Search

Expected end of text, found '/' (at char 24), (line:1, col:25)
Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Search Examples

CVEs in KEV CVEs with EPSS >= 80% Crit. Microsoft High Apache SQL Injection (CWE-89) Linux Kernel High (CVSS 3.1) Apache Struts RCE (Remote Code Execution) XSS (CWE-79) Critical (CVSS 4.0) CVEs to check

Search Results (370925 CVEs found)

CVE Vendors Products Updated CVSS v3.1
CVE-2026-13069 1 Mongodb 1 Mongodb Server 2026-07-27 6.5 Medium
An authenticated user can cause excessive CPU consumption or out-of-memory conditions on a MongoDB server by sending a crafted Queryable Encryption find payload containing an unvalidated field used to control an internal computation loop. The resulting resource exhaustion degrades availability for other operations.
CVE-2026-13056 1 Mongodb 1 Mongodb Server 2026-07-27 6.5 Medium
Using expressions that generate large arrays it is possible to craft a query that creates very large intermediate objects in memory, causing the server to crash with OOM error.
CVE-2026-59531 2 Anh Tran, Wordpress 2 Falcon – Wordpress Optimizations & Tweaks, Wordpress 2026-07-27 7.5 High
Unauthenticated Unknown in Falcon – WordPress Optimizations & Tweaks <= 2.10.0 versions.
CVE-2026-59536 2 Cocart Headless, Wordpress 2 Cocart – Headless Ecommerce, Wordpress 2026-07-27 7.5 High
Unauthenticated Broken Access Control in CoCart – Headless ecommerce <= 4.8.4 versions.
CVE-2026-59537 2 Sender, Wordpress 2 Sender – Newsletter, Sms And Email Marketing Automation For Woocommerce, Wordpress 2026-07-27 7.6 High
Administrator SQL Injection in Sender – Newsletter, SMS and Email Marketing Automation for WooCommerce <= 2.10.22 versions.
CVE-2026-59548 2 Byteflows, Wordpress 2 Byteflows Travel & Hotel Booking, Wordpress 2026-07-27 7.5 High
Unauthenticated Sensitive Data Exposure in Byteflows Travel &amp; Hotel Booking <= 1.0.0 versions.
CVE-2026-59552 2 Shahadat Hossain, Wordpress 2 3d Flipbook Pdf Viewer & Embedder, Wordpress 2026-07-27 7.2 High
Unauthenticated Server Side Request Forgery (SSRF) in 3D Flipbook PDF Viewer &amp; Embedder <= 1.4.2 versions.
CVE-2026-59557 2 Franky, Wordpress 2 Events Made Easy, Wordpress 2026-07-27 6.5 Medium
Unauthenticated Broken Access Control in Events Made Easy <= 3.1.3 versions.
CVE-2026-59559 2 Themewant, Wordpress 2 Rt Mega Menu – Mega Menu Builder For Elementor & Gutenberg, Wordpress 2026-07-27 6.5 Medium
Subscriber Cross Site Scripting (XSS) in RT Mega Menu – Mega Menu Builder for Elementor &amp; Gutenberg <= 1.5.1 versions.
CVE-2026-65433 2 Themewant, Wordpress 2 Rt Mega Menu – Mega Menu Builder For Elementor & Gutenberg, Wordpress 2026-07-27 6.5 Medium
Subscriber Broken Access Control in RT Mega Menu – Mega Menu Builder for Elementor &amp; Gutenberg <= 1.5.1 versions.
CVE-2026-65435 2 Thrive Themes Coupon, Wordpress 2 Thrive Leads Version, Wordpress 2026-07-27 6.5 Medium
Unauthenticated Broken Access Control in Thrive Leads Version <= 10.9.2 versions.
CVE-2026-65558 2 Wordpress, Wpcenter 2 Wordpress, Affiliatex 2026-07-27 5.4 Medium
Unauthenticated Server Side Request Forgery (SSRF) in AffiliateX <= 2.3.5 versions.
CVE-2026-65561 2 Miniorange, Wordpress 2 Wordpress Social Login And Register, Wordpress 2026-07-27 6.5 Medium
Contributor Cross Site Scripting (XSS) in WordPress Social Login and Register <= 7.8.0 versions.
CVE-2026-65563 2 Themeisle, Wordpress 2 Orbit Fox By Themeisle, Wordpress 2026-07-27 5.9 Medium
Author Cross Site Scripting (XSS) in Orbit Fox by ThemeIsle <= 3.0.7 versions.
CVE-2026-65567 2 Nexcess, Wordpress 2 Event Tickets, Wordpress 2026-07-27 5.3 Medium
Unauthenticated Broken Access Control in Event Tickets <= 5.29.0.1 versions.
CVE-2026-66434 2 Sayontan Sinha, Wordpress 2 Photonic Gallery & Lightbox For Flickr, Smugmug & Others, Wordpress 2026-07-27 6.5 Medium
Contributor Cross Site Scripting (XSS) in Photonic Gallery & Lightbox for Flickr, SmugMug & Others <= 3.33 versions.
CVE-2026-66437 2 Themeisle, Wordpress 2 Feedzy, Wordpress 2026-07-27 4.9 Medium
Contributor Server Side Request Forgery (SSRF) in Feedzy <= 5.2.4 versions.
CVE-2026-66442 2 Wordpress, Yaycommerce 2 Wordpress, Yaypricing 2026-07-27 5.4 Medium
Subscriber Broken Access Control in YayPricing <= 3.5.6 versions.
CVE-2026-66474 2 Ht Plugins, Wordpress 2 Insert Headers And Footers Code – Ht Script, Wordpress 2026-07-27 4.3 Medium
Unauthenticated Cross Site Request Forgery (CSRF) in Insert Headers and Footers Code – HT Script <= 1.1.8 versions.
CVE-2026-66475 2 Acowebs, Wordpress 2 Checkout Field Editor For Woocommerce – Checkout Manager, Wordpress 2026-07-27 5.9 Medium
Shop manager Cross Site Scripting (XSS) in Checkout Field Editor for WooCommerce &#8211; Checkout Manager <= 3.0.5 versions.