Skip to content
Rrahulbhangale
Exploited and recent CVEs
-
CVE-2026-8910
Medium 6.1
WP Emoticon Rating <= 1.0.1 - Cross-Site Request Forgery to Reflected Cross-Site Scripting via 'emo_settings' Parameter
0.1%
-
CVE-2026-8909
Medium 4.3
WpMobi <= 0.0.3 - Cross-Site Request Forgery via save_general_settings Action
0.1%
-
CVE-2026-8907
Medium 6.1
WP-Ultimate-Map <= 1.1 - Cross-Site Request Forgery to Stored Cross-Site Scripting via 'zoom-level' Parameter
0.1%
-
CVE-2026-8906
Medium 6.1
WP Promoter <= 1.3 - Cross-Site Request Forgery to Stored Cross-Site Scripting via 'popup_width' Parameter
0.1%
-
CVE-2026-9014
Medium 5.3
WP Promoter <= 1.3 - Missing Authorization to Unauthenticated Statistics Reset via wpp-reset_stats AJAX Action
0.3%