Export limit exceeded: 15167 CVEs match your query. Please refine your search to export 10,000 CVEs or fewer.

Search

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Search Examples

CVEs in KEV CVEs with EPSS >= 80% Crit. Microsoft High Apache SQL Injection (CWE-89) Linux Kernel High (CVSS 3.1) Apache Struts RCE (Remote Code Execution) XSS (CWE-79) Critical (CVSS 4.0) CVEs to check

Search Results (15167 CVEs found)

Export CSV
CVE Vendors Products Updated CVSS v3.1
CVE-2026-66687 2 Magepeopleteam, Wordpress 2 Wpbookingly, Wordpress 2026-08-13 6.5 Medium
Customer Cross Site Scripting (XSS) in WpBookingly <= 1.3.2 versions.
CVE-2026-66693 2 Stylemix, Wordpress 2 Motors, Wordpress 2026-08-13 6.5 Medium
Subscriber Broken Access Control in Motors <= 1.4.113 versions.
CVE-2026-66700 2 Wordpress, Zaytech 2 Wordpress, Smart Online Order For Clover 2026-08-13 7.1 High
Unauthenticated Cross Site Scripting (XSS) in Smart Online Order for Clover <= 1.6.1 versions.
CVE-2026-73349 2 Nexcess, Wordpress 2 Givewp, Wordpress 2026-08-13 5.3 Medium
Unauthenticated Broken Access Control in GiveWP < 4.16.6 versions.
CVE-2026-28173 2 Arraytics, Wordpress 2 Wp Event Solution, Wordpress 2026-08-13 7.1 High
Customer Arbitrary Content Deletion in WP Event SOlution <= 4.1.19 versions.
CVE-2026-28175 2 Wordpress, Wp-buy 2 Wordpress, Visitor Traffic Real Time Statistics 2026-08-13 7.1 High
Unauthenticated Cross Site Scripting (XSS) in Visitors Traffic Real Time Statistics <= 8.11 versions.
CVE-2026-28176 2 Booking Activities Team, Wordpress 2 Booking Activities, Wordpress 2026-08-13 8.8 High
Unauthenticated PHP Object Injection in Booking Activities <= 1.18.4 versions.
CVE-2026-28181 2 Acymailing Newsletter Team, Wordpress 2 Acymailing Smtp Newsletter, Wordpress 2026-08-13 6.5 Medium
Subscriber Broken Access Control in AcyMailing SMTP Newsletter <= 10.11.1 versions.
CVE-2026-61960 2 Themeisle, Wordpress 2 Wp Full Stripe Free, Wordpress 2026-08-13 7.1 High
Unauthenticated Cross Site Scripting (XSS) in WP Full Stripe Free <= 8.5.0 versions.
CVE-2026-61966 2 Denishua, Wordpress 2 Wpjam Basic, Wordpress 2026-08-13 9.3 Critical
Subscriber SQL Injection in WPJAM Basic <= 7.0.1 versions.
CVE-2026-61974 2 Kitae-park, Wordpress 2 Mang Board Wp, Wordpress 2026-08-13 7.1 High
Unauthenticated Cross Site Scripting (XSS) in Mang Board WP <= 2.3.4 versions.
CVE-2026-61980 2 Daan.dev, Wordpress 2 Omgf Pro, Wordpress 2026-08-13 7.5 High
Unauthenticated Arbitrary File Download in OMGF Pro <= 5.2.7 versions.
CVE-2026-61984 2 Amauri, Wordpress 2 Wpmobile.app, Wordpress 2026-08-13 7.5 High
Unauthenticated Broken Access Control in WPMobile.App <= 11.77 versions.
CVE-2026-66450 2 Dylan Kuhn, Wordpress 2 Geo Mashup, Wordpress 2026-08-13 8.1 High
Unauthenticated Local File Inclusion in Geo Mashup <= 1.13.18 versions.
CVE-2026-66443 2 Pete Nelson, Wordpress 2 Rest Api Log, Wordpress 2026-08-13 7.5 High
Unauthenticated Sensitive Data Exposure in REST API Log <= 1.7.1 versions.
CVE-2026-66441 2 Multivendorx, Wordpress 2 Multivendorx, Wordpress 2026-08-13 7.5 High
Unauthenticated Broken Access Control in MultiVendorX <= 5.0.10 versions.
CVE-2026-66436 2 Realmag777, Wordpress 2 Active Products Tables For Woocommerce, Wordpress 2026-08-13 9.3 Critical
Unauthenticated SQL Injection in Active Products Tables for WooCommerce <= 1.1.1 versions.
CVE-2026-65582 2 Liquidthemes, Wordpress 2 Ai Hub, Wordpress 2026-08-13 7.7 High
Subscriber Arbitrary File Download in AI Hub <= 1.3.10 versions.
CVE-2026-28174 2 Arraytics, Wordpress 2 Wp Event Solution, Wordpress 2026-08-13 6.5 Medium
Customer Sensitive Data Exposure in WP Event SOlution <= 4.1.18 versions.
CVE-2026-28170 2 Meril, Wordpress 2 Blog Floating Button, Wordpress 2026-08-13 7.1 High
Unauthenticated Cross Site Scripting (XSS) in Blog Floating Button <= 1.4.20 versions.