{"items":[{"id":"CVE-2025-13529","published":"2026-01-07T08:21:53.677Z","updated":"2026-04-08T17:17:19.122Z","title":"Unify <= 3.4.9 - Missing Authorization to Unauthenticated Option Deletion via 'unify_plugin_downgrade' Parameter","severity":"MEDIUM","score":5.3,"vendor":"codeclouds","product":"Unify","kev":false,"epss":0.0027,"kevAdded":null,"exploit":false},{"id":"CVE-2025-9130","published":"2025-10-03T11:17:08.101Z","updated":"2026-04-08T16:37:16.576Z","title":"Unify <= 3.4.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via unify_checkout Shortcode","severity":"MEDIUM","score":6.4,"vendor":"codeclouds","product":"Unify","kev":false,"epss":0.00307,"kevAdded":null,"exploit":false}]}