Browse All CVEs
13,178 vulnerabilities matching filters.
| CVE | Severity | CVSS | EPSS | First Seen | Flags | Description |
|---|---|---|---|---|---|---|
CVE-2026-48883 |
high | 7.5 | 0.0024 | 2026-10-29 | Unauthenticated Broken Access Control in WPC Product Bundles for WooCommerce <= 8.5.3 vers | |
CVE-2026-48885 |
high | 7.1 | 0.0018 | 2026-10-29 | Unauthenticated Cross Site Scripting (XSS) in HollerBox <= 2.3.10.1 versions. | |
CVE-2026-48889 |
high | 8.8 | 0.0041 | 2026-10-29 | Subscriber Privilege Escalation in Amelia <= 2.3 versions. | |
CVE-2026-48966 |
high | 7.1 | 0.0018 | 2026-10-29 | Unauthenticated Cross Site Scripting (XSS) in Funnel Builder by FunnelKit <= 3.15.0.2 vers | |
CVE-2026-48970 |
high | 8.1 | 0.0039 | 2026-10-29 | Unauthenticated Broken Authentication in Really Simple SSL <= 9.5.10 versions. | |
CVE-2026-49055 |
high | 7.1 | 0.0023 | 2026-10-29 | Unauthenticated Cross Site Scripting (XSS) in Drag and Drop Multiple File Upload – Contact | |
CVE-2026-49056 |
high | 7.5 | 0.0037 | 2026-10-29 | Unauthenticated Sensitive Data Exposure in WooCommerce PDF Invoices, Packing Slips, Delive | |
CVE-2026-49061 |
high | 7.5 | 0.0036 | 2026-10-29 | Unauthenticated Arbitrary File Download in WPC Product Options for WooCommerce <= 3.2.1 ve | |
CVE-2026-49063 |
high | 7.3 | 0.0021 | 2026-10-29 | Unauthenticated Privilege Escalation in Listdom <= 5.5.0 versions. | |
CVE-2026-49065 |
high | 8.2 | 0.0025 | 2026-10-29 | Unauthenticated Broken Access Control in Hippoo Mobile App for WooCommerce <= 1.9.5 versio | |
CVE-2026-49066 |
high | 7.5 | 0.0029 | 2026-10-29 | Unauthenticated Sensitive Data Exposure in Conekta Payment Gateway <= 6.0.0 versions. | |
CVE-2026-49068 |
high | 7.5 | 0.0039 | 2026-10-29 | Subscriber Sensitive Data Exposure in Coupon Affiliates <= 7.8.1 versions. | |
CVE-2026-49082 |
high | 7.4 | 0.0026 | 2026-10-29 | Subscriber Sensitive Data Exposure in Chatway Live Chat – AI Chatbot, Customer Suppo | |
CVE-2026-49110 |
high | 7.5 | 0.0024 | 2026-10-29 | Unauthenticated Broken Authentication in Upsell Order Bump Offer for WooCommerce <= 3.1.4 | |
CVE-2026-49112 |
high | 7.5 | 0.0033 | 2026-10-29 | Unauthenticated Path Traversal in Shared Files <= 1.7.64 versions. | |
CVE-2026-49780 |
high | 8.8 | 0.0028 | 2026-10-29 | Customer Privilege Escalation in Dokan <= 5.0.2 versions. | |
CVE-2026-52692 |
high | 7.5 | 0.0024 | 2026-10-29 | Unauthenticated Sensitive Data Exposure in Affiliates Manager <= 2.9.50 versions. | |
CVE-2026-52694 |
high | 7.5 | 0.0024 | 2026-10-29 | Unauthenticated Sensitive Data Exposure in Signature Add-On for WooCommerce <= 2.0 version | |
CVE-2026-52695 |
high | 7.5 | 0.0024 | 2026-10-29 | Unauthenticated Sensitive Data Exposure in ABC Crypto Checkout <= 1.8.2 versions. | |
CVE-2026-52699 |
high | 7.5 | 0.0023 | 2026-10-29 | Unauthenticated Insecure Direct Object References (IDOR) in VikRentCar <= 1.4.5 versions. | |
CVE-2026-52700 |
high | 8.5 | 0.0037 | 2026-10-29 | Subscriber SQL Injection in WCMultiShipping <= 3.0.2 versions. | |
CVE-2026-52702 |
high | 7.1 | 0.0014 | 2026-10-29 | Unauthenticated Cross Site Scripting (XSS) in SEO Redirection <= 9.17 versions. | |
CVE-2026-5064 |
high | 8.5 | 0.0011 | 2026-10-29 | Potential security vulnerabilities have been identified in the HP One Agent for certain H | |
CVE-2026-48599 |
high | 7.6 | 0.0034 | 2026-10-29 | Authorization Bypass Through User-Controlled Key vulnerability in elixir-grpc grpc allows | |
CVE-2026-48854 |
high | 8.7 | 0.0045 | 2026-10-29 | Allocation of Resources Without Limits or Throttling vulnerability in elixir-grpc grpc all | |
CVE-2026-53430 |
high | 8.7 | 0.0043 | 2026-10-29 | Improper Handling of Highly Compressed Data (Data Amplification) vulnerability in elixir-g | |
CVE-2026-12161 |
high | 8.8 | 0.0044 | 2026-10-29 | Improper input validation in the SSH Elevate Shell feature allows an authenticated user w | |
CVE-2026-7273 |
high | 8.8 | 0.0278 | 2026-10-29 | KEV | Zyxel GS1900 series switches contain a stack-based buffer overflow vulnerability in the CG |
CVE-2026-8443 |
high | 8.8 | 0.0034 | 2026-10-29 | The WP Review Slider Pro plugin for WordPress is vulnerable to SQL Injection via the 'styp | |
CVE-2026-8444 |
high | 8.8 | 0.0035 | 2026-10-29 | The WP Review Slider Pro plugin for WordPress is vulnerable to SQL Injection via the 'curs | |
CVE-2026-10825 |
high | 7.1 | 0.0024 | 2026-10-29 | A denial-of-service vulnerability exists in the WebSocket API due to insufficient validati | |
CVE-2026-39437 |
high | 7.1 | 0.0014 | 2026-10-29 | Unauthenticated Cross Site Scripting (XSS) in Min Max Step Quantity Limits Manager for Woo | |
CVE-2026-39490 |
high | 7.5 | 0.0031 | 2026-10-29 | Unauthenticated Broken Access Control in JupiterX Core <= 4.14.1 versions. | |
CVE-2026-39581 |
high | 8.5 | 0.0028 | 2026-10-29 | Subscriber SQL Injection in WP Sessions Time Monitoring Full Automatic <= 1.1.4 versions. | |
CVE-2026-52711 |
high | 7.5 | 0.0022 | 2026-10-29 | Unauthenticated Broken Access Control in WooCommerce POS <= 1.8.14 versions. | |
CVE-2026-52712 |
high | 7.6 | 0.0023 | 2026-10-29 | Subscriber SQL Injection in Attendance Manager <= 0.6.2 versions. | |
CVE-2026-54198 |
high | 7.1 | 0.0020 | 2026-10-29 | Unauthenticated Cross Site Scripting (XSS) in Media LIbrary Assistant <= 3.35 versions. | |
CVE-2026-8442 |
high | 8.1 | 0.0052 | 2026-10-29 | The WP Review Slider Pro plugin for WordPress is vulnerable to Arbitrary File Deletion in | |
CVE-2026-12305 |
high | 7.5 | 0.0037 | 2026-10-29 | Memory safety bug fixed in Thunderbird 152. This vulnerability was fixed in Firefox 152, F | |
CVE-2026-12310 |
high | 7.5 | 0.0025 | 2026-10-29 | Memory safety bug fixed in Thunderbird 152. This vulnerability was fixed in Firefox 152, F | |
CVE-2026-12312 |
high | 7.5 | 0.0025 | 2026-10-29 | Memory safety bug fixed in Thunderbird 152. This vulnerability was fixed in Firefox 152, F | |
CVE-2026-12314 |
high | 7.5 | 0.0025 | 2026-10-29 | Memory safety bug fixed in Thunderbird 152. This vulnerability was fixed in Firefox 152, F | |
CVE-2026-12317 |
high | 7.5 | 0.0029 | 2026-10-29 | Memory safety bug fixed in Thunderbird 152. This vulnerability was fixed in Firefox 152 an | |
CVE-2026-12318 |
high | 7.3 | 0.0026 | 2026-10-29 | Incorrect boundary conditions in the Libraries component in NSS. This vulnerability was fi | |
CVE-2026-12324 |
high | 7.3 | 0.0021 | 2026-10-29 | Incorrect boundary conditions in the Graphics: CanvasWebGL component. This vulnerability w | |
CVE-2026-12327 |
high | 8.1 | 0.0041 | 2026-10-29 | Memory safety bugs present in Firefox ESR 140.11, Thunderbird ESR 140.11, Firefox 151 and | |
CVE-2026-0646 |
high | 8.7 | 0.0034 | 2026-10-29 | A denial-of-service security issue exists within the 1794-AENTR adapter due to improper me | |
CVE-2026-0647 |
high | 8.8 | 0.0043 | 2026-10-29 | An improper authentication security issue exists within the 1794-AENTR adapter's embedded | |
CVE-2026-10637 |
high | 7.1 | 0.0030 | 2026-10-29 | subsys/net/ip/ipv6_mld.c:mld_send() read the packet interface via net_pkt_iface(pkt) after | |
CVE-2026-10638 |
high | 7.5 | 0.0035 | 2026-10-29 | subsys/net/ip/icmpv6.c reads the network interface from a net_pkt after that packet has be |