Known Exploited Vulnerabilities (KEV)

ID Title Severity CVSS EPSS Source Updated
cve-2025-12197 StellarWP the_events_calendar Improper Neutralization of Special Elements used in an SQL Command HIGH 7.5 18.24% cvelistv5 2026-10-13
cve-2025-11427 Server-Side Request Forgery MEDIUM 5.8 0.50% cvelistv5 2026-10-13
cve-2025-10897 Improper Limitation of a Pathname to a Restricted Directory HIGH 8.6 1.95% cvelistv5 2026-10-13
cve-2024-9893 Authentication Bypass Using an Alternate Path or Channel CRITICAL 9.8 0.66% cvelistv5 2026-10-13
cve-2024-9634 GiveWP GiveWP Deserialization of Untrusted Data CRITICAL 9.8 1.39% cvelistv5 2026-10-13
cve-2024-9417 hashthemes hash_form Unrestricted Upload of File with Dangerous Type HIGH N/A 0.37% cvelistv5 2026-10-13
cve-2024-8275 StellarWP the_events_calendar Improper Neutralization of Special Elements used in an SQL Command CRITICAL 9.8 49.91% cvelistv5 2026-10-13
cve-2024-5544 davidlingren media_library_assistant Improper Neutralization of Input During Web Page Generation MEDIUM 6.1 0.36% cvelistv5 2026-10-13
cve-2024-50550 LiteSpeed Technologies LiteSpeed Cache Incorrect Privilege Assignment HIGH 8.1 0.90% cvelistv5 2026-10-13
cve-2024-4180 StellarWP the_events_calendar Improper Neutralization of Input During Web Page Generation HIGH N/A 2.08% cvelistv5 2026-10-13
cve-2024-3242 brizy brizy Unrestricted Upload of File with Dangerous Type HIGH 8.8 0.96% cvelistv5 2026-10-13
cve-2024-31377 wppa wp_photo_album_plus Unrestricted Upload of File with Dangerous Type CRITICAL 10.0 0.54% cvelistv5 2026-10-13
cve-2024-30492 WebToffee import_export_wordpress_users Improper Limitation of a Pathname to a Restricted Directory MEDIUM 4.3 0.52% cvelistv5 2026-10-13
cve-2024-2347 brainstormforce astra Improper Neutralization of Input During Web Page Generation MEDIUM 6.4 0.35% cvelistv5 2026-10-13
cve-2024-2087 brizy brizy Improper Neutralization of Input During Web Page Generation HIGH 7.2 0.38% cvelistv5 2026-10-13
cve-2024-1756 vanquish woocommerce_customers_manager Cross-Site Request Forgery MEDIUM 6.5 0.32% cvelistv5 2026-10-13
cve-2024-13693 kriesi enfold Improper Access Control HIGH N/A 0.33% cvelistv5 2026-10-13
cve-2024-13377 Improper Neutralization of Input During Web Page Generation HIGH N/A 0.33% cvelistv5 2026-10-13
cve-2024-12253 simple-e-commerce-shopping-cart_project simple-e-commerce-shopping-cart Missing Authorization HIGH N/A 0.26% cvelistv5 2026-10-13
cve-2023-6558 WebToffee import_export_wordpress_users Unrestricted Upload of File with Dangerous Type HIGH 7.2 1.37% cvelistv5 2026-10-13
cve-2023-6214 HasThemes HT Mega Exposure of Sensitive Information to an Unauthorized Actor HIGH 7.5 0.61% cvelistv5 2026-10-13
cve-2023-6063 wpfastestcache wp_fastest_cache Improper Neutralization of Special Elements used in an SQL Command HIGH N/A 73.71% cvelistv5 2026-10-13
cve-2023-6009 userproplugin userpro Incorrect Privilege Assignment HIGH 8.8 0.92% cvelistv5 2026-10-13
cve-2023-51501 undsgn uncode Improper Neutralization of Input During Web Page Generation HIGH 7.1 0.35% cvelistv5 2026-10-13
cve-2023-41735 gopiplus email_posts_to_subscribers Exposure of Sensitive Information to an Unauthorized Actor HIGH N/A 0.67% cvelistv5 2026-10-13
cve-2023-39309 avada fusion_builder Improper Neutralization of Special Elements used in an SQL Command HIGH 8.5 0.74% cvelistv5 2026-10-13
cve-2023-39306 avada fusion_builder Improper Neutralization of Input During Web Page Generation HIGH 7.1 0.39% cvelistv5 2026-10-13
cve-2023-32798 Missing Authorization HIGH N/A 0.56% cvelistv5 2026-10-13
cve-2022-42699 wp-ecommerce easy_wp_smtp Improper Control of Generation of Code HIGH N/A 1.46% cvelistv5 2026-10-13
cve-2026-42596 CVE-2026-42596 HIGH N/A 1.59% cvelistv5