Catalog

Findings

Filter the merged record by severity, source, stack, and weakness type.

SearchSeveritySourceStackWeaknessSort

Known exploited only

Reset

Critical9.1kcp is a Kubernetes-like control plane for form-factors and use-cases beyond Kubernetes and container workloads.CVE-2026-39429 · kcp · kcp · CVE.org · NIST NVD · KubernetesApr 8, 2026
Medium5.3Zammad is a web based open source helpdesk/customer support system.CVE-2026-34837 · zammad · zammad · CVE.org · NIST NVD · ZammadApr 8, 2026
Medium5.3Zammad is a web based open source helpdesk/customer support system.CVE-2026-34782 · zammad · zammad · CVE.org · NIST NVD · ZammadApr 8, 2026
Medium6.9Zammad is a web based open source helpdesk/customer support system.CVE-2026-34722 · zammad · zammad · CVE.org · NIST NVD · ZammadApr 8, 2026
Medium4.3The Advanced Contact form 7 DB plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the 'vsz_cf7_export_to_excel' fun…CVE-2026-0814 · CVE.org · FIRST EPSS · NIST NVD · WordPressEPSS 0.3%Apr 8, 2026
High8.6XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it.CVE-2026-33229 · xwiki · xwiki · CVE.org · NIST NVDApr 8, 2026
Medium5.3Missing Authorization vulnerability in CKThemes Flipmart flipmart allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Flipmart:…CVE-2026-39716 · CVE.org · NIST NVDApr 8, 2026
Medium5.3Missing Authorization vulnerability in AnyTrack AnyTrack Affiliate Link Manager anytrack-affiliate-link-manager allows Exploiting Incorrectly Configured Access Control…CVE-2026-39715 · CVE.org · NIST NVDApr 8, 2026
Medium5.3Missing Authorization vulnerability in G5Theme G5Plus April g5plus-april allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects G5P…CVE-2026-39714 · CVE.org · NIST NVDApr 8, 2026
Medium5.3Missing Authorization vulnerability in mailercloud Mailercloud – Integrate webforms and synchronize website contacts mailercloud-integrate-webforms-synchronize-contact…CVE-2026-39713 · CVE.org · NIST NVDApr 8, 2026
Medium5.3Missing Authorization vulnerability in ZealousWeb Accept PayPal Payments using Contact Form 7 contact-form-7-paypal-extension allows Exploiting Incorrectly Configured…CVE-2026-39707 · CVE.org · NIST NVDApr 8, 2026
Medium5.3Missing Authorization vulnerability in Netro Systems Make My Trivia trivialy allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects…CVE-2026-39706 · CVE.org · NIST NVDApr 8, 2026
Medium5.3Missing Authorization vulnerability in Mulika Team MIPL WC Multisite Sync mipl-wc-multisite-sync allows Exploiting Incorrectly Configured Access Control Security Level…CVE-2026-39705 · CVE.org · NIST NVDApr 8, 2026
Medium5.3Missing Authorization vulnerability in nfusionsolutions Precious Metals Automated Product Pricing – Pro precious-metals-automated-product-pricing-pro allows Exploiting…CVE-2026-39704 · CVE.org · NIST NVDApr 8, 2026
Medium5.3Missing Authorization vulnerability in Andrew ShopWP wpshopify allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects ShopWP: from…CVE-2026-39701 · CVE.org · NIST NVDApr 8, 2026
Medium5.3Missing Authorization vulnerability in WPXPO WowOptin optin allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WowOptin: from n…CVE-2026-39700 · CVE.org · NIST NVDApr 8, 2026
Medium5.3Missing Authorization vulnerability in massiveshift AI Workflow Automation ai-workflow-automation-lite allows Exploiting Incorrectly Configured Access Control Security…CVE-2026-39699 · CVE.org · NIST NVDApr 8, 2026
Medium5.3Missing Authorization vulnerability in PublisherDesk The Publisher Desk ads.txt the-publisher-desk-ads-txt allows Exploiting Incorrectly Configured Access Control Secu…CVE-2026-39698 · CVE.org · NIST NVDApr 8, 2026
Medium5.3Missing Authorization vulnerability in HBSS Technologies MAIO – The new AI GEO / SEO tool maio-the-new-ai-geo-seo-tool allows Exploiting Incorrectly Configured Access…CVE-2026-39697 · CVE.org · NIST NVDApr 8, 2026
Medium5.3Missing Authorization vulnerability in NSquared Simply Schedule Appointments simply-schedule-appointments allows Exploiting Incorrectly Configured Access Control Secur…CVE-2026-39694 · CVE.org · NIST NVDApr 8, 2026
Medium5.3Missing Authorization vulnerability in AdAstraCrypto Cryptocurrency Donation Box – Bitcoin & Crypto Donations cryptocurrency-donation-box allows Exploiting Incorrectly…CVE-2026-39691 · CVE.org · NIST NVDApr 8, 2026
Medium5.3Missing Authorization vulnerability in Paul Bearne Author Avatars List/Block author-avatars allows Exploiting Incorrectly Configured Access Control Security Levels.Thi…CVE-2026-39690 · CVE.org · NIST NVDApr 8, 2026
Medium5.3Missing Authorization vulnerability in eshipper eShipper Commerce eshipper-commerce allows Exploiting Incorrectly Configured Access Control Security Levels.This issue…CVE-2026-39689 · CVE.org · NIST NVDApr 8, 2026
Medium5.3Missing Authorization vulnerability in Glowlogix WP Frontend Profile wp-front-end-profile allows Exploiting Incorrectly Configured Access Control Security Levels.This…CVE-2026-39688 · CVE.org · NIST NVDApr 8, 2026
Medium5.3Missing Authorization vulnerability in Rapid Car Check Rapid Car Check Vehicle Data free-vehicle-data-uk allows Exploiting Incorrectly Configured Access Control Securi…CVE-2026-39687 · CVE.org · NIST NVDApr 8, 2026