CVE-2026-12853Medium 5.4Flamingo <= 2.6.2 - Authenticated (Contributor+) Missing Authorization to Unauthorized Tag Information Disclosure via wp.getTerms and ajax-tag-search0.4%
CVE-2026-9013Medium 4.3Bogo <= 3.9.1 - Missing Authorization to Authenticated (Subscriber+) Sensitive Information Exposure via REST API0.4%
CVE-2025-3247Medium 5.3Contact Form 7 <= 6.0.5 - Order Replay Vulnerability0.3%
CVE-2024-2242Medium 6.1Contact Form 7 <= 5.9 - Reflected Cross-Site Scripting1.3%