Vulnerability Weakness Types
Browse CVEs by CWE classification. Click a CWE to see all associated vulnerabilities.
CWE-284 (2641)
CWE-79 (1913)
CWE-416 (1381)
CWE-862 (1237)
CWE-89 (1115)
CWE-22 (1039)
CWE-125 (936)
CWE-306 (860)
CWE-200 (858)
CWE-122 (833)
CWE-20 (804)
CWE-787 (732)
CWE-78 (723)
CWE-918 (701)
CWE-863 (661)
CWE-94 (650)
CWE-74 (604)
CWE-639 (573)
CWE-400 (540)
CWE-269 (507)
CWE-119 (504)
CWE-502 (485)
CWE-770 (450)
CWE-287 (446)
CWE-121 (412)
CWE-190 (381)
CWE-362 (375)
CWE-77 (375)
CWE-476 (308)
CWE-352 (288)
| CVE | Severity | CVSS | EPSS | Published | Description | Flags |
|---|---|---|---|---|---|---|
CVE-2026-48870 |
medium | 6.5 | 0.0021 | 2026-06-15 | Subscriber Cross Site Scripting (XSS) in King Addons for Elementor <= 51.1.62 versions. | |
CVE-2026-48880 |
medium | 6.5 | 0.0021 | 2026-06-15 | Subscriber Cross Site Scripting (XSS) in WP Job Portal <= 2.5.2 versions. | |
CVE-2026-49773 |
medium | 6.5 | 0.0017 | 2026-06-15 | Subscriber Cross Site Scripting (XSS) in FV Flowplayer Video Player < 7.5.51.7212 versions. | |
CVE-2026-57620 |
medium | 6.5 | 0.0022 | 2026-06-26 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability i | |
CVE-2026-56046 |
medium | 6.5 | 0.0022 | 2026-06-26 | Subscriber Cross Site Scripting (XSS) in ListingPro <= 2.9.11 versions. | |
CVE-2026-57431 |
medium | 6.5 | 0.0022 | 2026-06-26 | Author Cross Site Scripting (XSS) in Featured Image <= 2.1 versions. | |
CVE-2026-57617 |
medium | 6.5 | 0.0022 | 2026-06-26 | Contributor Cross Site Scripting (XSS) in SeedProd Pro < 6.19.5 versions. | |
CVE-2026-57618 |
medium | 6.5 | 0.0022 | 2026-06-26 | Contributor Cross Site Scripting (XSS) in Neve PRO <= 3.1.2 versions. | |
CVE-2026-57638 |
medium | 6.5 | 0.0022 | 2026-06-26 | Contributor Cross Site Scripting (XSS) in Fluent Booking <= 2.1.0 versions. | |
CVE-2026-57650 |
medium | 6.5 | 0.0022 | 2026-06-26 | Contributor Cross Site Scripting (XSS) in Magazine Blocks <= 1.8.3 versions. | |
CVE-2026-57651 |
medium | 6.5 | 0.0022 | 2026-06-26 | Contributor Cross Site Scripting (XSS) in Ghost Kit <= 3.6.0 versions. | |
CVE-2026-57328 |
medium | 6.5 | 0.0022 | 2026-06-29 | Subscriber Cross Site Scripting (XSS) in Business Directory <= 6.4.22 versions. | |
CVE-2026-57330 |
medium | 6.5 | 0.0022 | 2026-06-29 | Subscriber Cross Site Scripting (XSS) in MasterStudy LMS <= 3.7.27 versions. | |
CVE-2026-57963 |
medium | 6.5 | 0.0031 | 2026-07-01 | An attacker who can send HTML chat messages (via Matrix or XMPP) can inject arbitrary styled content | |
CVE-2026-57737 |
medium | 6.5 | 0.0022 | 2026-07-01 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability i | |
CVE-2026-57342 |
medium | 6.5 | 0.0022 | 2026-07-02 | Subscriber Cross Site Scripting (XSS) in ShortPixel Adaptive Images <= 3.11.3 versions. | |
CVE-2026-57354 |
medium | 6.5 | 0.0022 | 2026-07-02 | Subscriber Cross Site Scripting (XSS) in JetReviews <= 3.0.0.1 versions. | |
CVE-2026-57684 |
medium | 6.5 | 0.0022 | 2026-07-02 | Contributor Cross Site Scripting (XSS) in TheFox <= 3.9.70 versions. | |
CVE-2026-57754 |
medium | 6.5 | 0.0022 | 2026-07-02 | Contributor Cross Site Scripting (XSS) in Livemesh Addons for WPBakery Page Builder <= 3.9.4 version | |
CVE-2026-57755 |
medium | 6.5 | 0.0022 | 2026-07-02 | Contributor Cross Site Scripting (XSS) in Mosaic Gallery – Advanced Gallery <= 1.2.0 versions. | |
CVE-2026-57763 |
medium | 6.5 | 0.0022 | 2026-07-02 | Contributor Cross Site Scripting (XSS) in Structured Content <= 1.7.0 versions. | |
CVE-2026-57764 |
medium | 6.5 | 0.0022 | 2026-07-02 | Contributor Cross Site Scripting (XSS) in Surbma | Yoast SEO Breadcrumb Shortcode <= 1.2 versions. | |
CVE-2026-57365 |
medium | 6.5 | 0.0022 | 2026-07-13 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability i | |
CVE-2026-57391 |
medium | 6.5 | 0.0024 | 2026-07-13 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability i | |
CVE-2026-57402 |
medium | 6.5 | 0.0022 | 2026-07-13 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability i | |
CVE-2026-57414 |
medium | 6.5 | 0.0022 | 2026-07-13 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability i | |
CVE-2026-57420 |
medium | 6.5 | 0.0022 | 2026-07-13 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability i | |
CVE-2026-57693 |
medium | 6.5 | 0.0022 | 2026-07-13 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability i | |
CVE-2026-57711 |
medium | 6.5 | 0.0022 | 2026-07-13 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability i | |
CVE-2026-57780 |
medium | 6.5 | 0.0022 | 2026-07-13 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability i | |
CVE-2026-57783 |
medium | 6.5 | 0.0022 | 2026-07-13 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability i | |
CVE-2026-27403 |
medium | 6.5 | 0.0022 | 2026-07-23 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability i | |
CVE-2026-57373 |
medium | 6.5 | 0.0022 | 2026-07-23 | Customer Cross Site Scripting (XSS) in Funnel Kit Funnel Builder PRO <= 3.15.0.4 versions. | |
CVE-2026-57384 |
medium | 6.5 | 0.0022 | 2026-07-23 | Subscriber Cross Site Scripting (XSS) in WishList Member X <= 3.32.0 versions. | |
CVE-2026-59513 |
medium | 6.5 | 0.0022 | 2026-07-23 | Subscriber Cross Site Scripting (XSS) in Masteriyo - LMS <= 2.3.0 versions. | |
CVE-2026-65449 |
medium | 6.5 | 0.0022 | 2026-07-23 | Contributor Cross Site Scripting (XSS) in MapSVG <= 8.14.0 versions. | |
CVE-2026-65465 |
medium | 6.5 | 0.0022 | 2026-07-23 | Contributor Cross Site Scripting (XSS) in JetElements For Elementor <= 2.9.1.1 versions. | |
CVE-2026-65470 |
medium | 6.5 | 0.0022 | 2026-07-23 | Contributor Cross Site Scripting (XSS) in Fluent Support <= 2.3.0 versions. | |
CVE-2026-65473 |
medium | 6.5 | 0.0022 | 2026-07-23 | Contributor Cross Site Scripting (XSS) in Virtue/Ascend/Pinnacle Toolkit <= 4.9.12 versions. | |
CVE-2026-65475 |
medium | 6.5 | 0.0022 | 2026-07-23 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability i | |
CVE-2026-65480 |
medium | 6.5 | 0.0022 | 2026-07-23 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability i | |
CVE-2026-65514 |
medium | 6.5 | 0.0022 | 2026-07-23 | Contributor Cross Site Scripting (XSS) in Appointment Hour Booking <= 1.5.86 versions. | |
CVE-2026-65518 |
medium | 6.5 | 0.0022 | 2026-07-23 | Contributor Cross Site Scripting (XSS) in Accept Donations with PayPal & Stripe <= 1.5.5 versions. | |
CVE-2026-65519 |
medium | 6.5 | 0.0022 | 2026-07-23 | Author Cross Site Scripting (XSS) in Photo Gallery <= 2.7.7.29 versions. | |
CVE-2026-65522 |
medium | 6.5 | 0.0022 | 2026-07-23 | Contributor Cross Site Scripting (XSS) in Manual - Documentation, Knowledge Base & Education WordPre | |
CVE-2026-65527 |
medium | 6.5 | 0.0022 | 2026-07-23 | Contributor Cross Site Scripting (XSS) in LIQUID SPEECH BALLOON <= 1.2.5 versions. | |
CVE-2026-65528 |
medium | 6.5 | 0.0022 | 2026-07-23 | Contributor Cross Site Scripting (XSS) in BSK PDF Manager <= 3.8 versions. | |
CVE-2026-65533 |
medium | 6.5 | 0.0022 | 2026-07-23 | Contributor Cross Site Scripting (XSS) in Smart SEO Tool <= 4.1.2 versions. | |
CVE-2026-59559 |
medium | 6.5 | 0.0022 | 2026-07-27 | Subscriber Cross Site Scripting (XSS) in RT Mega Menu – Mega Menu Builder for Elementor & Gutenb | |
CVE-2026-65562 |
medium | 6.5 | 0.0022 | 2026-07-27 | Contributor Cross Site Scripting (XSS) in BetterDocs <= 4.6.2 versions. |