Search

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Search Examples

CVEs in KEV CVEs with EPSS >= 80% Crit. Microsoft High Apache SQL Injection (CWE-89) Linux Kernel High (CVSS 3.1) Apache Struts RCE (Remote Code Execution) XSS (CWE-79) Critical (CVSS 4.0) CVEs to check

Search Results (11496 CVEs found)

CVE Vendors Products Updated CVSS v3.1
CVE-2026-25403 2 Bdthemes, Wordpress 2 Utlimate Store Kit Elementor Addons, Wordpress 2026-08-06 6.5 Medium
Unauthenticated Broken Access Control in Ultimate Store Kit Elementor Addons <= 3.0.5 versions.
CVE-2026-28140 2 Jetmonsters, Wordpress 2 Jetformbuilder, Wordpress 2026-08-06 7.5 High
Unauthenticated Broken Access Control in JetFormBuilder <= 3.6.4.1 versions.
CVE-2026-65548 2 Muffingroup, Wordpress 2 Betheme, Wordpress 2026-08-06 9.9 Critical
Contributor Remote Code Execution (RCE) in Betheme <= 28.4.2 versions.
CVE-2026-65507 2 Sergey, Wordpress 2 Aiwu, Wordpress 2026-08-06 9.8 Critical
Unauthenticated Privilege Escalation in AIWU <= 1.5.6 versions.
CVE-2026-61963 2 Davidlingren, Wordpress 2 Media Library Assistant, Wordpress 2026-08-06 7.1 High
Unauthenticated Cross Site Scripting (XSS) in Media LIbrary Assistant <= 3.38 versions.
CVE-2026-66451 2 Arraytics, Wordpress 2 Wp Event Solution, Wordpress 2026-08-06 6.5 Medium
Unauthenticated Broken Authentication in WP Event SOlution <= 4.1.9 versions.
CVE-2026-66706 2 Markjaquith, Wordpress 2 Subscribe To Comments, Wordpress 2026-08-06 5.9 Medium
Author Cross Site Scripting (XSS) in Subscribe to Comments <= 2.3.1 versions.
CVE-2026-66663 2 Passionate Programmer Peter, Wordpress 2 Wp Data Access, Wordpress 2026-08-06 7.1 High
Unauthenticated Cross Site Scripting (XSS) in WP Data Access <= 5.5.79 versions.
CVE-2026-66690 2 Nexcess, Wordpress 2 Givewp, Wordpress 2026-08-06 7.1 High
Unauthenticated Cross Site Scripting (XSS) in GiveWP <= 4.16.5 versions.
CVE-2026-66699 2 Dokan, Wordpress 2 Dokan, Wordpress 2026-08-06 5.3 Medium
Custom role Broken Access Control in Dokan <= 5.0.10 versions.
CVE-2026-18501 2 Stiofansisland, Wordpress 2 Userswp – Front-end Login Form, User Registration, User Profile & Members Directory Plugin For Wp, Wordpress 2026-08-06 6.4 Medium
The UsersWP – Front-end login form, User Registration, User Profile & Members Directory plugin for WP plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Badge Widget Variable Substitution in all versions up to, and including, 1.2.69 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with subscriber-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.
CVE-2026-65579 2 Axiomthemes, Wordpress 2 Agricola, Wordpress 2026-08-06 9.8 Critical
Unauthenticated PHP Object Injection in Agricola <= 1.21.0 versions.
CVE-2026-28180 2 Mercadopago, Wordpress 2 Mercado Pago Payments For Woocommerce, Wordpress 2026-08-06 5.3 Medium
Unauthenticated Insecure Direct Object References (IDOR) in Mercado Pago payments for WooCommerce <= 8.9.0 versions.
CVE-2026-66712 2 Wordpress, Wp.insider 2 Wordpress, Simple Membership 2026-08-06 7.5 High
Unauthenticated Broken Access Control in Simple Membership <= 4.7.8 versions.
CVE-2026-66440 2 Wordpress, Xplodedthemes 2 Wordpress, Wpide - File Manager & Code Editor 2026-08-06 7.1 High
Unauthenticated Cross Site Scripting (XSS) in WPIDE – File Manager & Code Editor <= 3.5.7 versions.
CVE-2026-61961 2 Wordpress, Wpdeveloper 2 Wordpress, Embedpress 2026-08-06 7.1 High
Unauthenticated Cross Site Scripting (XSS) in EmbedPress <= 4.5.6 versions.
CVE-2026-66708 2 Boldgrid, Wordpress 2 Total Upkeep, Wordpress 2026-08-06 8.2 High
Unauthenticated Broken Access Control in Total Upkeep <= 1.17.2 versions.
CVE-2026-66709 2 Webappick, Wordpress 2 Ctx Feed, Wordpress 2026-08-06 9.1 Critical
Shop manager Remote Code Execution (RCE) in CTX Feed <= 6.6.42 versions.
CVE-2026-66710 2 E2pdf, Wordpress 2 E2pdf, Wordpress 2026-08-06 8.1 High
Unauthenticated Local File Inclusion in e2pdf <= 1.32.40 versions.
CVE-2026-28178 2 Codesupplyco, Wordpress 2 Powerkit, Wordpress 2026-08-06 6.5 Medium
Contributor Cross Site Scripting (XSS) in Powerkit <= 3.1.0 versions.