Search

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Search Examples

CVEs in KEV CVEs with EPSS >= 80% Crit. Microsoft High Apache SQL Injection (CWE-89) Linux Kernel High (CVSS 3.1) Apache Struts RCE (Remote Code Execution) XSS (CWE-79) Critical (CVSS 4.0) CVEs to check

Search Results (15551 CVEs found)

Export CSV
CVE Vendors Products Updated CVSS v3.1
CVE-2026-73381 2 Supsysticcom, Wordpress 2 Popup By Supsystic, Wordpress 2026-08-24 9.1 Critical
Unauthenticated Broken Authentication in Popup by Supsystic <= 1.13.0 versions.
CVE-2026-66599 2 Liquid Web / Stellarwp, Wordpress 2 Wpcomplete, Wordpress 2026-08-24 7.1 High
Unauthenticated Cross Site Scripting (XSS) in WPComplete <= 2.9.5.6 versions.
CVE-2026-66671 2 Elated-themes, Wordpress 2 Verdure Core, Wordpress 2026-08-24 8.1 High
Unauthenticated Local File Inclusion in Verdure Core <= 1.2 versions.
CVE-2026-28153 2 Notification Master, Wordpress 2 Notification Master – Real-time Wordpress Notifications With Email, Sms, Webhooks & More, Wordpress 2026-08-24 7.5 High
Unauthenticated Broken Access Control in Notification Master &#8211; Real-Time WordPress Notifications With Email, SMS, Webhooks &amp; More <= 1.7.1 versions.
CVE-2026-28171 2 Vanquish, Wordpress 2 Woocommerce File Approval, Wordpress 2026-08-24 8.6 High
Unauthenticated Arbitrary File Deletion in WooCommerce File Approval <= 10.7 versions.
CVE-2026-28190 2 Themebing, Wordpress 2 Prolancer Element, Wordpress 2026-08-24 7.1 High
Subscriber Broken Access Control in ProLancer Element <= 1.4.8 versions.
CVE-2026-32471 2 Themebing, Wordpress 2 Prolancer Element, Wordpress 2026-08-24 8.5 High
Subscriber SQL Injection in ProLancer Element <= 1.4.8 versions.
CVE-2026-32476 2 Amplebyte Pvt Limited, Wordpress 2 Brave Conversion Engine (pro), Wordpress 2026-08-24 7.1 High
Unauthenticated Cross Site Scripting (XSS) in Brave Conversion Engine (PRO) <= 0.8.6 versions.
CVE-2026-32551 2 Divinext, Wordpress 2 Woo Essential, Wordpress 2026-08-24 9.3 Critical
Unauthenticated SQL Injection in Woo Essential <= 4.3.0 versions.
CVE-2026-32558 2 Redefiningtheweb, Wordpress 2 Affiliate Pro - Affiliate Program For Woocommerce & Wordpress, Wordpress 2026-08-24 9.8 Critical
Unauthenticated Privilege Escalation in Affiliate Pro - Affiliate Program for WooCommerce & WordPress <= 8.9.1 versions.
CVE-2026-66585 2 Wordpress, Wpcafe 2 Wordpress, Wp Cafe Pro 2026-08-24 7.5 High
Unauthenticated Sensitive Data Exposure in WP Cafe Pro < 3.0.15 versions.
CVE-2026-66587 2 Wordpress, Wpcafe 2 Wordpress, Wp Cafe Pro 2026-08-24 9.8 Critical
Unauthenticated Local File Inclusion in WP Cafe Pro < 3.0.15 versions.
CVE-2026-66648 2 Mvpthemes, Wordpress 2 Jawn, Wordpress 2026-08-24 9.8 Critical
Unauthenticated Privilege Escalation in Jawn <= 1.4.2 versions.
CVE-2026-66670 2 Elated-themes, Wordpress 2 Måne, Wordpress 2026-08-24 8.1 High
Unauthenticated Local File Inclusion in Måne <= 1.7 versions.
CVE-2026-28192 2 Piotnet, Wordpress 2 Piotnet Addons For Elementor, Wordpress 2026-08-24 9.6 Critical
Unauthenticated Arbitrary File Upload in Piotnet Addons For Elementor Pro <= 7.1.67 versions.
CVE-2026-28568 2 Mdmag, Wordpress 2 Quill Forms, Wordpress 2026-08-24 7.1 High
Unauthenticated Cross Site Scripting (XSS) in Quill Forms <= 5.7.1 versions.
CVE-2026-28569 2 Sslzen, Wordpress 2 Ssl Zen, Wordpress 2026-08-24 7.1 High
Unauthenticated Cross Site Scripting (XSS) in SSL Zen <= 4.7.43 versions.
CVE-2026-32468 2 Duitku, Wordpress 2 Duitku Payment Gateway, Wordpress 2026-08-24 7.5 High
Unauthenticated Sensitive Data Exposure in Duitku Payment Gateway <= 2.11.14 versions.
CVE-2026-32547 2 Wordplus, Wordpress 2 Better Messages, Wordpress 2026-08-24 7.1 High
Unauthenticated Cross Site Scripting (XSS) in BP Better Messages <= 2.15.22 versions.
CVE-2026-66635 2 10web, Wordpress 2 Sliderby10web, Wordpress 2026-08-24 7.4 High
Unauthenticated Cross Site Request Forgery (CSRF) in Slider by 10Web <= 1.2.62 versions.