Vulnerability Weakness Types
Browse CVEs by CWE classification. Click a CWE to see all associated vulnerabilities.
CWE-284 (2637)
CWE-79 (1869)
CWE-416 (1375)
CWE-862 (1202)
CWE-89 (1111)
CWE-22 (1030)
CWE-125 (922)
CWE-200 (853)
CWE-306 (852)
CWE-122 (832)
CWE-20 (801)
CWE-78 (718)
CWE-787 (716)
CWE-918 (696)
CWE-863 (652)
CWE-94 (642)
CWE-74 (602)
CWE-639 (566)
CWE-400 (535)
CWE-119 (504)
CWE-269 (502)
CWE-502 (473)
CWE-770 (447)
CWE-287 (441)
CWE-121 (410)
CWE-190 (377)
CWE-77 (375)
CWE-362 (373)
CWE-476 (300)
CWE-352 (284)
| CVE | Severity | CVSS | EPSS | Published | Description | Flags |
|---|---|---|---|---|---|---|
CVE-2026-65441 |
high | 7.1 | 0.0025 | 2026-07-27 | Unauthenticated Cross Site Scripting (XSS) in GiveWP <= 4.16.3 versions. | |
CVE-2026-65443 |
high | 7.1 | 0.0025 | 2026-07-27 | Unauthenticated Cross Site Scripting (XSS) in BackWPup <= 5.7.4 versions. | |
CVE-2026-65446 |
high | 7.1 | 0.0025 | 2026-07-27 | Unauthenticated Cross Site Scripting (XSS) in Kali Forms <= 2.4.18 versions. | |
CVE-2026-28082 |
high | 7.1 | 0.0025 | 2026-08-06 | Unauthenticated Cross Site Scripting (XSS) in JetEngine <= 3.8.13.1 versions. | |
CVE-2026-28141 |
high | 7.1 | 0.0047 | 2026-08-06 | Unauthenticated Cross Site Scripting (XSS) in NextGEN Gallery <= 4.2.3 versions. | |
CVE-2026-28143 |
high | 7.1 | 0.0025 | 2026-08-06 | Unauthenticated Cross Site Scripting (XSS) in Forminator <= 1.56.0 versions. | |
CVE-2026-28177 |
high | 7.1 | 0.0025 | 2026-08-06 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability i | |
CVE-2026-61961 |
high | 7.1 | 0.0025 | 2026-08-06 | Unauthenticated Cross Site Scripting (XSS) in EmbedPress <= 4.5.6 versions. | |
CVE-2026-61963 |
high | 7.1 | 0.0025 | 2026-08-06 | Unauthenticated Cross Site Scripting (XSS) in Media LIbrary Assistant <= 3.38 versions. | |
CVE-2026-61964 |
high | 7.1 | 0.0025 | 2026-08-06 | Unauthenticated Cross Site Scripting (XSS) in Ninja Tables <= 5.2.9 versions. | |
CVE-2026-65513 |
high | 7.1 | 0.0025 | 2026-08-06 | Unauthenticated Cross Site Scripting (XSS) in Simply Schedule Appointments <= 1.6.12.10 versions. | |
CVE-2026-65517 |
high | 7.1 | 0.0025 | 2026-08-06 | Unauthenticated Cross Site Scripting (XSS) in Easy PayPal Buy Now Button <= 2.0.4 versions. | |
CVE-2026-65544 |
high | 7.1 | 0.0025 | 2026-08-06 | Unauthenticated Cross Site Scripting (XSS) in Super Socializer <= 7.14.5 versions. | |
CVE-2026-65545 |
high | 7.1 | 0.0025 | 2026-08-06 | Unauthenticated Cross Site Scripting (XSS) in AI Engine <= 3.6.8 versions. | |
CVE-2026-65560 |
high | 7.1 | 0.0025 | 2026-08-06 | Unauthenticated Cross Site Scripting (XSS) in Houzez Property Feed <= 2.5.48 versions. | |
CVE-2026-65565 |
high | 7.1 | 0.0025 | 2026-08-06 | Unauthenticated Cross Site Scripting (XSS) in Survey Maker <= 5.2.3.3 versions. | |
CVE-2026-66439 |
high | 7.1 | 0.0025 | 2026-08-06 | Unauthenticated Cross Site Scripting (XSS) in Advanced AJAX Product Filters <= 3.2.0.3 versions. | |
CVE-2026-66440 |
high | 7.1 | 0.0025 | 2026-08-06 | Unauthenticated Cross Site Scripting (XSS) in WPIDE – File Manager & Code Editor <= 3.5.7 versions. | |
CVE-2026-66457 |
high | 7.1 | 0.0025 | 2026-08-06 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability i | |
CVE-2026-66663 |
high | 7.1 | 0.0025 | 2026-08-06 | Unauthenticated Cross Site Scripting (XSS) in WP Data Access <= 5.5.79 versions. | |
CVE-2026-66664 |
high | 7.1 | 0.0025 | 2026-08-06 | Unauthenticated Cross Site Scripting (XSS) in SEO Plugin by Squirrly SEO <= 14.2.0 versions. | |
CVE-2026-66690 |
high | 7.1 | 0.0025 | 2026-08-06 | Unauthenticated Cross Site Scripting (XSS) in GiveWP <= 4.16.5 versions. | |
CVE-2026-66694 |
high | 7.1 | 0.0025 | 2026-08-06 | Unauthenticated Cross Site Scripting (XSS) in Thrive Architect <= 10.9.3.1 versions. | |
CVE-2026-66705 |
high | 7.1 | 0.0025 | 2026-08-06 | Unauthenticated Cross Site Scripting (XSS) in Facebook for WordPress <= 5.2.1 versions. | |
CVE-2026-66707 |
high | 7.1 | 0.0025 | 2026-08-06 | Unauthenticated Cross Site Scripting (XSS) in Facebook for WooCommerce <= 3.7.5 versions. | |
CVE-2026-66711 |
high | 7.1 | 0.0025 | 2026-08-06 | Subscriber Cross Site Scripting (XSS) in WooCommerce Multilingual & Multicurrency <= 5.5.6 versions. | |
CVE-2026-27536 |
high | 7.1 | 0.0025 | 2026-08-13 | Unauthenticated Cross Site Scripting (XSS) in MailChimp Subscribe Forms <= 4.3.3 versions. | |
CVE-2026-27539 |
high | 7.1 | 0.0025 | 2026-08-13 | Unauthenticated Cross Site Scripting (XSS) in Welcart e-Commerce <= 2.11.31 versions. | |
CVE-2026-28003 |
high | 7.1 | 0.0025 | 2026-08-13 | Unauthenticated Cross Site Scripting (XSS) in Maspik – Spam blacklist <= 2.9.1 versions. | |
CVE-2026-28004 |
high | 7.1 | 0.0025 | 2026-08-13 | Unauthenticated Cross Site Scripting (XSS) in Business Directory <= 6.4.25 versions. | |
CVE-2026-28158 |
high | 7.1 | 0.0025 | 2026-08-13 | Unauthenticated Cross Site Scripting (XSS) in Do Lasso <= 358 versions. | |
CVE-2026-28170 |
high | 7.1 | 0.0025 | 2026-08-13 | Unauthenticated Cross Site Scripting (XSS) in Blog Floating Button <= 1.4.20 versions. | |
CVE-2026-28175 |
high | 7.1 | 0.0025 | 2026-08-13 | Unauthenticated Cross Site Scripting (XSS) in Visitors Traffic Real Time Statistics <= 8.11 versions | |
CVE-2026-28187 |
high | 7.1 | 0.0025 | 2026-08-13 | Unauthenticated Cross Site Scripting (XSS) in Knowledge Base for Documentation, FAQs with AI Assista | |
CVE-2026-61960 |
high | 7.1 | 0.0025 | 2026-08-13 | Unauthenticated Cross Site Scripting (XSS) in WP Full Stripe Free <= 8.5.0 versions. | |
CVE-2026-61965 |
high | 7.1 | 0.0025 | 2026-08-13 | Unauthenticated Cross Site Scripting (XSS) in GeekyBot <= 1.2.6 versions. | |
CVE-2026-61974 |
high | 7.1 | 0.0025 | 2026-08-13 | Unauthenticated Cross Site Scripting (XSS) in Mang Board WP <= 2.3.4 versions. | |
CVE-2026-65580 |
high | 7.1 | 0.0025 | 2026-08-13 | Unauthenticated Cross Site Scripting (XSS) in Agrion <= 1.0.0 versions. | |
CVE-2026-66426 |
high | 7.1 | 0.0025 | 2026-08-13 | Unauthenticated Cross Site Scripting (XSS) in WP-Stats <= 2.56 versions. | |
CVE-2026-66429 |
high | 7.1 | 0.0025 | 2026-08-13 | Unauthenticated Cross Site Scripting (XSS) in Visitor Traffic Real Time Statistics Pro <= 11.10 vers | |
CVE-2026-66468 |
high | 7.1 | 0.0025 | 2026-08-13 | Unauthenticated Cross Site Scripting (XSS) in Local Delivery Drivers for WooCommerce <= 3.0.0 versio | |
CVE-2026-66655 |
high | 7.1 | 0.0025 | 2026-08-13 | Unauthenticated Cross Site Scripting (XSS) in MultiParcels Shipping For WooCommerce <= 1.30.36 versi | |
CVE-2026-66697 |
high | 7.1 | 0.0025 | 2026-08-13 | Unauthenticated Cross Site Scripting (XSS) in Colissimo Officiel : Méthodes de livraison pour WooCom | |
CVE-2026-66698 |
high | 7.1 | 0.0025 | 2026-08-13 | Unauthenticated Cross Site Scripting (XSS) in SureDash <= 1.10.1 versions. | |
CVE-2026-66700 |
high | 7.1 | 0.0025 | 2026-08-13 | Unauthenticated Cross Site Scripting (XSS) in Smart Online Order for Clover <= 1.6.1 versions. | |
CVE-2026-28568 |
high | 7.1 | 0.0025 | 2026-08-18 | Unauthenticated Cross Site Scripting (XSS) in Quill Forms <= 5.7.1 versions. | |
CVE-2026-28569 |
high | 7.1 | 0.0025 | 2026-08-18 | Unauthenticated Cross Site Scripting (XSS) in SSL Zen <= 4.7.43 versions. | |
CVE-2026-32333 |
high | 7.1 | 0.0025 | 2026-08-18 | Unauthenticated Cross Site Scripting (XSS) in Mayosis Core <= 5.4.7 versions. | |
CVE-2026-32547 |
high | 7.1 | 0.0025 | 2026-08-18 | Unauthenticated Cross Site Scripting (XSS) in BP Better Messages <= 2.15.22 versions. | |
CVE-2026-66629 |
high | 7.1 | 0.0025 | 2026-08-18 | Unauthenticated Cross Site Scripting (XSS) in Kirki <= 6.2.3 versions. |