Search

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Search Examples

CVEs in KEV CVEs with EPSS >= 80% Crit. Microsoft High Apache SQL Injection (CWE-89) Linux Kernel High (CVSS 3.1) Apache Struts RCE (Remote Code Execution) XSS (CWE-79) Critical (CVSS 4.0) CVEs to check

Search Results (16394 CVEs found)

Export CSV
CVE Vendors Products Updated CVSS v3.1
CVE-2026-96826 2 Shazzad Hossain Khan, Wordpress 2 W4 Post List, Wordpress 2026-09-24 7.6 High
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Shazzad Hossain Khan W4 Post List allows Blind SQL Injection. This issue affects W4 Post List: from n/a through 3.0.6.
CVE-2026-80338 2 Cmb2, Wordpress 2 Cmb2, Wordpress 2026-09-24 6.8 Medium
The CMB2 WordPress plugin before 2.13.0 does not perform any capability check on one of its AJAX actions, allowing users with a role as low as Subscriber to create arbitrary WordPress options and corrupt existing ones, which can break core site settings and take the site offline. Exploitation requires the site's or another CMB2 WordPress plugin before 2.13.0 to have declared an oEmbed field, as the CMB2 WordPress plugin before 2.13.0 registers none of its own. The stored value is never attacker-controlled, so the issue does not lead to privilege escalation.
CVE-2026-93529 2 Bilal Naseer, Wordpress 2 Wsp Mcp – Ai Agents Connector, Wordpress 2026-09-24 6.5 Medium
Contributor Broken Access Control in WSP MCP &#8211; AI Agents Connector <= 2.7.0 versions.
CVE-2026-93622 2 Nicolaskulka, Wordpress 2 Wps Limit Login, Wordpress 2026-09-24 7.1 High
Unauthenticated Cross Site Scripting (XSS) in WPS Limit Login <= 1.5.9.3 versions.
CVE-2026-94118 2 Leap13, Wordpress 2 Premium Blocks – Gutenberg Blocks For Wordpress, Wordpress 2026-09-24 6.5 Medium
Contributor Cross Site Scripting (XSS) in Premium Blocks – Gutenberg Blocks for WordPress <= 2.3.17 versions.
CVE-2026-94174 2 Webfactory, Wordpress 2 Email Log, Wordpress 2026-09-24 7.6 High
Administrator SQL Injection in Email Log <= 2.63 versions.
CVE-2026-94457 2 Webfactory, Wordpress 2 Captcha Code, Wordpress 2026-09-24 4.8 Medium
Unauthenticated Bypass Vulnerability in Captcha Code <= 3.32 versions.
CVE-2026-94500 2 Roxnor, Wordpress 2 Elementskit Elementor Addons Lite, Wordpress 2026-09-24 6.5 Medium
Contributor Cross Site Scripting (XSS) in ElementsKit Elementor addons Lite <= 4.0.5 versions.
CVE-2026-95593 2 Ben Roberts, Wordpress 2 Ultimeter, Wordpress 2026-09-24 7.6 High
Editor SQL Injection in Ultimeter <= 3.0.8 versions.
CVE-2026-95603 2 Victor Rodriguez, Wordpress 2 Reycob Product Import Export, Wordpress 2026-09-24 7.2 High
Shop manager PHP Object Injection in Reycob Product Import Export <= 2.3.0 versions.
CVE-2026-94176 2 Kitae-park, Wordpress 2 Mang Board Wp, Wordpress 2026-09-24 7.1 High
Unauthenticated Cross Site Scripting (XSS) in Mang Board WP <= 2.4.1 versions.
CVE-2026-94487 2 Publishpress, Wordpress 2 Capabilities, Wordpress 2026-09-24 8.1 High
Unauthenticated Cross Site Request Forgery (CSRF) in PublishPress Capabilities <= 2.50.1 versions.
CVE-2026-93623 2 Jordy Meow, Wordpress 2 Ai-engine, Wordpress 2026-09-24 5.3 Medium
Unauthenticated Insecure Direct Object References (IDOR) in AI Engine <= 3.7.8 versions.
CVE-2026-93774 2 Jacob N. Breetvelt, Wordpress 2 Wp Photo Album Plus, Wordpress 2026-09-24 7.1 High
Unauthenticated Cross Site Scripting (XSS) in WP Photo Album Plus <= 9.3.02.002 versions.
CVE-2026-94391 2 Rustaurius, Wordpress 2 Ultimate Faq, Wordpress 2026-09-24 6.5 Medium
Contributor Cross Site Scripting (XSS) in Ultimate FAQ <= 2.4.14 versions.
CVE-2026-93527 2 Bdthemes, Wordpress 2 Live Copy Paste For Elementor, Wordpress 2026-09-23 8.5 High
Contributor SQL Injection in Live Copy Paste for Elementor <= 1.5.10 versions.
CVE-2026-94179 2 Razorpay, Wordpress 2 Razorpay Payment Button, Wordpress 2026-09-23 7.1 High
Unauthenticated Cross Site Scripting (XSS) in Razorpay Payment Button <= 2.4.9 versions.
CVE-2026-94461 2 Metaphorcreations, Wordpress 2 Ditty, Wordpress 2026-09-23 6.5 Medium
Contributor Cross Site Scripting (XSS) in Ditty <= 3.1.69 versions.
CVE-2026-94680 2 Radiustheme, Wordpress 2 The Post Grid, Wordpress 2026-09-23 6.5 Medium
Contributor Cross Site Scripting (XSS) in The Post Grid <= 7.9.5 versions.
CVE-2026-94498 2 Appmysite, Wordpress 2 Appmysite, Wordpress 2026-09-23 6.5 Medium
Unauthenticated Broken Access Control in AppMySite <= 3.15.4 versions.