Browse All CVEs
35,719 vulnerabilities.
| CVE | Severity | CVSS | EPSS | First Seen | Flags | Description |
|---|---|---|---|---|---|---|
CVE-2026-57786 |
high | 8.8 | 0.0023 | 2026-10-29 | Cross-Site Request Forgery (CSRF) vulnerability in purethemes WorkScout-Core workscout-cor | |
CVE-2026-57787 |
high | 8.5 | 0.0036 | 2026-10-29 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulne | |
CVE-2026-57788 |
high | 7.5 | 0.0051 | 2026-10-29 | Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote Fil | |
CVE-2026-57789 |
high | 7.5 | 0.0051 | 2026-10-29 | Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote Fil | |
CVE-2026-57790 |
high | 7.5 | 0.0051 | 2026-10-29 | Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote Fil | |
CVE-2026-57791 |
high | 7.5 | 0.0051 | 2026-10-29 | Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote Fil | |
CVE-2026-57792 |
high | 7.5 | 0.0051 | 2026-10-29 | Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote Fil | |
CVE-2026-57793 |
high | 7.5 | 0.0051 | 2026-10-29 | Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote Fil | |
CVE-2026-57794 |
high | 7.5 | 0.0051 | 2026-10-29 | Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote Fil | |
CVE-2026-57795 |
high | 7.5 | 0.0051 | 2026-10-29 | Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote Fil | |
CVE-2026-57796 |
high | 7.5 | 0.0051 | 2026-10-29 | Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote Fil | |
CVE-2026-57797 |
medium | 4.3 | 0.0033 | 2026-10-29 | Missing Authorization vulnerability in ThemeMove EduMall edumall allows Exploiting Incorre | |
CVE-2026-57798 |
high | 7.5 | 0.0051 | 2026-10-29 | Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote Fil | |
CVE-2026-57799 |
high | 7.5 | 0.0051 | 2026-10-29 | Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote Fil | |
CVE-2026-57800 |
high | 7.5 | 0.0051 | 2026-10-29 | Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote Fil | |
CVE-2026-57801 |
high | 7.5 | 0.0051 | 2026-10-29 | Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote Fil | |
CVE-2026-57802 |
high | 7.5 | 0.0051 | 2026-10-29 | Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote Fil | |
CVE-2026-57803 |
high | 7.5 | 0.0051 | 2026-10-29 | Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote Fil | |
CVE-2026-57804 |
high | 7.5 | 0.0051 | 2026-10-29 | Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote Fil | |
CVE-2026-57805 |
high | 7.5 | 0.0051 | 2026-10-29 | Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote Fil | |
CVE-2026-57810 |
high | 8.5 | 0.0036 | 2026-10-29 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulne | |
CVE-2026-57811 |
critical | 10.0 | 0.0056 | 2026-10-29 | Improper Control of Generation of Code ('Code Injection') vulnerability in Realtyna Realty | |
CVE-2026-57812 |
medium | 6.5 | 0.0033 | 2026-10-29 | Missing Authorization vulnerability in NSquared Simply Schedule Appointments simply-schedu | |
CVE-2026-57813 |
critical | 9.8 | 0.0048 | 2026-10-29 | Incorrect Privilege Assignment vulnerability in properfraction MailOptin mailoptin allows | |
CVE-2026-57814 |
high | 7.1 | 0.0025 | 2026-10-29 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulne | |
CVE-2026-57815 |
high | 7.5 | 0.0050 | 2026-10-29 | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerabili | |
CVE-2026-57816 |
high | 7.1 | 0.0025 | 2026-10-29 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulne | |
CVE-2026-59515 |
critical | 9.3 | 0.0040 | 2026-10-29 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulne | |
CVE-2026-59516 |
high | 7.1 | 0.0025 | 2026-10-29 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulne | |
CVE-2026-59518 |
critical | 9.8 | 0.0056 | 2026-10-29 | Deserialization of Untrusted Data vulnerability in wpWax Directorist directorist allows Ob | |
CVE-2026-59521 |
high | 7.2 | 0.0054 | 2026-10-29 | Deserialization of Untrusted Data vulnerability in ShapedPlugin LLC Real Testimonials test | |
CVE-2026-59523 |
medium | 6.5 | 0.0027 | 2026-10-29 | Missing Authorization vulnerability in NSquared Simply Schedule Appointments simply-schedu | |
CVE-2026-61952 |
medium | 4.9 | 0.0033 | 2026-10-29 | Missing Authorization vulnerability in Jose Vega WooCommerce Bulk Edit Products – WP Sheet | |
CVE-2026-61955 |
high | 7.6 | 0.0038 | 2026-10-29 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulne | |
CVE-2026-61956 |
high | 7.1 | 0.0016 | 2026-10-29 | Cross-Site Request Forgery (CSRF) vulnerability in hamsalam ووسلام – همگام سازی ووکا | |
CVE-2026-61958 |
medium | 5.4 | 0.0029 | 2026-10-29 | Missing Authorization vulnerability in Saad Iqbal License Manager for WooCommerce license- | |
CVE-2026-61968 |
medium | 5.4 | 0.0029 | 2026-10-29 | Missing Authorization vulnerability in Saad Iqbal myCred mycred allows Exploiting Incorrec | |
CVE-2026-61970 |
medium | 4.9 | 0.0019 | 2026-10-29 | Server-Side Request Forgery (SSRF) vulnerability in Themeisle Auto Featured Image (Auto Po | |
CVE-2026-61971 |
low | 2.7 | 0.0031 | 2026-10-29 | Authorization Bypass Through User-Controlled Key vulnerability in Cozmoslabs User Profile | |
CVE-2026-61975 |
medium | 5.3 | 0.0033 | 2026-10-29 | Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability i | |
CVE-2026-61976 |
medium | 5.3 | 0.0033 | 2026-10-29 | Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability i | |
CVE-2026-61977 |
medium | 5.3 | 0.0033 | 2026-10-29 | Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability i | |
CVE-2026-61983 |
medium | 5.3 | 0.0029 | 2026-10-29 | Missing Authorization vulnerability in andy_moyle Church Admin church-admin allows Exploit | |
CVE-2026-61985 |
medium | 5.3 | 0.0029 | 2026-10-29 | Missing Authorization vulnerability in magepeopleteam Car Rental Manager car-rental-manage | |
CVE-2026-4765 |
none | — | 0.0044 | 2026-10-29 | Self Cross-Site Scripting (Self-XSS) vulnerability in the RD Station Conversas chat featur | |
CVE-2026-12257 |
critical | 9.3 | 0.0070 | 2026-10-29 | Versions of Mura CMS prior to 10.0.712 contain a critical remote code execution (RCE) vuln | |
CVE-2026-15558 |
low | 2.1 | 0.0033 | 2026-10-29 | A security vulnerability has been detected in CodeAstro Simple Online Leave Management Sys | |
CVE-2026-62147 |
medium | 6.5 | 0.0040 | 2026-10-29 | The Tempo Operator's gateway component failed to consistently apply namespace-scoped redac | |
CVE-2026-15559 |
low | 2.1 | 0.0033 | 2026-10-29 | A vulnerability was detected in CodeAstro Simple Online Leave Management System 1.0. This | |
CVE-2026-15584 |
high | 7.5 | 0.0042 | 2026-10-29 | A privilege escalation vulnerability was found in the incluster-checks tool for OpenShift. |