Search

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Search Examples

CVEs in KEV CVEs with EPSS >= 80% Crit. Microsoft High Apache SQL Injection (CWE-89) Linux Kernel High (CVSS 3.1) Apache Struts RCE (Remote Code Execution) XSS (CWE-79) Critical (CVSS 4.0) CVEs to check

Search Results (1145 CVEs found)

Export CSV
CVE Vendors Products Updated CVSS v3.1
CVE-2026-94669 2 Wordpress-extensions, Wpmanageninja 2 Fluent Forms Pro Add On Pack, Fluent Forms Pro Add On Pack 2026-10-06 5.3 Medium
Missing Authorization vulnerability in WP ManageNinja LLC Fluent Forms Pro Add On Pack fluentformpro allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Fluent Forms Pro Add On Pack: from n/a through 6.2.13.
CVE-2026-105073 2 Arraytics, Wordpress-extensions 2 Wp Event Solution, Wp Event Solution 2026-10-06 5.3 Medium
Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in Arraytics WP Event Solution wp-event-solution allows Retrieve Embedded Sensitive Data.This issue affects WP Event Solution: from n/a through 4.1.25.
CVE-2026-103684 2 Arraytics, Wordpress-extensions 2 Wp Event Solution, Wp Event Solution 2026-10-06 5.3 Medium
Missing Authorization vulnerability in Arraytics WP Event Solution wp-event-solution allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP Event Solution: from n/a through 4.1.25.
CVE-2026-39783 2 Wordpress-extensions, Wp Syntex 2 Polylang, Polylang 2026-10-06 4.3 Medium
Missing Authorization vulnerability in WP SYNTEX Polylang polylang allows Retrieve Embedded Sensitive Data.This issue affects Polylang: from n/a through 3.8.7.
CVE-2026-105421 2 Nathanbarry, Wordpress-extensions 2 Kit (formerly Convertkit) For Woocommerce, Kit (formerly Convertkit) For Woocommerce 2026-10-06 5.3 Medium
Missing Authorization vulnerability in Kit Kit (formerly ConvertKit) for WooCommerce convertkit-for-woocommerce allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Kit (formerly ConvertKit) for WooCommerce: from n/a through 2.2.0.
CVE-2026-42414 2 Cridio, Wordpress-extensions 2 Listingpro, Listingpro 2026-10-06 8.5 High
Subscriber SQL Injection in ListingPro <= 2.9.12 versions.
CVE-2026-42415 2 Portotheme, Wordpress-extensions 2 Functionality, Porto Theme 2026-10-06 9.3 Critical
Unauthenticated SQL Injection in Porto Theme - Functionality <= 3.9.3 versions.
CVE-2026-42416 2 Andondesign, Wordpress-extensions 2 Udesign, Udesign Core 2026-10-06 8.5 High
Subscriber SQL Injection in UDesign Core <= 4.15.0 versions.
CVE-2026-42417 2 Reputeinfosystems, Wordpress-extensions 2 Armember, Armember Premium 2026-10-06 9.3 Critical
Unauthenticated SQL Injection in ARMember Premium <= 7.8 versions.
CVE-2026-42634 2 Bplugins, Wordpress-extensions 2 Video Background Block – Use Video As Background In The Section., Video Background Block Use Video As Background In The Section 2026-10-06 7.1 High
Unauthenticated Cross Site Scripting (XSS) in Video Background Block – Use video as background in the section. <= 2.0.3 versions.
CVE-2026-42635 2 Wordpress-extensions, Wpgenie 2 Woocommerce Simple Auctions, Woocommerce Simple Auctions 2026-10-06 7.1 High
Unauthenticated Cross Site Scripting (XSS) in WooCommerce Simple Auctions <= 3.0.10 versions.
CVE-2026-42636 2 Wordpress-extensions, Wp Legal Pages 2 Wp Cookie Notice For Gdpr, Ccpa & Eprivacy Consent, Wp Cookie Notice For Gdpr, Ccpa & Eprivacy Consent 2026-10-06 7.1 High
Unauthenticated Cross Site Scripting (XSS) in WP Cookie Notice for GDPR, CCPA & ePrivacy Consent <= 4.4.6 versions.
CVE-2026-42637 2 Payplug, Wordpress-extensions 2 Payplug For Woocommerce (official), Payplug For Woocommerce (official) 2026-10-06 6.5 Medium
Unauthenticated Settings Change in PayPlug for WooCommerce (Official) <= 3.1.0 versions.
CVE-2026-48197 2 Publishpress, Wordpress-extensions 2 Capabilities, Publishpress Capabilities 2026-10-06 7.2 High
Incorrect Privilege Assignment vulnerability in PublishPress PublishPress Capabilities capability-manager-enhanced allows Privilege Escalation.This issue affects PublishPress Capabilities: from n/a through 2.45.0.
CVE-2026-48199 2 Beplusthemes, Wordpress-extensions 2 Sermon'e, Sermon'e 2026-10-06 7.5 High
Unauthenticated Broken Access Control in Sermon'e <= 1.0.2 versions.
CVE-2026-62072 2 Progress Planner, Wordpress-extensions 2 Progress Planner, Progress Planner 2026-10-06 8.8 High
Subscriber Broken Access Control in Progress Planner <= 1.10.0 versions.
CVE-2026-94675 2 Fluent Forms Free Vs Pro, Wordpress-extensions 2 Fluent Forms Pro Add On Pack, Fluent Forms Pro Add On Pack 2026-10-06 7.1 High
Unauthenticated Cross Site Scripting (XSS) in Fluent Forms Pro Add On Pack <= 6.2.13 versions.
CVE-2026-95526 2 Realmag777, Wordpress-extensions 2 Bear, Bear 2026-10-06 7.3 High
Unauthenticated Broken Access Control in BEAR <= 1.2.2 versions.
CVE-2026-97308 2 Webfactoryltd, Wordpress-extensions 2 Wp Login Lockdown, Login Lockdown 2026-10-06 4.8 Medium
Unauthenticated Bypass Vulnerability in Login Lockdown <= 2.17 versions.
CVE-2026-100518 2 Webfactoryltd, Wordpress-extensions 2 Advanced Google Recaptcha, Advanced Google Recaptcha 2026-10-06 5.3 Medium
Unauthenticated Broken Authentication in Advanced Google reCAPTCHA <= 5.40 versions.