Vulnerability Weakness Types
Browse CVEs by CWE classification. Click a CWE to see all associated vulnerabilities.
CWE-284 (2637)
CWE-79 (1876)
CWE-416 (1378)
CWE-862 (1210)
CWE-89 (1111)
CWE-22 (1031)
CWE-125 (930)
CWE-306 (855)
CWE-200 (854)
CWE-122 (832)
CWE-20 (801)
CWE-787 (728)
CWE-78 (719)
CWE-918 (698)
CWE-863 (653)
CWE-94 (646)
CWE-74 (603)
CWE-639 (567)
CWE-400 (535)
CWE-119 (504)
CWE-269 (502)
CWE-502 (476)
CWE-770 (449)
CWE-287 (442)
CWE-121 (410)
CWE-190 (380)
CWE-77 (375)
CWE-362 (374)
CWE-476 (302)
CWE-352 (285)
| CVE | Severity | CVSS | EPSS | Published | Description | Flags |
|---|---|---|---|---|---|---|
CVE-2026-66629 |
high | 7.1 | 0.0025 | 2026-08-18 | Unauthenticated Cross Site Scripting (XSS) in Kirki <= 6.2.3 versions. | |
CVE-2026-66633 |
high | 7.1 | 0.0025 | 2026-08-18 | Unauthenticated Cross Site Scripting (XSS) in Fluent Forms Pro Add On Pack < 6.2.12 versions. | |
CVE-2026-66667 |
high | 7.1 | 0.0025 | 2026-08-18 | Unauthenticated Cross Site Scripting (XSS) in Templately <= 3.7.1 versions. | |
CVE-2026-73190 |
high | 7.1 | 0.0025 | 2026-08-18 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability i | |
CVE-2026-73338 |
high | 7.1 | 0.0025 | 2026-08-18 | Unauthenticated Cross Site Scripting (XSS) in Autopay <= 5.0.0 versions. | |
CVE-2026-73342 |
high | 7.1 | 0.0025 | 2026-08-18 | Unauthenticated Cross Site Scripting (XSS) in WP Multilang <= 2.4.31 versions. | |
CVE-2026-73351 |
high | 7.1 | 0.0025 | 2026-08-18 | Unauthenticated Cross Site Scripting (XSS) in WordPress Social Login and Register <= 7.8.1 versions. | |
CVE-2026-73358 |
high | 7.1 | 0.0025 | 2026-08-18 | Unauthenticated Cross Site Scripting (XSS) in Affiliates Manager <= 2.9.53 versions. | |
CVE-2026-73360 |
high | 7.1 | 0.0025 | 2026-08-18 | Unauthenticated Cross Site Scripting (XSS) in Chaty Pro <= 3.5.8 versions. | |
CVE-2026-73361 |
high | 7.1 | 0.0025 | 2026-08-18 | Unauthenticated Cross Site Scripting (XSS) in Recipe Card Blocks for Gutenberg & Elementor <= 3.4.18 | |
CVE-2026-73362 |
high | 7.1 | 0.0025 | 2026-08-18 | Unauthenticated Cross Site Scripting (XSS) in URL Shortify <= 2.5.0 versions. | |
CVE-2026-73375 |
high | 7.1 | 0.0025 | 2026-08-18 | Unauthenticated Cross Site Scripting (XSS) in Ultimate Maps by Supsystic < 1.5.0 versions. | |
CVE-2026-73378 |
high | 7.1 | 0.0025 | 2026-08-18 | Unauthenticated Cross Site Scripting (XSS) in Contact Form by Supsystic < 1.10.0 versions. | |
CVE-2026-73393 |
high | 7.1 | 0.0025 | 2026-08-18 | Unauthenticated Cross Site Scripting (XSS) in Subscribe2 <= 10.46 versions. | |
CVE-2026-16570 |
high | 7.1 | 0.0025 | 2026-08-19 | The NextScripts: Social Networks Auto-Poster WordPress plugin before 4.4.8 does not escape some of t | |
CVE-2026-19055 |
high | 7.1 | 0.0025 | 2026-08-19 | The ProSolution WP Client WordPress plugin before 2.0.11 does not sanitise and escape several parame | |
CVE-2026-19056 |
high | 7.1 | 0.0025 | 2026-08-19 | The ProSolution WP Client WordPress plugin before 2.0.11 does not sanitise and escape a parameter be | |
CVE-2026-97237 |
high | 7.1 | 0.0018 | 2026-09-30 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability i | |
CVE-2026-111830 |
high | 7.1 | 0.0020 | 2026-10-22 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability i | |
CVE-2026-112379 |
high | 7.1 | 0.0019 | 2026-10-22 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability i | |
CVE-2026-112313 |
high | 7.1 | 0.0019 | 2026-10-22 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability i | |
CVE-2026-112835 |
high | 7.1 | 0.0019 | 2026-10-23 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability i | |
CVE-2026-112838 |
high | 7.1 | 0.0019 | 2026-10-23 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability i | |
CVE-2026-112849 |
high | 7.1 | 0.0019 | 2026-10-23 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability i | |
CVE-2026-112863 |
high | 7.1 | 0.0015 | 2026-10-23 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability i | |
CVE-2026-115457 |
high | 7.1 | 0.0042 | 2026-10-23 | baserCMS is a website development framework. In versions 5.0.0 before 5.3.2 and 5.4.0 before 5.4.2, | |
CVE-2026-112207 |
high | 7.1 | 0.0021 | 2026-10-24 | The Download Monitor WordPress plugin before 5.3.4 does not properly validate that a clicked link be | |
CVE-2026-112844 |
high | 7.1 | 0.0020 | 2026-10-24 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability i | |
CVE-2026-112869 |
high | 7.1 | 0.0020 | 2026-10-24 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability i | |
CVE-2026-114178 |
high | 7.1 | 0.0021 | 2026-10-24 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability i | |
CVE-2026-114179 |
high | 7.1 | 0.0020 | 2026-10-24 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability i | |
CVE-2026-114694 |
high | 7.1 | 0.0025 | 2026-10-24 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability i | |
CVE-2026-114695 |
high | 7.1 | 0.0021 | 2026-10-24 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability i | |
CVE-2026-114697 |
high | 7.1 | 0.0021 | 2026-10-24 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability i | |
CVE-2026-115592 |
high | 7.1 | 0.0019 | 2026-10-29 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability i | |
CVE-2026-115611 |
high | 7.1 | 0.0019 | 2026-10-29 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability i | |
CVE-2026-116409 |
high | 7.1 | 0.0019 | 2026-10-29 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability i | |
CVE-2026-42693 |
high | 7.1 | 0.0018 | 2026-10-10 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability i | |
CVE-2026-108494 |
high | 7.1 | 0.0019 | 2026-10-29 | Unauthenticated Cross Site Scripting (XSS) in Chained Quiz <= 1.4.1 versions. | |
CVE-2026-118085 |
high | 7.1 | 0.0018 | 2026-10-29 | Unauthenticated Cross Site Scripting (XSS) in GlobalPayments WooCommerce <= 1.23.3 versions. | |
CVE-2026-27394 |
high | 7.1 | 0.0018 | 2026-10-29 | Unauthenticated Cross Site Scripting (XSS) in Eventer <= 0.1.1 versions. | |
CVE-2026-42692 |
high | 7.1 | 0.0024 | 2026-10-29 | Unauthenticated Cross Site Scripting (XSS) in WP Crowdfunding <= 2.2.2 versions. | |
CVE-2026-54864 |
high | 7.1 | 0.0018 | 2026-10-29 | Unauthenticated Cross Site Scripting (XSS) in Post Video Players <= 1.165 versions. | |
CVE-2026-54866 |
high | 7.1 | 0.0024 | 2026-10-29 | Unauthenticated Cross Site Scripting (XSS) in Razorpay Payment Button Elementor Plugin <= 1.2.8 vers | |
CVE-2026-61988 |
high | 7.1 | 0.0024 | 2026-10-29 | Unauthenticated Cross Site Scripting (XSS) in Auction Nudge – Your eBay on Your Site <= 8.4.0 versio | |
CVE-2026-61989 |
high | 7.1 | 0.0018 | 2026-10-29 | Unauthenticated Cross Site Scripting (XSS) in Easy Property Listings <= 3.5.25 versions. | |
CVE-2026-61993 |
high | 7.1 | 0.0023 | 2026-10-29 | Unauthenticated Cross Site Scripting (XSS) in Blockonomics 3.11.0 versions. | |
CVE-2026-61995 |
high | 7.1 | 0.0023 | 2026-10-29 | Unauthenticated Cross Site Scripting (XSS) in YouTube Showcase <= 4.1.0 versions. | |
CVE-2025-40772 |
high | 7.0 | 0.0032 | 2025-10-14 | A vulnerability has been identified in SiPass integrated (All versions < V3.0). Affected server appl | |
CVE-2026-3457 |
high | 7.0 | 0.0013 | 2026-03-27 | Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerab |