Unknown vulnerabilities
6,367 published CVEs name Unknown among the affected products.
- 6,367Published CVEs6,367 of them scored
- 2,336Last 12 monthspublished in the last year
- 408Critical1,311 more rated high
- 0Known exploitedin CISA's KEV catalog
Newest CVEs
- CVE-2026-126119
Streamit Plugin < 1.3.10 - Unauthenticated Remote Code Execution via Arbitrary Function Call
Unknown · Streamit
Critical9.8 - CVE-2026-125912
WP Ultimate CSV Importer < 9.2 - Multisite Subsite Admin+ Network-Wide PHP Code Execution via Media Import
Unknown · WP Ultimate CSV Importer
High7.2 - CVE-2026-125711
Trustindex Review Widget Plugins < 14.3 - Editor+ Stored XSS via Business Name
Unknown · Widgets for Google Reviews
Low3.5 - CVE-2026-124833
Ahime Image Printer <= 1.0.0 - Unauthenticated Arbitrary File Upload
Unknown · Ahime Image Printer
Critical9.8 - CVE-2026-124822
Easy DragDrop File Uploader < 1.1.10 - Unauthenticated Arbitrary File Deletion via Path Traversal
Unknown · Easy DragDrop File Uploader
Critical10.0 - CVE-2026-124763
AM Wishlist <= 1.1.0 - Unauthenticated Option Overwrite via amwl_upload_file
Unknown · Woocommerce Wishlist
Critical9.1 - CVE-2026-124664
Mine CloudVod < 2.6.7 - Unauthenticated Paid Lesson Content Disclosure
Unknown · Mine CloudVod
Medium5.3 - CVE-2026-123711
WPCOM Member < 1.8.3 - Unauthenticated Account Takeover via WeChat Login Code Brute-Force
Unknown · WPCOM Member
High8.1 - CVE-2026-123670
Essential Real Estate 5.3.5 - Customer+ Email Relay Allowlist Poisoning
Unknown · Essential Real Estate
Medium4.3 - CVE-2026-123124
WooCommerce Vindi Pagamento <= 0.8.3 - Unauthenticated Stored XSS via 'code' Parameter
Unknown · WooCommerce Vindi Pagamento
High7.5