Browse All CVEs
10,518 vulnerabilities matching filters.
| CVE | Severity | CVSS | EPSS | First Seen | Flags | Description |
|---|---|---|---|---|---|---|
CVE-2026-57400 |
medium | 6.5 | 0.0033 | 2026-10-29 | Missing Authorization vulnerability in WP Swings Event Tickets Manager for WooCommerce eve | |
CVE-2026-57402 |
medium | 6.5 | 0.0022 | 2026-10-29 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulne | |
CVE-2026-57404 |
medium | 6.5 | 0.0033 | 2026-10-29 | Missing Authorization vulnerability in magepeopleteam Booking and Rental Manager booking-a | |
CVE-2026-57406 |
medium | 6.5 | 0.0033 | 2026-10-29 | Missing Authorization vulnerability in Roxnor FundEngine wp-fundraising-donation allows Ex | |
CVE-2026-57408 |
medium | 6.5 | 0.0033 | 2026-10-29 | Missing Authorization vulnerability in peachpayments Peach Payments Gateway wc-peach-payme | |
CVE-2026-57412 |
medium | 6.5 | 0.0033 | 2026-10-29 | Missing Authorization vulnerability in Codemenschen Gift Vouchers gift-voucher allows Expl | |
CVE-2026-57413 |
medium | 6.4 | 0.0023 | 2026-10-29 | Server-Side Request Forgery (SSRF) vulnerability in bdthemes Instant Image Generator ai-im | |
CVE-2026-57414 |
medium | 6.5 | 0.0022 | 2026-10-29 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulne | |
CVE-2026-57418 |
medium | 6.5 | 0.0034 | 2026-10-29 | Missing Authorization vulnerability in BoldGrid Client Invoicing by Sprout Invoices sprout | |
CVE-2026-57419 |
medium | 6.5 | 0.0030 | 2026-10-29 | Missing Authorization vulnerability in Fahad Mahmood Stock Locations for WooCommerce stock | |
CVE-2026-57420 |
medium | 6.5 | 0.0022 | 2026-10-29 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulne | |
CVE-2026-57424 |
medium | 6.5 | 0.0033 | 2026-10-29 | Missing Authorization vulnerability in knitpay Razorpay Payment Links for WooCommerce rzp- | |
CVE-2026-57691 |
medium | 5.8 | 0.0020 | 2026-10-29 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulne | |
CVE-2026-57693 |
medium | 6.5 | 0.0022 | 2026-10-29 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulne | |
CVE-2026-57694 |
medium | 6.5 | 0.0034 | 2026-10-29 | Authorization Bypass Through User-Controlled Key vulnerability in Themeum Tutor LMS tutor | |
CVE-2026-57698 |
medium | 6.5 | 0.0036 | 2026-10-29 | Authentication Bypass Using an Alternate Path or Channel vulnerability in VillaTheme Aband | |
CVE-2026-57711 |
medium | 6.5 | 0.0022 | 2026-10-29 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulne | |
CVE-2026-57774 |
medium | 5.3 | 0.0042 | 2026-10-29 | Missing Authorization vulnerability in vowelweb VW Food Corner vw-food-corner allows Explo | |
CVE-2026-57776 |
medium | 5.3 | 0.0042 | 2026-10-29 | Missing Authorization vulnerability in vowelweb VW Wedding vw-wedding allows Exploiting In | |
CVE-2026-57778 |
medium | 5.3 | 0.0029 | 2026-10-29 | Missing Authorization vulnerability in wpdevart Booking calendar, Appointment Booking Syst | |
CVE-2026-57779 |
medium | 5.3 | 0.0029 | 2026-10-29 | Missing Authorization vulnerability in themebeez Fascinate fascinate allows Exploiting Inc | |
CVE-2026-57780 |
medium | 6.5 | 0.0022 | 2026-10-29 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulne | |
CVE-2026-57781 |
medium | 5.3 | 0.0029 | 2026-10-29 | Missing Authorization vulnerability in Sovlix MeetingHub meetinghub allows Exploiting Inco | |
CVE-2026-57782 |
medium | 5.3 | 0.0029 | 2026-10-29 | Missing Authorization vulnerability in PressTigers Universal Clocks universal-clocks allow | |
CVE-2026-57783 |
medium | 6.5 | 0.0022 | 2026-10-29 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulne | |
CVE-2026-57797 |
medium | 4.3 | 0.0033 | 2026-10-29 | Missing Authorization vulnerability in ThemeMove EduMall edumall allows Exploiting Incorre | |
CVE-2026-57812 |
medium | 6.5 | 0.0033 | 2026-10-29 | Missing Authorization vulnerability in NSquared Simply Schedule Appointments simply-schedu | |
CVE-2026-59523 |
medium | 6.5 | 0.0027 | 2026-10-29 | Missing Authorization vulnerability in NSquared Simply Schedule Appointments simply-schedu | |
CVE-2026-61952 |
medium | 4.9 | 0.0033 | 2026-10-29 | Missing Authorization vulnerability in Jose Vega WooCommerce Bulk Edit Products – WP Sheet | |
CVE-2026-61958 |
medium | 5.4 | 0.0029 | 2026-10-29 | Missing Authorization vulnerability in Saad Iqbal License Manager for WooCommerce license- | |
CVE-2026-61968 |
medium | 5.4 | 0.0029 | 2026-10-29 | Missing Authorization vulnerability in Saad Iqbal myCred mycred allows Exploiting Incorrec | |
CVE-2026-61970 |
medium | 4.9 | 0.0019 | 2026-10-29 | Server-Side Request Forgery (SSRF) vulnerability in Themeisle Auto Featured Image (Auto Po | |
CVE-2026-61975 |
medium | 5.3 | 0.0033 | 2026-10-29 | Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability i | |
CVE-2026-61976 |
medium | 5.3 | 0.0033 | 2026-10-29 | Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability i | |
CVE-2026-61977 |
medium | 5.3 | 0.0033 | 2026-10-29 | Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability i | |
CVE-2026-61983 |
medium | 5.3 | 0.0029 | 2026-10-29 | Missing Authorization vulnerability in andy_moyle Church Admin church-admin allows Exploit | |
CVE-2026-61985 |
medium | 5.3 | 0.0029 | 2026-10-29 | Missing Authorization vulnerability in magepeopleteam Car Rental Manager car-rental-manage | |
CVE-2026-62147 |
medium | 6.5 | 0.0040 | 2026-10-29 | The Tempo Operator's gateway component failed to consistently apply namespace-scoped redac | |
CVE-2026-40467 |
medium | 5.1 | 0.0021 | 2026-10-29 | Use After Free vulnerability has been found in "io.c" program file of gawk (do_getline_red | |
CVE-2026-40469 |
medium | 5.1 | 0.0021 | 2026-10-29 | Integer overflow vulnerability has been found in "builtin.c" program file of gawk (do_sub( | |
CVE-2026-40553 |
medium | 5.1 | 0.0029 | 2026-10-29 | Buffer overflow vulnerability has been found in "extension/readdir.c" program file of gawk | |
CVE-2026-61501 |
medium | 5.3 | 0.0042 | 2026-10-29 | Rejetto HFS 3.0.0 through 3.2.0 renders log entries in the administration panel as HTML wi | |
CVE-2026-61502 |
medium | 5.1 | 0.0022 | 2026-10-29 | Rejetto HFS 3.0.0 through 3.2.0 accepts state-changing API requests via the GET method and | |
CVE-2026-61503 |
medium | 6.9 | 0.0044 | 2026-10-29 | Rejetto HFS 3.0.0 through 3.2.0 returns observably different responses from its login endp | |
CVE-2026-61504 |
medium | 5.1 | 0.0024 | 2026-10-29 | Rejetto HFS 3.0.0 through 3.2.0 does not escape file names in its fallback "basic" web lis | |
CVE-2026-61505 |
medium | 6.9 | 0.0052 | 2026-10-29 | Rejetto HFS 3.0.0 through 3.2.0 allows path traversal through the lang query parameter, pe | |
CVE-2026-14906 |
medium | 5.3 | 0.0029 | 2026-10-29 | Pages with malicious titles could potentially allow saved PDF content to overwrite PDF fil | |
CVE-2026-49969 |
medium | 5.3 | 0.0042 | 2026-10-29 | Laravel-Mediable before 7.0.0 contains a server-side request forgery vulnerability that al | |
CVE-2026-49971 |
medium | 5.3 | 0.0036 | 2026-10-29 | Laravel-Mediable before 7.0.0 contains a stored cross-site scripting vulnerability that al | |
CVE-2026-58228 |
medium | 5.1 | 0.0047 | 2026-10-29 | Cross-site scripting vulnerability in phoenixframework phoenix_live_view allows an attacke |