Performer Arbitrary File Deletion in Paid Videochat Turnkey Site <= 7.4.8 versions.

Remote | Path Traversal

Jun 29, 2026 Jun 29, 2026

Jun 29, 2026

6.5 MEDIUM

CVE-2026-57330 — WordPress MasterStudy LMS plugin <= 3.7.27 - Cross Site Scripting (XSS) vulnerability

Subscriber Cross Site Scripting (XSS) in MasterStudy LMS <= 3.7.27 versions.

masterstudy_lms | Remote | Cross-Site Scripting

Jun 29, 2026 Jun 29, 2026

Jun 29, 2026

6.5 MEDIUM

CVE-2026-57329 — WordPress WooCommerce Designer Pro plugin <= 1.9.34 - Cross Site Scripting (XSS) vulnerab…

Subscriber Cross Site Scripting (XSS) in WooCommerce Designer Pro <= 1.9.34 versions.

Remote | Cross-Site Scripting

Jun 29, 2026 Jun 29, 2026

Jun 29, 2026

6.5 MEDIUM

CVE-2026-57328 — WordPress Business Directory plugin <= 6.4.22 - Cross Site Scripting (XSS) vulnerability

Subscriber Cross Site Scripting (XSS) in Business Directory <= 6.4.22 versions.

Remote | Cross-Site Scripting

Jun 29, 2026 Jun 29, 2026

Jun 29, 2026

6.3 MEDIUM

CVE-2026-57327 — WordPress MainWP plugin <= 6.1.1 - Broken Access Control vulnerability

Subscriber Broken Access Control in MainWP <= 6.1.1 versions.

mainwp | Remote | Authorization

Jun 29, 2026 Jun 29, 2026

Jun 29, 2026

6.1 MEDIUM

CVE-2026-57326 — WordPress Business Directory plugin <= 6.4.22 - Cross Site Scripting (XSS) vulnerability

Unauthenticated Cross Site Scripting (XSS) in Business Directory <= 6.4.22 versions.

Remote | Cross-Site Scripting

Jun 29, 2026 Jun 29, 2026

Jun 29, 2026

7.1 HIGH

CVE-2026-57320 — WordPress BEAR plugin <= 1.1.8 - Cross Site Scripting (XSS) vulnerability

Unauthenticated Cross Site Scripting (XSS) in BEAR <= 1.1.8 versions.

bear_-_woocommerce_bulk_editor_and_products_manager_professional | Remote | Cross-Site Scripting

Jun 29, 2026 Jun 29, 2026

Jun 29, 2026

Browse by Apps

Latest CVE Feed

Cookie Preferences