Browse All CVEs
50,443 vulnerabilities.
| CVE | Severity | CVSS | EPSS | First Seen | Flags | Description |
|---|---|---|---|---|---|---|
CVE-2026-120842 |
medium | 5.3 | 0.0027 | 2026-11-07 | Missing Authorization vulnerability in Brainstorm Force SureForms sureforms allows Exploit | |
CVE-2026-120840 |
medium | 4.3 | 0.0024 | 2026-11-07 | Missing Authorization vulnerability in ThemeGrill User Registration user-registration allo | |
CVE-2026-119520 |
medium | 6.5 | 0.0020 | 2026-11-07 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulne | |
CVE-2026-119500 |
medium | 6.5 | 0.0020 | 2026-11-07 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulne | |
CVE-2026-119494 |
medium | 5.3 | 0.0024 | 2026-11-07 | Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) vulnerabilit | |
CVE-2026-119493 |
medium | 6.5 | 0.0020 | 2026-11-07 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulne | |
CVE-2026-119486 |
medium | 4.3 | 0.0024 | 2026-11-07 | Missing Authorization vulnerability in WP ManageNinja LLC FluentBoards fluent-boards allow | |
CVE-2026-119507 |
medium | 5.3 | 0.0031 | 2026-11-07 | Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) vulnerabilit | |
CVE-2026-119473 |
medium | 4.3 | 0.0028 | 2026-11-07 | Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) vulnerabilit | |
CVE-2026-119465 |
medium | 5.3 | 0.0032 | 2026-11-07 | Insertion of Sensitive Information Into Sent Data vulnerability in WPVibes Elementor Addon | |
CVE-2026-123959 |
high | 8.5 | 0.0084 | 2026-11-07 | A security flaw has been discovered in TOTOLINK CA300-PoE 6.2c.884. The impacted element i | |
CVE-2026-61990 |
medium | 4.3 | 0.0024 | 2026-11-07 | Missing Authorization vulnerability in WC Lovers WCFM Membership wc-multivendor-membership | |
CVE-2026-123469 |
medium | 5.3 | 0.0019 | 2026-11-07 | Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) vulnerabilit | |
CVE-2026-123466 |
medium | 5.3 | 0.0026 | 2026-11-07 | Missing Authorization vulnerability in LeapWorx Premium Blocks – Gutenberg Blocks for Word | |
CVE-2026-123464 |
medium | 6.5 | 0.0017 | 2026-11-07 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulne | |
CVE-2026-122668 |
medium | 4.3 | 0.0024 | 2026-11-07 | Missing Authorization vulnerability in myCred myCred mycred allows Exploiting Incorrectly | |
CVE-2026-121766 |
medium | 5.4 | 0.0022 | 2026-11-07 | Missing Authorization vulnerability in Blubrry Podcasting PowerPress Podcasting powerpress | |
CVE-2026-120853 |
medium | 5.3 | 0.0028 | 2026-11-07 | Missing Authorization vulnerability in Brainstorm Force CartFlows cartflows allows Exploit | |
CVE-2026-120852 |
medium | 5.3 | 0.0024 | 2026-11-07 | Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) vulnerabilit | |
CVE-2026-120847 |
medium | 4.3 | 0.0024 | 2026-11-07 | Missing Authorization vulnerability in Wpmet Metform metform allows Exploiting Incorrectly | |
CVE-2026-119511 |
medium | 5.3 | 0.0028 | 2026-11-07 | Missing Authorization vulnerability in Saeed MC Woocommerce Wishlist smart-wishlist-for-mo | |
CVE-2026-119502 |
medium | 5.3 | 0.0030 | 2026-11-07 | Missing Authorization vulnerability in BdThemes Ultimate Store Kit Elementor Addons ultima | |
CVE-2026-119491 |
medium | 4.3 | 0.0026 | 2026-11-07 | Missing Authorization vulnerability in David Lingren Media LIbrary Assistant media-library | |
CVE-2026-119484 |
medium | 6.3 | 0.0012 | 2026-11-07 | Cross-Site Request Forgery (CSRF) vulnerability in Supsystic Photo Gallery by Supsystic ga | |
CVE-2026-95870 |
high | 7.5 | 0.0032 | 2026-11-07 | The wpForo Forum plugin for WordPress is vulnerable to generic SQL Injection via the 'data | |
CVE-2026-121762 |
high | 8.8 | 0.0018 | 2026-11-07 | Cross-Site Request Forgery (CSRF) vulnerability in Blubrry Podcasting PowerPress Podcastin | |
CVE-2026-120548 |
medium | 5.3 | 0.0032 | 2026-11-07 | The YML for Yandex Market plugin for WordPress is vulnerable to Sensitive Information Expo | |
CVE-2026-120532 |
medium | 6.4 | 0.0031 | 2026-11-07 | The wpForo Forum plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the | |
CVE-2026-120514 |
medium | 5.4 | 0.0028 | 2026-11-07 | The Zephyr Project Manager plugin for WordPress is vulnerable to Stored Cross-Site Scripti | |
CVE-2026-119164 |
high | 7.5 | 0.0038 | 2026-11-07 | The wpForo Forum plugin for WordPress is vulnerable to Privilege Escalation in all version | |
CVE-2026-119155 |
high | 7.5 | 0.0042 | 2026-11-07 | The wpForo Forum plugin for WordPress is vulnerable to time-based SQL Injection via the 'h | |
CVE-2026-118784 |
medium | 6.4 | 0.0030 | 2026-11-07 | The WPSpeed plugin for WordPress is vulnerable to Stored Cross-Site Scripting in versions | |
CVE-2026-110004 |
medium | 6.5 | 0.0073 | 2026-11-07 | The wpForo Forum plugin for WordPress is vulnerable to arbitrary file deletion due to insu | |
CVE-2026-107616 |
high | 7.5 | 0.0050 | 2026-11-07 | The Amelia plugin for WordPress is vulnerable to unauthorized access of attendee data due | |
CVE-2026-104992 |
medium | 6.5 | 0.0035 | 2026-11-07 | The Booking for Appointments and Events Calendar – Amelia plugin for WordPress is vulnerab | |
CVE-2026-103900 |
high | 8.1 | 0.0042 | 2026-11-07 | The WPJAM Basic plugin for WordPress is vulnerable to Privilege Escalation in versions up | |
CVE-2026-66669 |
high | 8.8 | 0.0013 | 2026-11-07 | Cross-Site Request Forgery (CSRF) vulnerability in Suplugins Superb Addons: Blocks, Patter | |
CVE-2026-52713 |
medium | 5.4 | 0.0014 | 2026-11-07 | Missing Authorization vulnerability in ThimPress LearnPress learnpress allows Exploiting I | |
CVE-2026-123958 |
high | 8.6 | 0.0047 | 2026-11-07 | A vulnerability was identified in TOTOLINK CA300-PoE 6.2c.884. The affected element is the | |
CVE-2026-121768 |
medium | 6.5 | 0.0013 | 2026-11-07 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulne | |
CVE-2026-119510 |
medium | 6.5 | 0.0013 | 2026-11-07 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulne | |
CVE-2026-119467 |
medium | 5.4 | 0.0017 | 2026-11-07 | Missing Authorization vulnerability in WPVibes AnyWhere Elementor anywhere-elementor allow | |
CVE-2026-39733 |
medium | 5.3 | 0.0019 | 2026-11-07 | Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) vulnerabilit | |
CVE-2026-121779 |
medium | 5.3 | 0.0020 | 2026-11-07 | Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability i | |
CVE-2026-121778 |
medium | 5.3 | 0.0019 | 2026-11-07 | Missing Authorization vulnerability in WP Lab WP-Lister Lite for Amazon wp-lister-for-amaz | |
CVE-2026-124274 |
medium | 5.3 | 0.0018 | 2026-11-07 | Missing Authorization vulnerability in myCred myCred mycred allows Exploiting Incorrectly | |
CVE-2026-122675 |
medium | 5.4 | 0.0009 | 2026-11-07 | 1 PoC | Cross-Site Request Forgery (CSRF) vulnerability in Wpmet Wp Social wp-social allows Cross |
CVE-2026-121767 |
medium | 5.3 | 0.0019 | 2026-11-07 | Missing Authorization vulnerability in weDevs weDocs wedocs allows Exploiting Incorrectly | |
CVE-2026-121761 |
medium | 4.3 | 0.0015 | 2026-11-07 | Missing Authorization vulnerability in Infomaniak Network VOD Infomaniak vod-infomaniak al | |
CVE-2026-120848 |
medium | 6.5 | 0.0017 | 2026-11-07 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulne |