Vulnerability Weakness Types
Browse CVEs by CWE classification. Click a CWE to see all associated vulnerabilities.
CWE-284 (2636)
CWE-79 (1862)
CWE-416 (1371)
CWE-862 (1193)
CWE-89 (1108)
CWE-22 (1029)
CWE-125 (919)
CWE-200 (851)
CWE-306 (840)
CWE-122 (832)
CWE-20 (801)
CWE-78 (717)
CWE-787 (714)
CWE-918 (695)
CWE-863 (649)
CWE-94 (642)
CWE-74 (601)
CWE-639 (551)
CWE-400 (535)
CWE-119 (504)
CWE-269 (502)
CWE-502 (472)
CWE-770 (447)
CWE-287 (434)
CWE-121 (409)
CWE-190 (377)
CWE-77 (375)
CWE-362 (373)
CWE-476 (299)
CWE-352 (284)
| CVE | Severity | CVSS | EPSS | Published | Description | Flags |
|---|---|---|---|---|---|---|
CVE-2026-57415 |
high | 7.1 | 0.0025 | 2026-07-13 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability i | |
CVE-2026-57416 |
high | 7.1 | 0.0025 | 2026-07-13 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability i | |
CVE-2026-57417 |
high | 7.1 | 0.0025 | 2026-07-13 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability i | |
CVE-2026-57421 |
high | 7.1 | 0.0025 | 2026-07-13 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability i | |
CVE-2026-57422 |
high | 7.1 | 0.0025 | 2026-07-13 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability i | |
CVE-2026-57423 |
high | 7.1 | 0.0025 | 2026-07-13 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability i | |
CVE-2026-57668 |
high | 7.1 | 0.0025 | 2026-07-13 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability i | |
CVE-2026-57695 |
high | 7.1 | 0.0025 | 2026-07-13 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability i | |
CVE-2026-57706 |
high | 7.1 | 0.0025 | 2026-07-13 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability i | |
CVE-2026-57708 |
high | 7.1 | 0.0025 | 2026-07-13 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability i | |
CVE-2026-57712 |
high | 7.1 | 0.0025 | 2026-07-13 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability i | |
CVE-2026-57715 |
high | 7.1 | 0.0025 | 2026-07-13 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability i | |
CVE-2026-57718 |
high | 7.1 | 0.0025 | 2026-07-13 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability i | |
CVE-2026-57725 |
high | 7.1 | 0.0025 | 2026-07-13 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability i | |
CVE-2026-57728 |
high | 7.1 | 0.0025 | 2026-07-13 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability i | |
CVE-2026-57732 |
high | 7.1 | 0.0025 | 2026-07-13 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability i | |
CVE-2026-57733 |
high | 7.1 | 0.0025 | 2026-07-13 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability i | |
CVE-2026-57734 |
high | 7.1 | 0.0025 | 2026-07-13 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability i | |
CVE-2026-57741 |
high | 7.1 | 0.0025 | 2026-07-13 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability i | |
CVE-2026-57745 |
high | 7.1 | 0.0025 | 2026-07-13 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability i | |
CVE-2026-57814 |
high | 7.1 | 0.0025 | 2026-07-13 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability i | |
CVE-2026-57816 |
high | 7.1 | 0.0025 | 2026-07-13 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability i | |
CVE-2026-59516 |
high | 7.1 | 0.0025 | 2026-07-13 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability i | |
CVE-2026-57370 |
high | 7.1 | 0.0025 | 2026-07-23 | Unauthenticated Cross Site Scripting (XSS) in Visitor Traffic Real Time Statistics Pro <= 11.9.1 ver | |
CVE-2026-57374 |
high | 7.1 | 0.0025 | 2026-07-23 | Unauthenticated Cross Site Scripting (XSS) in Funnel Kit Funnel Builder PRO <= 3.15.0.7 versions. | |
CVE-2026-57397 |
high | 7.1 | 0.0025 | 2026-07-23 | Unauthenticated Cross Site Scripting (XSS) in Coaching <= 3.9.2 versions. | |
CVE-2026-57427 |
high | 7.1 | 0.0025 | 2026-07-23 | Unauthenticated Cross Site Scripting (XSS) in Download Monitor - WPForms Lock <= 1.0.4 versions. | |
CVE-2026-57428 |
high | 7.1 | 0.0025 | 2026-07-23 | Unauthenticated Cross Site Scripting (XSS) in Sprout Clients <= 3.2.3 versions. | |
CVE-2026-57699 |
high | 7.1 | 0.0025 | 2026-07-23 | Subscriber Cross Site Scripting (XSS) in Slider Pro <= 4.8.13 versions. | |
CVE-2026-57701 |
high | 7.1 | 0.0025 | 2026-07-23 | Unauthenticated Cross Site Scripting (XSS) in Real Estate Manager Pro <= 12.8.5 versions. | |
CVE-2026-57704 |
high | 7.1 | 0.0025 | 2026-07-23 | Unauthenticated Cross Site Scripting (XSS) in Smart Manager <= 8.90.0 versions. | |
CVE-2026-57735 |
high | 7.1 | 0.0025 | 2026-07-23 | Unauthenticated Cross Site Scripting (XSS) in Breakdance <= 2.7.1 versions. | |
CVE-2026-57767 |
high | 7.1 | 0.0025 | 2026-07-23 | Unauthenticated Cross Site Scripting (XSS) in WP Google Maps Pro <= 10.1.02 versions. | |
CVE-2026-57769 |
high | 7.1 | 0.0025 | 2026-07-23 | Unauthenticated Cross Site Scripting (XSS) in Grand Photography <= 5.7.8 versions. | |
CVE-2026-59512 |
high | 7.1 | 0.0025 | 2026-07-23 | Unauthenticated Cross Site Scripting (XSS) in Product Enquiry for WooCommerce <= 2.2.34.43 versions. | |
CVE-2026-59517 |
high | 7.1 | 0.0025 | 2026-07-23 | Unauthenticated Cross Site Scripting (XSS) in Easy Form Builder <= 4.0.12 versions. | |
CVE-2026-61947 |
high | 7.1 | 0.0025 | 2026-07-23 | Unauthenticated Cross Site Scripting (XSS) in Form Vibes – Database Manager for Forms <= 1.5.2 versi | |
CVE-2026-65492 |
high | 7.1 | 0.0025 | 2026-07-23 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability i | |
CVE-2026-65510 |
high | 7.1 | 0.0025 | 2026-07-23 | Unauthenticated Cross Site Scripting (XSS) in PeproDev Ultimate Invoice <= 2.2.6 versions. | |
CVE-2026-65511 |
high | 7.1 | 0.0025 | 2026-07-23 | Unauthenticated Cross Site Scripting (XSS) in Manual - Documentation, Knowledge Base & Education Wor | |
CVE-2026-59553 |
high | 7.1 | 0.0025 | 2026-07-27 | Unauthenticated Cross Site Scripting (XSS) in Product Feed Manager <= 7.6.1 versions. | |
CVE-2026-59556 |
high | 7.1 | 0.0025 | 2026-07-27 | Unauthenticated Cross Site Scripting (XSS) in Dynamic Pricing With Discount Rules for WooCommerce <= | |
CVE-2026-59558 |
high | 7.1 | 0.0025 | 2026-07-27 | Unauthenticated Cross Site Scripting (XSS) in Booking Calendar <= 11.4.2 versions. | |
CVE-2026-61957 |
high | 7.1 | 0.0025 | 2026-07-27 | Unauthenticated Cross Site Scripting (XSS) in miniorange otp verification <= 5.5.1 versions. | |
CVE-2026-65438 |
high | 7.1 | 0.0025 | 2026-07-27 | Unauthenticated Cross Site Scripting (XSS) in Message Filter for Contact Form 7 <= 1.6.3.9 versions. | |
CVE-2026-65439 |
high | 7.1 | 0.0025 | 2026-07-27 | Unauthenticated Cross Site Scripting (XSS) in Ultimate Addons for Contact Form 7 <=3.5.45 versions. | |
CVE-2026-65440 |
high | 7.1 | 0.0025 | 2026-07-27 | Unauthenticated Cross Site Scripting (XSS) in GetGenie <= 4.4.3 versions. | |
CVE-2026-65441 |
high | 7.1 | 0.0025 | 2026-07-27 | Unauthenticated Cross Site Scripting (XSS) in GiveWP <= 4.16.3 versions. | |
CVE-2026-65443 |
high | 7.1 | 0.0025 | 2026-07-27 | Unauthenticated Cross Site Scripting (XSS) in BackWPup <= 5.7.4 versions. | |
CVE-2026-65446 |
high | 7.1 | 0.0025 | 2026-07-27 | Unauthenticated Cross Site Scripting (XSS) in Kali Forms <= 2.4.18 versions. |