Browse All CVEs
35,732 vulnerabilities.
| CVE | Severity | CVSS | EPSS | First Seen | Flags | Description |
|---|---|---|---|---|---|---|
CVE-2026-15557 |
medium | 5.5 | 0.0069 | 2026-10-29 | A weakness has been identified in waooAI waoowaoo up to 0.4.1. Affected by this vulnerabil | |
CVE-2026-22093 |
critical | 9.5 | 0.0026 | 2026-10-29 | The EVbee Service Android app uses TLS encrypted communication (HTTPS), but does not valid | |
CVE-2026-22095 |
critical | 9.3 | 0.0139 | 2026-10-29 | The network diagnosis endpoint on the web server at port 8090 is vulnerable to command inj | |
CVE-2026-22096 |
critical | 9.3 | 0.0055 | 2026-10-29 | The webserver running on port 8090 does not require authentication. This allows for sensit | |
CVE-2026-22097 |
critical | 9.3 | 0.0033 | 2026-10-29 | The firmware update mechanism does not include cryptographic signature validation. This al | |
CVE-2026-22098 |
critical | 9.2 | 0.0043 | 2026-10-29 | Various sensitive information such as passwords and charging card UIDs are written to log | |
CVE-2026-22099 |
high | 8.7 | 0.0030 | 2026-10-29 | The charging station does not require authentication for Bluetooth commands to perform act | |
CVE-2026-22100 |
high | 8.6 | 0.0110 | 2026-10-29 | The OCPP DataTransfer message `ReserveLogin` is vulnerable to command injection. By manipu | |
CVE-2026-22102 |
critical | 9.3 | 0.0053 | 2026-10-29 | A POST request sent to a specific webserver endpoint can be used to write to arbitrary fil | |
CVE-2026-22103 |
critical | 9.3 | 0.0139 | 2026-10-29 | The NPC start endpoint on the web server at port 8090 is vulnerable to command injection. | |
CVE-2026-41041 |
critical | 9.1 | 0.0060 | 2026-10-29 | URL path injection via unencoded user-supplied identifiers vulnerability in Apache Graviti | |
CVE-2026-49876 |
medium | 6.5 | 0.0049 | 2026-10-29 | Authenticated SSRF in Gravitino JobManager allows server-side HTTP requests to internal ne | |
CVE-2026-57363 |
high | 7.1 | 0.0025 | 2026-10-29 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulne | |
CVE-2026-57364 |
medium | 6.5 | 0.0035 | 2026-10-29 | Improper Validation of Specified Quantity in Input vulnerability in WPDeveloper Better Pay | |
CVE-2026-57365 |
medium | 6.5 | 0.0022 | 2026-10-29 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulne | |
CVE-2026-57368 |
high | 7.1 | 0.0025 | 2026-10-29 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulne | |
CVE-2026-57369 |
high | 7.1 | 0.0025 | 2026-10-29 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulne | |
CVE-2026-57371 |
high | 8.8 | 0.0052 | 2026-10-29 | Deserialization of Untrusted Data vulnerability in denishua WPJAM Basic wpjam-basic allows | |
CVE-2026-57372 |
high | 7.2 | 0.0027 | 2026-10-29 | Server-Side Request Forgery (SSRF) vulnerability in denishua WPJAM Basic wpjam-basic allow | |
CVE-2026-57375 |
medium | 6.5 | 0.0027 | 2026-10-29 | Missing Authorization vulnerability in FluxBuilder MStore API mstore-api allows Exploiting | |
CVE-2026-57376 |
high | 7.1 | 0.0025 | 2026-10-29 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulne | |
CVE-2026-57377 |
medium | 6.5 | 0.0033 | 2026-10-29 | Missing Authorization vulnerability in WPXPO WowAddons product-addons allows Exploiting In | |
CVE-2026-57378 |
high | 7.5 | 0.0035 | 2026-10-29 | Missing Authorization vulnerability in Phil Kurth Advanced Forms advanced-forms allows Exp | |
CVE-2026-57379 |
high | 7.1 | 0.0025 | 2026-10-29 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulne | |
CVE-2026-57380 |
high | 7.1 | 0.0025 | 2026-10-29 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulne | |
CVE-2026-57381 |
high | 7.1 | 0.0025 | 2026-10-29 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulne | |
CVE-2026-57382 |
high | 7.1 | 0.0025 | 2026-10-29 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulne | |
CVE-2026-57383 |
high | 7.1 | 0.0025 | 2026-10-29 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulne | |
CVE-2026-57385 |
high | 8.5 | 0.0036 | 2026-10-29 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulne | |
CVE-2026-57386 |
high | 8.8 | 0.0042 | 2026-10-29 | Incorrect Privilege Assignment vulnerability in Kodezen LLC aBlocks ablocks allows Privile | |
CVE-2026-57388 |
high | 7.1 | 0.0025 | 2026-10-29 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulne | |
CVE-2026-57389 |
high | 8.6 | 0.0053 | 2026-10-29 | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerabili | |
CVE-2026-57390 |
medium | 6.5 | 0.0033 | 2026-10-29 | Missing Authorization vulnerability in EDGARROJAS Extra Product Options Builder for WooCom | |
CVE-2026-57391 |
medium | 6.5 | 0.0024 | 2026-10-29 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulne | |
CVE-2026-57392 |
medium | 6.5 | 0.0033 | 2026-10-29 | Missing Authorization vulnerability in Themefic Tourfic tourfic allows Exploiting Incorrec | |
CVE-2026-57393 |
medium | 6.5 | 0.0037 | 2026-10-29 | Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability i | |
CVE-2026-57394 |
high | 7.1 | 0.0025 | 2026-10-29 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulne | |
CVE-2026-57395 |
medium | 6.5 | 0.0034 | 2026-10-29 | Missing Authorization vulnerability in Themefic Tourfic tourfic allows Exploiting Incorrec | |
CVE-2026-57396 |
high | 7.1 | 0.0025 | 2026-10-29 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulne | |
CVE-2026-57398 |
high | 7.1 | 0.0025 | 2026-10-29 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulne | |
CVE-2026-57400 |
medium | 6.5 | 0.0033 | 2026-10-29 | Missing Authorization vulnerability in WP Swings Event Tickets Manager for WooCommerce eve | |
CVE-2026-57401 |
critical | 9.9 | 0.0055 | 2026-10-29 | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerabili | |
CVE-2026-57402 |
medium | 6.5 | 0.0022 | 2026-10-29 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulne | |
CVE-2026-57403 |
high | 7.1 | 0.0025 | 2026-10-29 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulne | |
CVE-2026-57404 |
medium | 6.5 | 0.0033 | 2026-10-29 | Missing Authorization vulnerability in magepeopleteam Booking and Rental Manager booking-a | |
CVE-2026-57405 |
high | 7.1 | 0.0032 | 2026-10-29 | Missing Authorization vulnerability in themehunk Open Shop open-shop allows Exploiting Inc | |
CVE-2026-57406 |
medium | 6.5 | 0.0033 | 2026-10-29 | Missing Authorization vulnerability in Roxnor FundEngine wp-fundraising-donation allows Ex | |
CVE-2026-57407 |
high | 7.2 | 0.0027 | 2026-10-29 | Server-Side Request Forgery (SSRF) vulnerability in WP Swings PDF Generator for WordPress | |
CVE-2026-57408 |
medium | 6.5 | 0.0033 | 2026-10-29 | Missing Authorization vulnerability in peachpayments Peach Payments Gateway wc-peach-payme | |
CVE-2026-57409 |
high | 7.1 | 0.0025 | 2026-10-29 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulne |