Browse All CVEs
37,370 vulnerabilities.
| CVE | Severity | CVSS | EPSS | First Seen | Flags | Description |
|---|---|---|---|---|---|---|
CVE-2026-53975 |
critical | 9.3 | 0.0168 | 2026-10-29 | OpenChamber 1.11.7 contains an unauthenticated remote code execution vulnerability that al | |
CVE-2026-53976 |
critical | 9.3 | 0.0261 | 2026-10-29 | OpenChamber 1.11.7 contains a path traversal vulnerability in the file-serving endpoints / | |
CVE-2026-54489 |
critical | 9.8 | 0.0062 | 2026-10-29 | Dell Virtual Storage Integrator for VMware vSphere Client, versions prior to 10.11.1.0, co | |
CVE-2026-61959 |
medium | 6.5 | 0.0022 | 2026-10-29 | Subscriber Cross Site Scripting (XSS) in Business Directory <= 6.4.24 versions. | |
CVE-2026-61961 |
high | 7.1 | 0.0025 | 2026-10-29 | Unauthenticated Cross Site Scripting (XSS) in EmbedPress <= 4.5.6 versions. | |
CVE-2026-61963 |
high | 7.1 | 0.0025 | 2026-10-29 | Unauthenticated Cross Site Scripting (XSS) in Media LIbrary Assistant <= 3.38 versions. | |
CVE-2026-61964 |
high | 7.1 | 0.0025 | 2026-10-29 | Unauthenticated Cross Site Scripting (XSS) in Ninja Tables <= 5.2.9 versions. | |
CVE-2026-65504 |
high | 7.5 | 0.0039 | 2026-10-29 | Unauthenticated Broken Access Control in BOX NOW Delivery Croatia <= 3.3.0 versions. | |
CVE-2026-65507 |
critical | 9.8 | 0.0048 | 2026-10-29 | Unauthenticated Privilege Escalation in AIWU <= 1.5.6 versions. | |
CVE-2026-65508 |
critical | 9.3 | 0.0040 | 2026-10-29 | Unauthenticated SQL Injection in Simply Schedule Appointments <= 1.6.12.10 versions. | |
CVE-2026-65513 |
high | 7.1 | 0.0025 | 2026-10-29 | Unauthenticated Cross Site Scripting (XSS) in Simply Schedule Appointments <= 1.6.12.10 ve | |
CVE-2026-65517 |
high | 7.1 | 0.0025 | 2026-10-29 | Unauthenticated Cross Site Scripting (XSS) in Easy PayPal Buy Now Button <= 2.0.4 versions | |
CVE-2026-65520 |
critical | 9.3 | 0.0040 | 2026-10-29 | Unauthenticated SQL Injection in WP OAuth Server <= 6.2.0 versions. | |
CVE-2026-65523 |
high | 7.5 | 0.0039 | 2026-10-29 | Unauthenticated Insecure Direct Object References (IDOR) in Formidable Forms Signature Onl | |
CVE-2026-65541 |
high | 7.3 | 0.0030 | 2026-10-29 | Unauthenticated Broken Access Control in Staff Training <= 1.0.7 versions. | |
CVE-2026-65542 |
high | 8.8 | 0.0050 | 2026-10-29 | Unauthenticated Broken Authentication in Super Socializer <= 7.14.5 versions. | |
CVE-2026-65543 |
high | 7.5 | 0.0042 | 2026-10-29 | Subscriber Sensitive Data Exposure in Vimeo <= 1.2.2 versions. | |
CVE-2026-65544 |
high | 7.1 | 0.0025 | 2026-10-29 | Unauthenticated Cross Site Scripting (XSS) in Super Socializer <= 7.14.5 versions. | |
CVE-2026-65545 |
high | 7.1 | 0.0025 | 2026-10-29 | Unauthenticated Cross Site Scripting (XSS) in AI Engine <= 3.6.8 versions. | |
CVE-2026-65546 |
critical | 9.3 | 0.0040 | 2026-10-29 | Unauthenticated SQL Injection in Qode Tours <= 3.1.3.1 versions. | |
CVE-2026-65547 |
— | — | — | 2026-10-29 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority | |
CVE-2026-65548 |
critical | 9.9 | 0.0079 | 2026-10-29 | Contributor Remote Code Execution (RCE) in Betheme <= 28.4.2 versions. | |
CVE-2026-65549 |
high | 7.2 | 0.0054 | 2026-10-29 | Author PHP Object Injection in Jeg Kit for Elementor <= 3.2.10 versions. | |
CVE-2026-65552 |
critical | 9.8 | 0.0056 | 2026-10-29 | Subscriber PHP Object Injection in Export User Data <= 2.2.6 versions. | |
CVE-2026-65553 |
critical | 10.0 | 0.0086 | 2026-10-29 | Unauthenticated Remote Code Execution (RCE) in Spider Analyser – WordPress搜索引擎蜘蛛分析插件 | |
CVE-2026-65554 |
high | 7.1 | 0.0034 | 2026-10-29 | Subscriber Broken Access Control in AnsPress – Question and answer 4.4.4 versions. | |
CVE-2026-65556 |
critical | 9.8 | 0.0056 | 2026-10-29 | Unauthenticated PHP Object Injection in WPBruiser {no- Captcha anti-Spam} <= 3.1.43 versio | |
CVE-2026-65559 |
high | 7.2 | 0.0046 | 2026-10-29 | Shop manager Privilege Escalation in Order Delivery Date for WooCommerce <= 4.6.0 versions | |
CVE-2026-65560 |
high | 7.1 | 0.0025 | 2026-10-29 | Unauthenticated Cross Site Scripting (XSS) in Houzez Property Feed <= 2.5.48 versions. | |
CVE-2026-65565 |
high | 7.1 | 0.0025 | 2026-10-29 | Unauthenticated Cross Site Scripting (XSS) in Survey Maker <= 5.2.3.3 versions. | |
CVE-2026-65569 |
high | 8.5 | 0.0036 | 2026-10-29 | Subscriber SQL Injection in WP Job Portal <= 2.5.6 versions. | |
CVE-2026-65570 |
high | 8.1 | 0.0040 | 2026-10-29 | Unauthenticated Bypass Vulnerability in Login with phone number <= 1.8.70 versions. | |
CVE-2026-65571 |
critical | 9.8 | 0.0056 | 2026-10-29 | Unauthenticated PHP Object Injection in 69 Clothing <= 1.2.11.1 versions. | |
CVE-2026-65572 |
critical | 9.8 | 0.0056 | 2026-10-29 | Unauthenticated PHP Object Injection in A.Williams <= 1.3.1 versions. | |
CVE-2026-65573 |
critical | 9.8 | 0.0056 | 2026-10-29 | Unauthenticated PHP Object Injection in Abelle <= 1.22 versions. | |
CVE-2026-65574 |
critical | 9.8 | 0.0056 | 2026-10-29 | Unauthenticated PHP Object Injection in Abogado <= 1.18 versions. | |
CVE-2026-65575 |
critical | 9.8 | 0.0056 | 2026-10-29 | Unauthenticated PHP Object Injection in Accalia <= 1.5.3 versions. | |
CVE-2026-65576 |
critical | 9.8 | 0.0056 | 2026-10-29 | Unauthenticated PHP Object Injection in Adrena <= 1.2.14 versions. | |
CVE-2026-65577 |
critical | 9.8 | 0.0056 | 2026-10-29 | Unauthenticated PHP Object Injection in Advice <= 1.18.0 versions. | |
CVE-2026-65578 |
critical | 9.8 | 0.0056 | 2026-10-29 | Unauthenticated PHP Object Injection in Agora <= 1.9 versions. | |
CVE-2026-65579 |
critical | 9.8 | 0.0056 | 2026-10-29 | Unauthenticated PHP Object Injection in Agricola <= 1.21.0 versions. | |
CVE-2026-65581 |
critical | 9.8 | 0.0056 | 2026-10-29 | Unauthenticated PHP Object Injection in AI ANN <= 1.29.0 versions. | |
CVE-2026-66425 |
medium | 6.5 | 0.0042 | 2026-10-29 | Unauthenticated Broken Authentication in Gutena Forms – Contact Form, Survey Form, Feedbac | |
CVE-2026-66439 |
high | 7.1 | 0.0025 | 2026-10-29 | Unauthenticated Cross Site Scripting (XSS) in Advanced AJAX Product Filters <= 3.2.0.3 ver | |
CVE-2026-66440 |
high | 7.1 | 0.0025 | 2026-10-29 | Unauthenticated Cross Site Scripting (XSS) in WPIDE – File Manager & Code Editor <= 3.5.7 | |
CVE-2026-66447 |
critical | 9.3 | 0.0040 | 2026-10-29 | Unauthenticated SQL Injection in WordPress File Upload <= 5.1.7 versions. | |
CVE-2026-66451 |
medium | 6.5 | 0.0033 | 2026-10-29 | Unauthenticated Broken Authentication in WP Event SOlution <= 4.1.9 versions. | |
CVE-2026-66452 |
medium | 6.5 | 0.0033 | 2026-10-29 | Unauthenticated Broken Access Control in Legal Text Connector of the IT-Recht Kanzlei <= 1 | |
CVE-2026-66457 |
high | 7.1 | 0.0025 | 2026-10-29 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulne | |
CVE-2026-66470 |
high | 7.1 | 0.0032 | 2026-10-29 | Subscriber Broken Access Control in Frontend Admin by DynamiApps <= 3.29.10 versions. |