Wwphocus

Products

Exploited and recent CVEs

• CVE-2026-116855 Medium 5.4 WordPress My auctions allegro plugin <= 4.0.3 - Broken Access Control vulnerability 0.1%
• CVE-2026-22491 High 7.1 WordPress My auctions allegro plugin <= 3.6.35 - Cross Site Scripting (XSS) vulnerability 0.2%
• CVE-2026-22464 High 7.5 WordPress My auctions allegro plugin <= 3.6.33 - Local File Inclusion vulnerability 0.5%
• CVE-2025-67943 High 7.1 WordPress My auctions allegro plugin <= 3.6.32 - Cross Site Scripting (XSS) vulnerability 0.3%
• CVE-2025-68567 Medium 5.4 WordPress My auctions allegro plugin <= 3.6.33 - Cross Site Request Forgery (CSRF) vulnerability 0.1%
• CVE-2025-68566 Medium 5.9 WordPress My auctions allegro plugin <= 3.6.35 - Cross Site Scripting (XSS) vulnerability 0.2%
• CVE-2025-12851 High 8.1 My auctions allegro <= 3.6.32 - Unauthenticated Local File Inclusion via controller 0.8%
• CVE-2025-12850 High 7.5 My auctions allegro <= 3.6.32 - Unauthenticated SQL Injection via auction_id 0.3%
• CVE-2025-10048 Medium 4.9 My Auctions Allegro Plugin <= 3.6.31 - Authenticated (Admin+) SQL Injection 0.3%
• CVE-2025-27009 High 7.1 WordPress My auctions allegro plugin <= 3.6.33 - Cross Site Request Forgery (CSRF) vulnerability 0.1%
• CVE-2025-31542 High 8.5 WordPress My auctions allegro plugin <= 3.6.20 - SQL Injection vulnerability 0.3%
• CVE-2025-22733 High 7.1 WordPress My auctions allegro Plugin <= 3.6.18 - Reflected Cross Site Scripting (XSS) vulnerability 0.3%
• CVE-2024-11707 Medium 6.1 My auctions allegro <= 3.6.17 - Reflected Cross-Site Scripting 0.4%