Unknown vulnerabilities
6,261 published CVEs name Unknown among the affected products.
- 6,261Published CVEs6,258 of them scored
- 2,234Last 12 monthspublished in the last year
- 394Critical1,288 more rated high
- 0Known exploitedin CISA's KEV catalog
Newest CVEs
- CVE-2026-119273
BulletProof Security <= 7.2 - Unauthenticated Sensitive Data Disclosure via Security Log
Unknown · BulletProof Security
Not scored - CVE-2026-110516
All in One Visual Composer Addons <= 1.2 - Contributor+ LFI via vca_tabs_style Shortcode Attribute
Unknown · All in One Addons For WPBakery Page Builder (formerly Visual Composer)
Not scored - CVE-2026-104676
Zion Builder <= 3.6.17 - Author+ Stored XSS via SVG Upload
Unknown · Zion Builder
Not scored - CVE-2026-106008
FraudLabs Pro SMS Verification 1.11.2 - 1.12.1 - Unauthenticated SMS Verification Bypass via wc_sms_action_verified
Unknown · FraudLabs Pro SMS Verification
Medium5.3 - CVE-2026-115252
Confection 0.4.0 - 0.4.7 - Unauthenticated RCE via Write Key Option
Unknown · Confection WordPress Cable
Critical10.0 - CVE-2026-106466
JWT Auth <= 3.0.2 - Unauthenticated Account Access Persistence via Insufficient Refresh Token Revocation
Unknown · JWT Auth
High7.5 - CVE-2026-81422
Advanced Appointment Booking & Scheduling < 2.7 - Unauthenticated Arbitrary User Registration
Unknown · Advanced Appointment Booking & Scheduling
Medium5.3 - CVE-2026-123751
WP Duplicate <= 1.1.11 - Unauthenticated Arbitrary File Upload via Authentication Bypass
Unknown · WP Duplicate
Critical9.8 - CVE-2026-123145
WooCommerce Stripe Payment Gateway 10.9.0 - 11.0.1 - Customer Password Stored in Plaintext via Express Checkout
Unknown · WooCommerce Stripe Payment Gateway
Medium4.4 - CVE-2026-123131
GemBooking < 1.7.1 - Staff+ Arbitrary Post Deletion and Site Settings Update via REST Context Check Bypass
Unknown · GemBooking
Medium5.9