Search

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Search Examples

CVEs in KEV CVEs with EPSS >= 80% Crit. Microsoft High Apache SQL Injection (CWE-89) Linux Kernel High (CVSS 3.1) Apache Struts RCE (Remote Code Execution) XSS (CWE-79) Critical (CVSS 4.0) CVEs to check

Search Results (14417 CVEs found)

Export CSV
CVE Vendors Products Updated CVSS v3.1
CVE-2026-65447 2 Wasiliy Strecker / Contestgallery Developer, Wordpress 2 Contest Gallery, Wordpress 2026-07-28 7.1 High
Unauthenticated Cross Site Scripting (XSS) in Contest Gallery <= 30.0.6 versions.
CVE-2026-65439 2 Themefic, Wordpress 2 Ultimate Addons For Contact Form 7, Wordpress 2026-07-28 7.1 High
Unauthenticated Cross Site Scripting (XSS) in Ultimate Addons for Contact Form 7 <=3.5.45 versions.
CVE-2026-65446 2 Wordpress, Wp Chill 2 Wordpress, Kali Forms 2026-07-28 7.1 High
Unauthenticated Cross Site Scripting (XSS) in Kali Forms <= 2.4.18 versions.
CVE-2026-65438 2 Kofimokome, Wordpress 2 Message Filter For Contact Form 7, Wordpress 2026-07-28 7.1 High
Unauthenticated Cross Site Scripting (XSS) in Message Filter for Contact Form 7 <= 1.6.3.9 versions.
CVE-2026-65440 2 Roxnor, Wordpress 2 Getgenie, Wordpress 2026-07-28 7.1 High
Unauthenticated Cross Site Scripting (XSS) in GetGenie <= 4.4.3 versions.
CVE-2026-65441 2 Nexcess, Wordpress 2 Givewp, Wordpress 2026-07-28 7.1 High
Unauthenticated Cross Site Scripting (XSS) in GiveWP <= 4.16.3 versions.
CVE-2026-59531 2 Anh Tran, Wordpress 2 Falcon – Wordpress Optimizations & Tweaks, Wordpress 2026-07-27 7.5 High
Unauthenticated Unknown in Falcon – WordPress Optimizations & Tweaks <= 2.10.0 versions.
CVE-2026-59536 2 Cocart Headless, Wordpress 2 Cocart – Headless Ecommerce, Wordpress 2026-07-27 7.5 High
Unauthenticated Broken Access Control in CoCart – Headless ecommerce <= 4.8.4 versions.
CVE-2026-59537 2 Sender, Wordpress 2 Sender – Newsletter, Sms And Email Marketing Automation For Woocommerce, Wordpress 2026-07-27 7.6 High
Administrator SQL Injection in Sender – Newsletter, SMS and Email Marketing Automation for WooCommerce <= 2.10.22 versions.
CVE-2026-59548 2 Byteflows, Wordpress 2 Byteflows Travel & Hotel Booking, Wordpress 2026-07-27 7.5 High
Unauthenticated Sensitive Data Exposure in Byteflows Travel &amp; Hotel Booking <= 1.0.0 versions.
CVE-2026-59552 2 Shahadat Hossain, Wordpress 2 3d Flipbook Pdf Viewer & Embedder, Wordpress 2026-07-27 7.2 High
Unauthenticated Server Side Request Forgery (SSRF) in 3D Flipbook PDF Viewer &amp; Embedder <= 1.4.2 versions.
CVE-2026-59557 2 Franky, Wordpress 2 Events Made Easy, Wordpress 2026-07-27 6.5 Medium
Unauthenticated Broken Access Control in Events Made Easy <= 3.1.3 versions.
CVE-2026-59559 2 Themewant, Wordpress 2 Rt Mega Menu – Mega Menu Builder For Elementor & Gutenberg, Wordpress 2026-07-27 6.5 Medium
Subscriber Cross Site Scripting (XSS) in RT Mega Menu – Mega Menu Builder for Elementor &amp; Gutenberg <= 1.5.1 versions.
CVE-2026-65433 2 Themewant, Wordpress 2 Rt Mega Menu – Mega Menu Builder For Elementor & Gutenberg, Wordpress 2026-07-27 6.5 Medium
Subscriber Broken Access Control in RT Mega Menu – Mega Menu Builder for Elementor &amp; Gutenberg <= 1.5.1 versions.
CVE-2026-65435 2 Thrive Themes Coupon, Wordpress 2 Thrive Leads Version, Wordpress 2026-07-27 6.5 Medium
Unauthenticated Broken Access Control in Thrive Leads Version <= 10.9.2 versions.
CVE-2026-65558 2 Wordpress, Wpcenter 2 Wordpress, Affiliatex 2026-07-27 5.4 Medium
Unauthenticated Server Side Request Forgery (SSRF) in AffiliateX <= 2.3.5 versions.
CVE-2026-65561 2 Miniorange, Wordpress 2 Wordpress Social Login And Register, Wordpress 2026-07-27 6.5 Medium
Contributor Cross Site Scripting (XSS) in WordPress Social Login and Register <= 7.8.0 versions.
CVE-2026-65563 2 Themeisle, Wordpress 2 Orbit Fox By Themeisle, Wordpress 2026-07-27 5.9 Medium
Author Cross Site Scripting (XSS) in Orbit Fox by ThemeIsle <= 3.0.7 versions.
CVE-2026-65567 2 Nexcess, Wordpress 2 Event Tickets, Wordpress 2026-07-27 5.3 Medium
Unauthenticated Broken Access Control in Event Tickets <= 5.29.0.1 versions.
CVE-2026-66434 2 Sayontan Sinha, Wordpress 2 Photonic Gallery & Lightbox For Flickr, Smugmug & Others, Wordpress 2026-07-27 6.5 Medium
Contributor Cross Site Scripting (XSS) in Photonic Gallery & Lightbox for Flickr, SmugMug & Others <= 3.33 versions.