KEV + Critical EPSS ≥ 50% Critical + PoC No Auth + Critical XSS (CWE-79) SQLi (CWE-89) Code Injection KEV + Has PoC

Results for "cwe:79"

1,853 found Export CSV
CVE Severity CVSS EPSS Published Flags Description
CVE-2026-57333 high 7.1 0.0025 2026-06-29 Unauthenticated Cross Site Scripting (XSS) in Link Whisper Free <= 0.9.4 versions.
CVE-2026-57336 high 7.1 0.0025 2026-06-29 Unauthenticated Cross Site Scripting (XSS) in Jobify <= 4.3.2 versions.
CVE-2026-57337 high 7.1 0.0025 2026-06-29 Unauthenticated Cross Site Scripting (XSS) in Landing Page Builder <= 1.5.3.5 versions.
CVE-2026-57338 high 7.1 0.0025 2026-06-29 Unauthenticated Cross Site Scripting (XSS) in ARForms <= 7.1.2 versions.
CVE-2026-27402 high 7.1 0.0025 2026-07-02 Unauthenticated Cross Site Scripting (XSS) in Kids Life | Children School WordPress <= 5.2 versions.
CVE-2026-27404 high 7.1 0.0025 2026-07-02 Unauthenticated Cross Site Scripting (XSS) in LMS <= 9.7 versions.
CVE-2026-27408 high 7.1 0.0025 2026-07-02 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability i
CVE-2026-27425 high 7.1 0.0025 2026-07-02 Unauthenticated Cross Site Scripting (XSS) in Automotive Listings <= 18.6 versions.
CVE-2026-27426 high 7.1 0.0025 2026-07-02 Unauthenticated Cross Site Scripting (XSS) in Automotive Car Dealership Business <= 13.3.3 versions.
CVE-2026-27430 high 7.1 0.0025 2026-07-02 Unauthenticated Cross Site Scripting (XSS) in TheFox <= 3.9.76 versions.
CVE-2026-57343 high 7.1 0.0025 2026-07-02 Unauthenticated Cross Site Scripting (XSS) in Real Estate 7 <= 3.5.9 versions.
CVE-2026-57344 high 7.1 0.0025 2026-07-02 Unauthenticated Cross Site Scripting (XSS) in Classified Listing <= 5.4.2 versions.
CVE-2026-57345 high 7.1 0.0025 2026-07-02 Unauthenticated Cross Site Scripting (XSS) in Internal Links Manager <= 3.0.3 versions.
CVE-2026-57349 high 7.1 0.0025 2026-07-02 Unauthenticated Cross Site Scripting (XSS) in WPeMatico RSS Feed Fetcher <= 2.8.17 versions.
CVE-2026-57350 high 7.1 0.0025 2026-07-02 Unauthenticated Cross Site Scripting (XSS) in WP Debugging <= 2.12.2 versions.
CVE-2026-57351 high 7.1 0.0025 2026-07-02 Unauthenticated Cross Site Scripting (XSS) in HandL UTM Grabber <= 2.9.2 versions.
CVE-2026-57356 high 7.1 0.0025 2026-07-02 Unauthenticated Cross Site Scripting (XSS) in MC Woocommerce Wishlist <= 1.9.19 versions.
CVE-2026-57357 high 7.1 0.0025 2026-07-02 Unauthenticated Cross Site Scripting (XSS) in Search Atlas SEO <= 2.6.6 versions.
CVE-2026-57358 high 7.1 0.0025 2026-07-02 Unauthenticated Cross Site Scripting (XSS) in Customize My Account for WooCommerce <= 4.3.9 versions
CVE-2026-57360 high 7.1 0.0025 2026-07-02 Unauthenticated Cross Site Scripting (XSS) in eCommerce Product Catalog <= 3.5.4 versions.
CVE-2026-57361 high 7.1 0.0025 2026-07-02 Unauthenticated Cross Site Scripting (XSS) in Survey Maker <= 5.2.2.5 versions.
CVE-2026-57362 high 7.1 0.0025 2026-07-02 Unauthenticated Cross Site Scripting (XSS) in ChatBot <= 8.3.2 versions.
CVE-2026-57366 high 7.1 0.0025 2026-07-02 Unauthenticated Cross Site Scripting (XSS) in WPAdverts <= 2.3.1 versions.
CVE-2026-57426 high 7.1 0.0025 2026-07-02 Unauthenticated Cross Site Scripting (XSS) in Modula - PRO <= 2.10.8 versions.
CVE-2026-57670 high 7.1 0.0025 2026-07-02 Unauthenticated Cross Site Scripting (XSS) in Google Maps CP <= 1.2.5 versions.
CVE-2026-57672 high 7.1 0.0025 2026-07-02 Unauthenticated Cross Site Scripting (XSS) in wpDataTables <= 6.5.1.1 versions.
CVE-2026-57674 high 7.1 0.0025 2026-07-02 Unauthenticated Cross Site Scripting (XSS) in Timetics <= 1.0.58 versions.
CVE-2026-57675 high 7.1 0.0025 2026-07-02 Unauthenticated Cross Site Scripting (XSS) in WP Photo Album Plus <= 9.2.02.004 versions.
CVE-2026-57678 high 7.1 0.0025 2026-07-02 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability i
CVE-2026-57682 high 7.1 0.0025 2026-07-02 Unauthenticated Cross Site Scripting (XSS) in Simple Link Directory <= 15.0.5 versions.
CVE-2026-57686 high 7.1 0.0025 2026-07-02 Unauthenticated Cross Site Scripting (XSS) in WowAddons <= 1.6.14 versions.
CVE-2026-41122 high 7.1 0.0028 2026-07-08 Dell PowerProtect Data Domain, versions 7.7.1.0 through 8.7, LTS2026 release version 8.6.1.0 through
CVE-2026-57214 high 7.1 0.0022 2026-07-10 RabbitMQ is a messaging and streaming broker. Prior to 4.2.5, the RabbitMQ management UI renders the
CVE-2026-57363 high 7.1 0.0025 2026-07-13 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability i
CVE-2026-57368 high 7.1 0.0025 2026-07-13 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability i
CVE-2026-57369 high 7.1 0.0025 2026-07-13 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability i
CVE-2026-57376 high 7.1 0.0025 2026-07-13 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability i
CVE-2026-57379 high 7.1 0.0025 2026-07-13 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability i
CVE-2026-57380 high 7.1 0.0025 2026-07-13 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability i
CVE-2026-57381 high 7.1 0.0025 2026-07-13 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability i
CVE-2026-57382 high 7.1 0.0025 2026-07-13 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability i
CVE-2026-57383 high 7.1 0.0025 2026-07-13 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability i
CVE-2026-57388 high 7.1 0.0025 2026-07-13 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability i
CVE-2026-57394 high 7.1 0.0025 2026-07-13 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability i
CVE-2026-57396 high 7.1 0.0025 2026-07-13 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability i
CVE-2026-57398 high 7.1 0.0025 2026-07-13 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability i
CVE-2026-57403 high 7.1 0.0025 2026-07-13 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability i
CVE-2026-57409 high 7.1 0.0025 2026-07-13 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability i
CVE-2026-57411 high 7.1 0.0025 2026-07-13 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability i
CVE-2026-57415 high 7.1 0.0025 2026-07-13 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability i