Unknown vulnerabilities
6,235 published CVEs name Unknown among the affected products.
- Published CVEs
- 6,235
- Last 12 months
- 2,208
- Critical
- 388
- Known exploited
- 0
Critical 388High 1,275Medium 4,233Low 317Not scored 22
CVEs per yearBy the year they were published
- 201813
- 20191
- 2021624
- 20221,125
- 2023936
- 2024774
- 2025597
- 20262,165
Newest CVEs
- CVE-2026-110963
Userplace <= 1.2.0 - Unauthenticated Privilege Escalation
Unknown · Userplace
Not scored - CVE-2026-110132
Sync Post With Other Site 1.9.3 - Contributor+ Arbitrary Custom Post Type Creation and Modification
Unknown · Sync Post With Other Site
Not scored - CVE-2026-109925
Productive Commerce < 1.1.54 - Unauthenticated SQLi via Wishlist and Compare Handlers
Unknown · Productive Commerce
Not scored - CVE-2026-106015
Ecommerce Affiliate <= 1.0.0 - Unauthenticated Account Takeover via Email OTP Brute Force
Unknown · Ecommerce Affiliate
Not scored - CVE-2026-105970
BCK Auto-confirm Bank Transfer <= 2.0.1 - Unauthenticated WooCommerce Order Payment Confirmation
Unknown · Thanh Toán Quét Mã QR Code Tự Động
Not scored - CVE-2026-104639
Razorpay for WooCommerce < 4.8.9 - Admin+ SQLi via Webhook
Unknown · Razorpay for WooCommerce
Not scored - CVE-2026-104338
Razorpay for WooCommerce < 4.8.9 - Unauthenticated User Context Switch via 1cc Coupon Route
Unknown · Razorpay for WooCommerce
Not scored - CVE-2026-104337
Razorpay for WooCommerce < 4.8.9 - Unauthenticated Order Data Disclosure via 1CC Coupon Apply
Unknown · Razorpay for WooCommerce
Not scored - CVE-2026-104307
BackUpWordPress < 3.15 - Subscriber+ Backup Directory File Deletion via hmbkp_dismiss_error
Unknown · BackUpWordPress
Not scored - CVE-2026-103303
Turisbook Booking System <= 1.3.8 - Unauthenticated Stored XSS via Cart Background Setting
Unknown · Turisbook Booking System
Not scored
Products with the most CVEs
Most common weaknesses
- CWE-79 Cross-site scripting (XSS)2,171
- CWE-352 Cross-site request forgery (CSRF)585
- CWE-89 SQL injection456
- CWE-862 Missing authorization432
- CWE-200 Exposure of sensitive information251
- CWE-639 Authorization bypass through a user-controlled key (IDOR)232
- CWE-284 Improper access control139
- CWE-287 Improper authentication126
- CWE-434 Unrestricted file upload117
- CWE-863 Incorrect authorization108