Hunt List
12,929 network-exploitable high/critical CVEs ranked by bug bounty relevance. Sorted by attack surface, exploit availability, and exploitation probability.
| BB | CVE | CVSS | EPSS | Attack Surface | Flags | Description |
|---|---|---|---|---|---|---|
|
80
|
CVE-2026-11546 |
9.8 | 0.0040 | NET NO AUTH LOW CX NO UI | IBM WebSphere Application Server - Liberty 17.0.0.3 through 26.0.0.7 is affected | |
|
79
|
CVE-2026-57683 |
9.3 | 0.0040 | NET NO AUTH LOW CX NO UI | Unauthenticated SQL Injection in WP Fast Total Search <= 1.80.280 versions. | |
|
79
|
CVE-2026-57707 |
9.3 | 0.0040 | NET NO AUTH LOW CX NO UI | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injecti | |
|
79
|
CVE-2026-57726 |
9.3 | 0.0040 | NET NO AUTH LOW CX NO UI | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injecti | |
|
79
|
CVE-2026-57739 |
9.3 | 0.0040 | NET NO AUTH LOW CX NO UI | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injecti | |
|
79
|
CVE-2026-59515 |
9.3 | 0.0040 | NET NO AUTH LOW CX NO UI | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injecti | |
|
79
|
CVE-2026-59514 |
9.3 | 0.0040 | NET NO AUTH LOW CX NO UI | Unauthenticated SQL Injection in Buddyboss Platform <= 3.0.5 versions. | |
|
79
|
CVE-2026-59525 |
9.3 | 0.0040 | NET NO AUTH LOW CX NO UI | Unauthenticated SQL Injection in Participants Database <= 2.7.8.3 versions. | |
|
79
|
CVE-2026-59526 |
9.3 | 0.0040 | NET NO AUTH LOW CX NO UI | Unauthenticated SQL Injection in MapSVG <= 8.14.0 versions. | |
|
79
|
CVE-2026-61948 |
9.3 | 0.0040 | NET NO AUTH LOW CX NO UI | Unauthenticated SQL Injection in WPDM – Premium Packages <= 6.2.0 versions. | |
|
79
|
CVE-2026-61950 |
9.3 | 0.0040 | NET NO AUTH LOW CX NO UI | Unauthenticated SQL Injection in TrueBooker <= 1.2.3 versions. | |
|
79
|
CVE-2026-59527 |
9.3 | 0.0040 | NET NO AUTH LOW CX NO UI | Unauthenticated SQL Injection in MapSVG <= 8.14.0 versions. | |
|
79
|
CVE-2026-59533 |
9.3 | 0.0040 | NET NO AUTH LOW CX NO UI | Unauthenticated SQL Injection in Relevanssi Light <= 1.2.2 versions. | |
|
79
|
CVE-2026-59538 |
9.3 | 0.0040 | NET NO AUTH LOW CX NO UI | Unauthenticated SQL Injection in GamiPress <= 7.9.7 versions. | |
|
79
|
CVE-2026-59549 |
9.3 | 0.0040 | NET NO AUTH LOW CX NO UI | Unauthenticated SQL Injection in rtMedia for WordPress, BuddyPress and bbPress < | |
|
79
|
CVE-2026-59550 |
9.3 | 0.0040 | NET NO AUTH LOW CX NO UI | Unauthenticated SQL Injection in AWP Classifieds <= 4.4.7 versions. | |
|
79
|
CVE-2026-65508 |
9.3 | 0.0040 | NET NO AUTH LOW CX NO UI | Unauthenticated SQL Injection in Simply Schedule Appointments <= 1.6.12.10 versi | |
|
79
|
CVE-2026-65520 |
9.3 | 0.0040 | NET NO AUTH LOW CX NO UI | Unauthenticated SQL Injection in WP OAuth Server <= 6.2.0 versions. | |
|
79
|
CVE-2026-65546 |
9.3 | 0.0040 | NET NO AUTH LOW CX NO UI | Unauthenticated SQL Injection in Qode Tours <= 3.1.3.1 versions. | |
|
79
|
CVE-2026-66447 |
9.3 | 0.0040 | NET NO AUTH LOW CX NO UI | Unauthenticated SQL Injection in WordPress File Upload <= 5.1.7 versions. | |
|
79
|
CVE-2026-66659 |
9.3 | 0.0040 | NET NO AUTH LOW CX NO UI | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injecti | |
|
79
|
CVE-2026-28001 |
9.3 | 0.0040 | NET NO AUTH LOW CX NO UI | Unauthenticated SQL Injection in WP Directory Kit <= 1.5.4 versions. | |
|
79
|
CVE-2026-28142 |
9.3 | 0.0040 | NET NO AUTH LOW CX NO UI | Unauthenticated SQL Injection in Web Directory Free <= 1.7.13 versions. | |
|
79
|
CVE-2026-61966 |
9.3 | 0.0040 | NET NO AUTH LOW CX NO UI | Subscriber SQL Injection in WPJAM Basic <= 7.0.1 versions. | |
|
79
|
CVE-2026-61969 |
9.3 | 0.0040 | NET NO AUTH LOW CX NO UI | Unauthenticated SQL Injection in Listdom <= 5.6.0 versions. | |
|
79
|
CVE-2026-66436 |
9.3 | 0.0040 | NET NO AUTH LOW CX NO UI | Unauthenticated SQL Injection in Active Products Tables for WooCommerce <= 1.1.1 | |
|
79
|
CVE-2026-66472 |
9.3 | 0.0040 | NET NO AUTH LOW CX NO UI | Unauthenticated SQL Injection in Everest Backup <= 2.3.12 versions. | |
|
79
|
CVE-2026-66478 |
9.3 | 0.0040 | NET NO AUTH LOW CX NO UI | Unauthenticated SQL Injection in Church Admin <= 5.1.1 versions. | |
|
79
|
CVE-2026-73187 |
9.3 | 0.0040 | NET NO AUTH LOW CX NO UI | Unauthenticated SQL Injection in Sticky Chat Widget <= 1.4.2 versions. | |
|
79
|
CVE-2026-73339 |
9.3 | 0.0040 | NET NO AUTH LOW CX NO UI | Unauthenticated SQL Injection in Modern Events Calendar < 7.35.0 versions. | |
|
79
|
CVE-2026-73355 |
9.3 | 0.0040 | NET NO AUTH LOW CX NO UI | Unauthenticated SQL Injection in Affiliates Manager <= 2.9.53 versions. | |
|
79
|
CVE-2026-73365 |
9.3 | 0.0040 | NET NO AUTH LOW CX NO UI | Unauthenticated SQL Injection in JetAppointment <= 2.5.2 versions. | |
|
79
|
CVE-2026-74015 |
9.3 | 0.0040 | NET NO AUTH LOW CX NO UI | Unauthenticated SQL Injection in Readabler < 2.0.18 versions. | |
|
79
|
CVE-2026-66592 |
9.3 | 0.0040 | NET NO AUTH LOW CX NO UI | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injecti | |
|
78
|
CVE-2026-48144 |
9.1 | 0.0040 | NET NO AUTH LOW CX NO UI | Improper Validation of Certificate with Host Mismatch vulnerability in Apache Th | |
|
78
|
CVE-2026-113867 |
9.1 | 0.0040 | NET NO AUTH LOW CX NO UI | Thunderbird did not escape attribute values when serializing outgoing XMPP stanz | |
|
76
|
CVE-2026-61011 |
8.2 | 0.0040 | NET NO AUTH LOW CX NO UI | Vulnerability in the Oracle WebCenter Sites product of Oracle Fusion Middleware | |
|
76
|
CVE-2026-61016 |
8.2 | 0.0040 | NET NO AUTH LOW CX NO UI | Vulnerability in the Oracle WebCenter Sites product of Oracle Fusion Middleware | |
|
75
|
CVE-2026-35486 |
7.5 | 0.0040 | NET NO AUTH LOW CX NO UI | text-generation-webui is an open-source web interface for running Large Language | |
|
68
|
CVE-2026-5285 |
8.8 | 0.0040 | NET NO AUTH LOW CX | Use after free in WebGL in Google Chrome prior to 146.0.7680.178 allowed a remot | |
|
68
|
CVE-2026-56003 |
8.8 | 0.0040 | NET LOW CX NO UI | A heap buffer overflow due to missing size checking in the property buffer when | |
|
68
|
CVE-2026-83402 |
8.8 | 0.0040 | NET LOW CX NO UI | Vulnerability in the Oracle Identity Manager product of Oracle Fusion Middleware | |
|
68
|
CVE-2026-33991 |
8.8 | 0.0040 | NET LOW CX NO UI | WeGIA is a web manager for charitable institutions. Prior to version 3.6.7, the | |
|
67
|
CVE-2026-10055 |
8.5 | 0.0040 | NET LOW CX NO UI | In Eclipse Theia since version 1.26.0, the backend /services/request-service RPC | |
|
67
|
CVE-2026-51583 |
8.5 | 0.0040 | NET LOW CX NO UI | An issue in usememos through v0.30.0 allows a remote authenticated attacker to p | |
|
66
|
CVE-2026-58500 |
8.2 | 0.0040 | NET NO AUTH LOW CX | MCP Appium is an MCP server that provides AI assistants with tools to automate m | |
|
59
|
CVE-2026-18696 |
7.0 | 0.0040 | NET LOW CX NO UI | An issue in MongoDB Server's applyOps command could allow an authenticated user | |
|
58
|
CVE-2026-34571 |
9.0 | 0.0040 | NET LOW CX | CI4MS is a CodeIgniter 4-based CMS skeleton that delivers a production-ready, mo | |
|
55
|
CVE-2026-40721 |
7.5 | 0.0040 | NET NO UI | Contributor Local File Inclusion in Element Pack Pro <= 9.0.6 versions. | |
|
55
|
CVE-2026-65493 |
7.5 | 0.0040 | NET NO UI | Subscriber PHP Object Injection in Dokan Pro <= 5.0.2 versions. |