Browse All CVEs
35,728 vulnerabilities.
| CVE | Severity | CVSS | EPSS | First Seen | Flags | Description |
|---|---|---|---|---|---|---|
CVE-2026-57414 |
medium | 6.5 | 0.0022 | 2026-10-29 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulne | |
CVE-2026-57415 |
high | 7.1 | 0.0025 | 2026-10-29 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulne | |
CVE-2026-57416 |
high | 7.1 | 0.0025 | 2026-10-29 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulne | |
CVE-2026-57417 |
high | 7.1 | 0.0025 | 2026-10-29 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulne | |
CVE-2026-57418 |
medium | 6.5 | 0.0034 | 2026-10-29 | Missing Authorization vulnerability in BoldGrid Client Invoicing by Sprout Invoices sprout | |
CVE-2026-57419 |
medium | 6.5 | 0.0030 | 2026-10-29 | Missing Authorization vulnerability in Fahad Mahmood Stock Locations for WooCommerce stock | |
CVE-2026-57420 |
medium | 6.5 | 0.0022 | 2026-10-29 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulne | |
CVE-2026-57421 |
high | 7.1 | 0.0025 | 2026-10-29 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulne | |
CVE-2026-57422 |
high | 7.1 | 0.0025 | 2026-10-29 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulne | |
CVE-2026-57423 |
high | 7.1 | 0.0025 | 2026-10-29 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulne | |
CVE-2026-57424 |
medium | 6.5 | 0.0033 | 2026-10-29 | Missing Authorization vulnerability in knitpay Razorpay Payment Links for WooCommerce rzp- | |
CVE-2026-57668 |
high | 7.1 | 0.0025 | 2026-10-29 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulne | |
CVE-2026-57691 |
medium | 5.8 | 0.0020 | 2026-10-29 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulne | |
CVE-2026-57693 |
medium | 6.5 | 0.0022 | 2026-10-29 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulne | |
CVE-2026-57694 |
medium | 6.5 | 0.0034 | 2026-10-29 | Authorization Bypass Through User-Controlled Key vulnerability in Themeum Tutor LMS tutor | |
CVE-2026-57695 |
high | 7.1 | 0.0025 | 2026-10-29 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulne | |
CVE-2026-57697 |
high | 7.5 | 0.0048 | 2026-10-29 | Authentication Bypass Using an Alternate Path or Channel vulnerability in Metagauss Profil | |
CVE-2026-57698 |
medium | 6.5 | 0.0036 | 2026-10-29 | Authentication Bypass Using an Alternate Path or Channel vulnerability in VillaTheme Aband | |
CVE-2026-57702 |
critical | 9.3 | 0.0045 | 2026-10-29 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulne | |
CVE-2026-57705 |
high | 7.5 | 0.0035 | 2026-10-29 | Missing Authorization vulnerability in Nexcess Event Tickets event-tickets allows Exploiti | |
CVE-2026-57706 |
high | 7.1 | 0.0025 | 2026-10-29 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulne | |
CVE-2026-57707 |
critical | 9.3 | 0.0040 | 2026-10-29 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulne | |
CVE-2026-57708 |
high | 7.1 | 0.0025 | 2026-10-29 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulne | |
CVE-2026-57709 |
high | 8.6 | 0.0053 | 2026-10-29 | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerabili | |
CVE-2026-57710 |
critical | 9.9 | 0.0048 | 2026-10-29 | Unrestricted Upload of File with Dangerous Type vulnerability in quantumcloud WoowBot Pro | |
CVE-2026-57711 |
medium | 6.5 | 0.0022 | 2026-10-29 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulne | |
CVE-2026-57712 |
high | 7.1 | 0.0025 | 2026-10-29 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulne | |
CVE-2026-57713 |
high | 8.8 | 0.0046 | 2026-10-29 | Deserialization of Untrusted Data vulnerability in Marcus (aka @msykes) Events Manager eve | |
CVE-2026-57715 |
high | 7.1 | 0.0025 | 2026-10-29 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulne | |
CVE-2026-57718 |
high | 7.1 | 0.0025 | 2026-10-29 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulne | |
CVE-2026-57719 |
critical | 10.0 | 0.0052 | 2026-10-29 | Unrestricted Upload of File with Dangerous Type vulnerability in CodeRevolution Aimogen Pr | |
CVE-2026-57724 |
critical | 9.8 | 0.0056 | 2026-10-29 | Deserialization of Untrusted Data vulnerability in Themeum Kirki kirki allows Object Injec | |
CVE-2026-57725 |
high | 7.1 | 0.0025 | 2026-10-29 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulne | |
CVE-2026-57726 |
critical | 9.3 | 0.0040 | 2026-10-29 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulne | |
CVE-2026-57727 |
high | 7.5 | 0.0039 | 2026-10-29 | Missing Authorization vulnerability in Themeum Kirki kirki allows Exploiting Incorrectly C | |
CVE-2026-57728 |
high | 7.1 | 0.0025 | 2026-10-29 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulne | |
CVE-2026-57729 |
high | 7.5 | 0.0039 | 2026-10-29 | Missing Authorization vulnerability in UX-themes Flatsome flatsome allows Exploiting Incor | |
CVE-2026-57732 |
high | 7.1 | 0.0025 | 2026-10-29 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulne | |
CVE-2026-57733 |
high | 7.1 | 0.0025 | 2026-10-29 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulne | |
CVE-2026-57734 |
high | 7.1 | 0.0025 | 2026-10-29 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulne | |
CVE-2026-57739 |
critical | 9.3 | 0.0040 | 2026-10-29 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulne | |
CVE-2026-57740 |
high | 7.1 | 0.0032 | 2026-10-29 | Missing Authorization vulnerability in AcyMailing Newsletter Team AcyMailing SMTP Newslett | |
CVE-2026-57741 |
high | 7.1 | 0.0025 | 2026-10-29 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulne | |
CVE-2026-57743 |
high | 8.1 | 0.0056 | 2026-10-29 | Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote Fil | |
CVE-2026-57744 |
critical | 9.8 | 0.0056 | 2026-10-29 | Deserialization of Untrusted Data vulnerability in stmcan RT-Theme 18 | Extensions rt18-ex | |
CVE-2026-57745 |
high | 7.1 | 0.0025 | 2026-10-29 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulne | |
CVE-2026-57768 |
high | 8.2 | 0.0032 | 2026-10-29 | Incorrect Privilege Assignment vulnerability in favethemes Houzez Login Register houzez-lo | |
CVE-2026-57770 |
critical | 9.8 | 0.0056 | 2026-10-29 | Deserialization of Untrusted Data vulnerability in ThemeGoods Grand Photography grandphoto | |
CVE-2026-57771 |
high | 8.5 | 0.0036 | 2026-10-29 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulne | |
CVE-2026-57772 |
high | 8.5 | 0.0036 | 2026-10-29 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulne |