Browse All CVEs
13,169 vulnerabilities matching filters.
| CVE | Severity | CVSS | EPSS | First Seen | Flags | Description |
|---|---|---|---|---|---|---|
CVE-2026-40726 |
high | 8.2 | 0.0024 | 2026-10-29 | Unauthenticated Broken Access Control in User Registration Stripe <= 1.3.14 versions. | |
CVE-2026-40731 |
high | 8.1 | 0.0042 | 2026-10-29 | Unauthenticated Local File Inclusion in ChapterOne <= 1.7 versions. | |
CVE-2026-40735 |
high | 8.1 | 0.0040 | 2026-10-29 | Unauthenticated PHP Object Injection in Reina <= 2.1 versions. | |
CVE-2026-40736 |
high | 8.1 | 0.0025 | 2026-10-29 | Unauthenticated PHP Object Injection in Laurits <= 1.5.1 versions. | |
CVE-2026-40739 |
high | 8.1 | 0.0032 | 2026-10-29 | Unauthenticated PHP Object Injection in LuxeDrive <= 1.4 versions. | |
CVE-2026-40751 |
high | 8.1 | 0.0032 | 2026-10-29 | Unauthenticated PHP Object Injection in Ashtanga <= 1.2 versions. | |
CVE-2026-40753 |
high | 8.1 | 0.0031 | 2026-10-29 | Unauthenticated PHP Object Injection in EasyMeals <= 1.5.1 versions. | |
CVE-2026-40754 |
high | 8.1 | 0.0025 | 2026-10-29 | Unauthenticated PHP Object Injection in Roisin <= 1.4 versions. | |
CVE-2026-40755 |
high | 8.1 | 0.0025 | 2026-10-29 | Unauthenticated PHP Object Injection in TechLink <= 1.3 versions. | |
CVE-2026-40758 |
high | 8.1 | 0.0032 | 2026-10-29 | Unauthenticated PHP Object Injection in Léonie <= 1.2.1 versions. | |
CVE-2026-40759 |
high | 8.1 | 0.0032 | 2026-10-29 | Unauthenticated PHP Object Injection in Esmée <= 1.4 versions. | |
CVE-2026-40760 |
high | 8.1 | 0.0025 | 2026-10-29 | Unauthenticated PHP Object Injection in Behold <= 1.5 versions. | |
CVE-2026-40761 |
high | 8.1 | 0.0025 | 2026-10-29 | Unauthenticated PHP Object Injection in Valeska <= 1.2.2 versions. | |
CVE-2026-40768 |
high | 7.3 | 0.0029 | 2026-10-29 | Unauthenticated Insecure Direct Object References (IDOR) in Salon booking system <= 10.30. | |
CVE-2026-41557 |
high | 7.1 | 0.0023 | 2026-10-29 | Unauthenticated Cross Site Scripting (XSS) in Kapee < 1.7.1 versions. | |
CVE-2026-42385 |
high | 7.1 | 0.0023 | 2026-10-29 | Unauthenticated Cross Site Scripting (XSS) in Profile Builder Pro <= 3.15.0 versions. | |
CVE-2026-42629 |
high | 8.8 | 0.0032 | 2026-10-29 | Unauthenticated Broken Authentication in PowerPack Pro for Elementor < v2.13.0 versions. | |
CVE-2026-48788 |
high | 8.2 | 0.0031 | 2026-10-29 | Remark42 is a self-hosted comment engine for blogs, articles, or any other place where rea | |
CVE-2026-48869 |
high | 7.1 | 0.0019 | 2026-10-29 | Unauthenticated Cross Site Scripting (XSS) in Enfold <= 7.1.4 versions. | |
CVE-2026-48929 |
high | 7.5 | 0.0072 | 2026-10-29 | Rocket.Chat in versions <8.5.1, <8.4.4, <8.3.6, <8.2.6, <8.1.6, <8.0.7, <7.13.9, and <7.10 | |
CVE-2026-48967 |
high | 8.5 | 0.0033 | 2026-10-29 | Subscriber SQL Injection in Geo Mashup <= 1.13.19 versions. | |
CVE-2026-49057 |
high | 7.5 | 0.0030 | 2026-10-29 | Unauthenticated Broken Access Control in JobSearch <= 3.2.7 versions. | |
CVE-2026-49073 |
high | 8.5 | 0.0021 | 2026-10-29 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulne | |
CVE-2026-49074 |
high | 7.1 | 0.0018 | 2026-10-29 | Unauthenticated Cross Site Scripting (XSS) in JetEngine <= 3.8.9.1 versions. | |
CVE-2026-49081 |
high | 8.2 | 0.0029 | 2026-10-29 | Unauthenticated Broken Access Control in User Registration Stripe <= 1.3.12 versions. | |
CVE-2026-49113 |
high | 8.5 | 0.0037 | 2026-10-29 | Subscriber Arbitrary Code Execution in Cornerstone < 7.8.8 versions. | |
CVE-2026-49778 |
high | 7.1 | 0.0019 | 2026-10-29 | Unauthenticated Cross Site Scripting (XSS) in WPFunnels Pro <= 2.9.4 versions. | |
CVE-2026-52696 |
high | 7.5 | 0.0024 | 2026-10-29 | Unauthenticated Sensitive Data Exposure in JetBlog <= 2.4.8 versions. | |
CVE-2026-52698 |
high | 7.4 | 0.0021 | 2026-10-29 | Subscriber Sensitive Data Exposure in PushEngage – Web Push Notifications, eCommerce Autom | |
CVE-2026-53876 |
high | 8.6 | 0.0179 | 2026-10-29 | RadiX AX6600 WiFi 6 Tri-Band Gaming Router contains an OS command injection vulnerability, | |
CVE-2026-54184 |
high | 8.2 | 0.0025 | 2026-10-29 | Unauthenticated Insecure Direct Object References (IDOR) in Clean Login <= 1.15 versions. | |
CVE-2026-54185 |
high | 8.5 | 0.0033 | 2026-10-29 | Subscriber SQL Injection in Cornerstone < 7.8.8 versions. | |
CVE-2026-54188 |
high | 7.1 | 0.0014 | 2026-10-29 | Unauthenticated Cross Site Scripting (XSS) in JetEngine <= 3.8.10 versions. | |
CVE-2026-54189 |
high | 7.1 | 0.0014 | 2026-10-29 | Unauthenticated Cross Site Scripting (XSS) in JetEngine <= 3.8.10 versions. | |
CVE-2026-54192 |
high | 7.1 | 0.0022 | 2026-10-29 | Unauthenticated Cross Site Scripting (XSS) in Popup box <= 6.2.9 versions. | |
CVE-2026-54195 |
high | 7.1 | 0.0020 | 2026-10-29 | Unauthenticated Cross Site Scripting (XSS) in JetFormBuilder <= 3.6.0.1 versions. | |
CVE-2026-54802 |
high | 7.5 | 0.0037 | 2026-10-29 | Unauthenticated Broken Authentication in SMS Alert Order Notifications <= 3.9.3 versions. | |
CVE-2026-54804 |
high | 7.6 | 0.0027 | 2026-10-29 | Subscriber Broken Authentication in Melhor Envio <= 2.16.3 versions. | |
CVE-2026-54805 |
high | 8.8 | 0.0038 | 2026-10-29 | Subscriber Privilege Escalation in Falang multilanguage <= 1.4.2 versions. | |
CVE-2026-9690 |
high | 7.5 | 0.0033 | 2026-10-29 | Unauthenticated Arbitrary File Download in WP Media folder Addon <= 4.0.1 versions. | |
CVE-2026-10641 |
high | 7.1 | 0.0028 | 2026-10-29 | Zephyr's Bluetooth Classic Hands-Free Profile (HFP) Hands-Free role parser (subsys/bluetoo | |
CVE-2026-39442 |
high | 8.1 | 0.0031 | 2026-10-29 | Unauthenticated PHP Object Injection in PressMart <= 1.2.26 versions. | |
CVE-2026-39445 |
high | 8.1 | 0.0040 | 2026-10-29 | Unauthenticated PHP Object Injection in Alukas < 3.0.0 versions. | |
CVE-2026-39523 |
high | 8.1 | 0.0034 | 2026-10-29 | Unauthenticated Local File Inclusion in Solene Core <= 2.3.2 versions. | |
CVE-2026-39556 |
high | 8.1 | 0.0031 | 2026-10-29 | Unauthenticated PHP Object Injection in Konsept <= 1.9 versions. | |
CVE-2026-39559 |
high | 8.1 | 0.0034 | 2026-10-29 | Unauthenticated Local File Inclusion in Uppercase < 1.2.2 versions. | |
CVE-2026-39560 |
high | 8.1 | 0.0031 | 2026-10-29 | Unauthenticated PHP Object Injection in Hiroshi <= 1.5.1 versions. | |
CVE-2026-39576 |
high | 8.1 | 0.0040 | 2026-10-29 | Unauthenticated PHP Object Injection in SingleMalt <= 1.5 versions. | |
CVE-2026-39590 |
high | 8.1 | 0.0034 | 2026-10-29 | Unauthenticated Local File Inclusion in Atomlab <= 2.4.5 versions. | |
CVE-2026-40720 |
high | 7.1 | 0.0018 | 2026-10-29 | Unauthenticated Cross Site Scripting (XSS) in Royal Elementor Addons Pro < 1.7.1041 versio |