Browse All CVEs
50,443 vulnerabilities.
| CVE | Severity | CVSS | EPSS | First Seen | Flags | Description |
|---|---|---|---|---|---|---|
CVE-2026-122231 |
high | 7.2 | 0.0045 | 2026-11-07 | The WS Form LITE – Drag & Drop Contact Form Builder plugin for WordPress is vulnerable to | |
CVE-2026-122059 |
medium | 6.4 | 0.0035 | 2026-11-07 | The WP ImageViewer plugin for WordPress is vulnerable to Stored DOM-Based Cross-Site Scrip | |
CVE-2026-121977 |
medium | 5.4 | 0.0036 | 2026-11-07 | The JetFormBuilder — Dynamic Blocks Form Builder plugin for WordPress is vulnerable to Sto | |
CVE-2026-121976 |
medium | 6.4 | 0.0032 | 2026-11-07 | The Modula plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'item | |
CVE-2026-120685 |
medium | 5.4 | 0.0035 | 2026-11-07 | The Real Testimonials – Testimonial Slider, Collect Customer Reviews and Video Testimonial | |
CVE-2026-120683 |
medium | 5.4 | 0.0034 | 2026-11-07 | The Real Testimonials – Testimonial Slider, Collect Customer Reviews and Video Testimonial | |
CVE-2026-120509 |
medium | 4.7 | 0.0031 | 2026-11-07 | The Real Testimonials – Testimonial Slider, Collect Customer Reviews and Video Testimonial | |
CVE-2026-119183 |
high | 7.2 | 0.0042 | 2026-11-07 | The JetFormBuilder — Dynamic Blocks Form Builder plugin for WordPress is vulnerable to Sto | |
CVE-2026-119075 |
critical | 9.8 | 0.0053 | 2026-11-07 | The Registration Form for WooCommerce plugin for WordPress is vulnerable to privilege esca | |
CVE-2026-118267 |
high | 8.1 | 0.0162 | 2026-11-07 | The WP Data Access – App Builder for Tables, Forms, Dashboards, Charts & Maps plugin for W | |
CVE-2026-118066 |
critical | 9.1 | 0.0226 | 2026-11-07 | The Appointment Booking Plugin – LatePoint | Calendar & Scheduling for WordPress plugin fo | |
CVE-2026-118056 |
medium | 4.9 | 0.0031 | 2026-11-07 | The Image Hover Effects Ultimate ( Image Gallery, Effects, Lightbox, Comparison & Magnifie | |
CVE-2026-118050 |
medium | 6.4 | 0.0031 | 2026-11-07 | The Football Pool plugin for WordPress is vulnerable to Stored Cross-Site Scripting via th | |
CVE-2026-118047 |
medium | 6.4 | 0.0036 | 2026-11-07 | The Falang multilanguage for WordPress plugin for WordPress is vulnerable to Stored Cross- | |
CVE-2026-116751 |
high | 7.5 | 0.0042 | 2026-11-07 | The Booking for Appointments and Events Calendar – Amelia Pro plugin for WordPress is vuln | |
CVE-2026-116537 |
high | 7.2 | 0.0042 | 2026-11-07 | The Link Library plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the | |
CVE-2026-115548 |
high | 7.2 | 0.0037 | 2026-11-07 | The Quttera ThreatSign – Web Malware Scanner for WordPress plugin for WordPress is vulnera | |
CVE-2026-111370 |
high | 7.2 | 0.0042 | 2026-11-07 | The WP Visitor Statistics (Real Time Traffic) plugin for WordPress is vulnerable to Stored | |
CVE-2026-111317 |
high | 7.2 | 0.0042 | 2026-11-07 | The JetFormBuilder — Dynamic Blocks Form Builder plugin for WordPress is vulnerable to Sto | |
CVE-2026-109991 |
high | 7.5 | 0.0048 | 2026-11-07 | The FunnelKit Payment Gateway for Stripe WooCommerce plugin for WordPress is vulnerable to | |
CVE-2026-109230 |
high | 7.2 | 0.0037 | 2026-11-07 | The WP Visitor Statistics (Real Time Traffic) plugin for WordPress is vulnerable to Stored | |
CVE-2026-109214 |
high | 7.2 | 0.0038 | 2026-11-07 | The User Frontend – Membership, User Registration, User Profile, User Directory & Content | |
CVE-2026-104768 |
high | 7.5 | 0.0056 | 2026-11-07 | The AutomatorWP – No-Code Workflow Automation, Integration & Webhooks Plugin, now with AI | |
CVE-2026-104760 |
medium | 6.4 | 0.0031 | 2026-11-07 | The weDocs: AI Powered Knowledge Base, Docs, Documentation, Wiki & AI Chatbot plugin for W | |
CVE-2026-104746 |
high | 8.1 | 0.0095 | 2026-11-07 | The Motors – Car Dealership & Classified Listings Plugin plugin for WordPress is vulnerabl | |
CVE-2026-104014 |
critical | 9.8 | 0.0072 | 2026-11-07 | The Naimur Email OTP Verification for WooCommerce plugin for WordPress is vulnerable to au | |
CVE-2026-103914 |
medium | 6.5 | 0.0034 | 2026-11-07 | The Dynific Addons for Elementor plugin for WordPress is vulnerable to SQL Injection via t | |
CVE-2026-102564 |
medium | 6.5 | 0.0047 | 2026-11-07 | The The Dynific Addons for Elementor (formerly Anywhere Elementor) plugin for WordPress is | |
CVE-2026-120365 |
medium | 6.5 | 0.0017 | 2026-11-07 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulne | |
CVE-2026-119525 |
medium | 4.3 | 0.0020 | 2026-11-07 | Missing Authorization vulnerability in WP Desk Dropshipping XML for WooCommerce dropshippi | |
CVE-2026-121724 |
medium | 4.3 | 0.0024 | 2026-11-07 | Missing Authorization vulnerability in WebberZone Contextual Related Posts contextual-rela | |
CVE-2026-120364 |
medium | 6.5 | 0.0017 | 2026-11-07 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulne | |
CVE-2026-119523 |
medium | 5.3 | 0.0023 | 2026-11-07 | Missing Authorization vulnerability in Cozmoslabs Paid Member Subscriptions paid-member-su | |
CVE-2026-123468 |
medium | 4.3 | 0.0020 | 2026-11-07 | Missing Authorization vulnerability in StylemixThemes Motors motors-car-dealership-classif | |
CVE-2026-123148 |
medium | 5.3 | 0.0023 | 2026-11-07 | Missing Authorization vulnerability in TMS IvyForms ivyforms allows Exploiting Incorrectly | |
CVE-2026-120857 |
medium | 5.3 | 0.0020 | 2026-11-07 | Missing Authorization vulnerability in VideoWhisper.com 2Way VideoCalls and Random Chat we | |
CVE-2026-120837 |
medium | 4.3 | 0.0022 | 2026-11-07 | Missing Authorization vulnerability in Everest Forms Everest Forms everest-forms allows Ex | |
CVE-2026-119513 |
medium | 5.3 | 0.0023 | 2026-11-07 | Missing Authorization vulnerability in Ahmad JS Help Desk js-support-ticket allows Exploit | |
CVE-2026-123470 |
medium | 4.3 | 0.0023 | 2026-11-07 | Missing Authorization vulnerability in HivePress HivePress hivepress allows Exploiting Inc | |
CVE-2026-119496 |
medium | 5.3 | 0.0027 | 2026-11-07 | Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) vulnerabilit | |
CVE-2026-121571 |
medium | 5.3 | 0.0023 | 2026-11-07 | Missing Authorization vulnerability in WP Desk Autopay dla WooCommerce pay-wp allows Explo | |
CVE-2026-123961 |
high | 8.6 | 0.0080 | 2026-11-07 | A security vulnerability has been detected in TOTOLINK CA300-PoE 6.2c.884. This impacts th | |
CVE-2026-121783 |
medium | 6.5 | 0.0016 | 2026-11-07 | Cross-Site Request Forgery (CSRF) vulnerability in Passionate Programmer Peter WP Data Acc | |
CVE-2026-119501 |
medium | 6.5 | 0.0020 | 2026-11-07 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulne | |
CVE-2026-119492 |
medium | 4.3 | 0.0024 | 2026-11-07 | Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) vulnerabilit | |
CVE-2026-119490 |
medium | 5.3 | 0.0024 | 2026-11-07 | Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) vulnerabilit | |
CVE-2026-119508 |
medium | 5.3 | 0.0023 | 2026-11-07 | Missing Authorization vulnerability in Mamunur Rashid Radius Booking — Booking Calendar fo | |
CVE-2026-119478 |
medium | 4.3 | 0.0024 | 2026-11-07 | Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) vulnerabilit | |
CVE-2026-123960 |
critical | 9.4 | 0.0080 | 2026-11-07 | A weakness has been identified in TOTOLINK CA300-PoE 6.2c.884. This affects the function s | |
CVE-2026-120850 |
medium | 6.5 | 0.0020 | 2026-11-07 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulne |