CVE Browser

Search and filter CVEs by severity, ecosystem, EPSS score, and more.

Page 1

Unify <= 3.4.9 - Missing Authorization to Unauthenticated Option Deletion via 'unify_plugin_downgrade' Parameter

Unify <= 3.4.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via unify_checkout Shortcode

CVE ID	Description	Severity	CVSS	EPSS	Ecosystems	Published
CVE-2025-13529	Unify <= 3.4.9 - Missing Authorization to Unauthenticated Option Deletion via 'unify_plugin_downgrade' Parameter	MEDIUM	5.3	0.27%		Jan 7, 2026
CVE-2025-9130	Unify <= 3.4.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via unify_checkout Shortcode	MEDIUM	6.4	0.30%		Oct 3, 2025

Rows per page

Showing 1 to 2 CVEs · page 1