Vulnerability Weakness Types
Browse CVEs by CWE classification. Click a CWE to see all associated vulnerabilities.
CWE-284 (2650)
CWE-79 (1914)
CWE-416 (1381)
CWE-862 (1239)
CWE-89 (1115)
CWE-22 (1042)
CWE-125 (937)
CWE-306 (861)
CWE-200 (860)
CWE-122 (833)
CWE-20 (805)
CWE-787 (733)
CWE-78 (723)
CWE-918 (703)
CWE-863 (664)
CWE-94 (651)
CWE-74 (604)
CWE-639 (574)
CWE-400 (541)
CWE-269 (508)
CWE-119 (505)
CWE-502 (485)
CWE-770 (450)
CWE-287 (448)
CWE-121 (414)
CWE-190 (381)
CWE-77 (377)
CWE-362 (376)
CWE-476 (309)
CWE-352 (289)
| CVE | Severity | CVSS | EPSS | Published | Description | Flags |
|---|---|---|---|---|---|---|
CVE-2026-66433 |
medium | 6.5 | 0.0022 | 2026-07-27 | Contributor Cross Site Scripting (XSS) in Location Weather <= 3.0.6 versions. | |
CVE-2026-66434 |
medium | 6.5 | 0.0022 | 2026-07-27 | Contributor Cross Site Scripting (XSS) in Photonic Gallery & Lightbox for Flickr, SmugMug & Others < | |
CVE-2026-66445 |
medium | 6.5 | 0.0022 | 2026-07-27 | Contributor Cross Site Scripting (XSS) in Open User Map <= 1.4.46 versions. | |
CVE-2026-66448 |
medium | 6.5 | 0.0022 | 2026-07-27 | Contributor Cross Site Scripting (XSS) in Gallery PhotoBlocks <= 1.3.3 versions. | |
CVE-2026-28178 |
medium | 6.5 | 0.0022 | 2026-08-06 | Contributor Cross Site Scripting (XSS) in Powerkit <= 3.1.0 versions. | |
CVE-2026-61959 |
medium | 6.5 | 0.0022 | 2026-08-06 | Subscriber Cross Site Scripting (XSS) in Business Directory <= 6.4.24 versions. | |
CVE-2026-66688 |
medium | 6.5 | 0.0022 | 2026-08-06 | Contributor Cross Site Scripting (XSS) in Ultimate Addons for Elementor <= 1.45.2 versions. | |
CVE-2026-66703 |
medium | 6.5 | 0.0022 | 2026-08-06 | Contributor Cross Site Scripting (XSS) in MailOptin <= 1.2.78.0 versions. | |
CVE-2026-27537 |
medium | 6.5 | 0.0022 | 2026-08-13 | Unauthenticated Cross Site Scripting (XSS) in Popup by Supsystic <= 1.11.2 versions. | |
CVE-2026-28182 |
medium | 6.5 | 0.0022 | 2026-08-13 | Subscriber Cross Site Scripting (XSS) in AcyMailing SMTP Newsletter <= 10.11.1 versions. | |
CVE-2026-66467 |
medium | 6.5 | 0.0022 | 2026-08-13 | Subscriber Cross Site Scripting (XSS) in FluentCommunity <= 2.7.5 versions. | |
CVE-2026-66471 |
medium | 6.5 | 0.0022 | 2026-08-13 | Subscriber Cross Site Scripting (XSS) in Accordion <= 3.0.6 versions. | |
CVE-2026-66687 |
medium | 6.5 | 0.0022 | 2026-08-13 | Customer Cross Site Scripting (XSS) in WpBookingly <= 1.3.2 versions. | |
CVE-2026-73340 |
medium | 6.5 | 0.0022 | 2026-08-13 | Contributor Cross Site Scripting (XSS) in Featured Image from URL <= 5.3.3 versions. | |
CVE-2026-73357 |
medium | 6.5 | 0.0022 | 2026-08-13 | Donor Cross Site Scripting (XSS) in GiveWP < 4.16.6 versions. | |
CVE-2026-66637 |
medium | 6.5 | 0.0022 | 2026-08-18 | Contributor Cross Site Scripting (XSS) in Featured Video Plus <= 2.3.3 versions. | |
CVE-2026-66638 |
medium | 6.5 | 0.0022 | 2026-08-18 | Contributor Cross Site Scripting (XSS) in Frontend Admin by DynamiApps <= 3.29.10 versions. | |
CVE-2026-66639 |
medium | 6.5 | 0.0022 | 2026-08-18 | Contributor Cross Site Scripting (XSS) in WPZOOM Forms – Contact Form Plugin for Gutenberg <= 2.0.4 | |
CVE-2026-66640 |
medium | 6.5 | 0.0022 | 2026-08-18 | Contributor Cross Site Scripting (XSS) in Login With Ajax <= 4.5.1 versions. | |
CVE-2026-66641 |
medium | 6.5 | 0.0022 | 2026-08-18 | Contributor Cross Site Scripting (XSS) in Video Conferencing with Zoom <= 4.6.8 versions. | |
CVE-2026-66643 |
medium | 6.5 | 0.0022 | 2026-08-18 | Contributor Cross Site Scripting (XSS) in Wufoo Shortcode <= 1.55 versions. | |
CVE-2026-66644 |
medium | 6.5 | 0.0022 | 2026-08-18 | Contributor Cross Site Scripting (XSS) in Typing Effect <= 1.3.7 versions. | |
CVE-2026-66645 |
medium | 6.5 | 0.0022 | 2026-08-18 | Contributor Cross Site Scripting (XSS) in Table Of Contents Block <= 1.5.0 versions. | |
CVE-2026-66646 |
medium | 6.5 | 0.0022 | 2026-08-18 | Contributor Cross Site Scripting (XSS) in WP Tab Widget <= 1.2.11 versions. | |
CVE-2026-68565 |
medium | 6.5 | 0.0022 | 2026-08-18 | Contributor Cross Site Scripting (XSS) in GeoDirectory <= 2.8.172 versions. | |
CVE-2026-73359 |
medium | 6.5 | 0.0022 | 2026-08-18 | Subscriber Cross Site Scripting (XSS) in WP Cookie Notice for GDPR, CCPA & ePrivacy Consent <= 4.3.9 | |
CVE-2026-66603 |
medium | 6.5 | 0.0022 | 2026-08-18 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability i | |
CVE-2026-66591 |
medium | 6.5 | 0.0022 | 2026-08-18 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability i | |
CVE-2026-97301 |
medium | 6.5 | 0.0017 | 2026-09-30 | Contributor Cross Site Scripting (XSS) in Cool Formkit Lite <= 2.7.8 versions. | |
CVE-2026-114128 |
medium | 6.5 | 0.0032 | 2026-10-21 | Astro is a web framework for content-driven websites. Prior to 7.3.2, Astro's JSX and MDX rendering | |
CVE-2026-112867 |
medium | 6.5 | 0.0017 | 2026-10-22 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability i | |
CVE-2026-114184 |
medium | 6.5 | 0.0018 | 2026-10-22 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability i | |
CVE-2026-112845 |
medium | 6.5 | 0.0017 | 2026-10-22 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability i | |
CVE-2026-114700 |
medium | 6.5 | 0.0017 | 2026-10-22 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability i | |
CVE-2026-114701 |
medium | 6.5 | 0.0017 | 2026-10-22 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability i | |
CVE-2026-114702 |
medium | 6.5 | 0.0017 | 2026-10-22 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability i | |
CVE-2026-114703 |
medium | 6.5 | 0.0017 | 2026-10-22 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability i | |
CVE-2026-114693 |
medium | 6.5 | 0.0018 | 2026-10-24 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability i | |
CVE-2026-114194 |
medium | 6.5 | 0.0018 | 2026-10-24 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability i | |
CVE-2026-112865 |
medium | 6.5 | 0.0017 | 2026-10-26 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability i | |
CVE-2026-114709 |
medium | 6.5 | 0.0017 | 2026-10-26 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability i | |
CVE-2026-115602 |
medium | 6.5 | 0.0017 | 2026-10-26 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability i | |
CVE-2026-115613 |
medium | 6.5 | 0.0017 | 2026-10-26 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability i | |
CVE-2026-97254 |
medium | 6.5 | 0.0017 | 2026-10-26 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability i | |
CVE-2026-114707 |
medium | 6.5 | 0.0018 | 2026-10-26 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability i | |
CVE-2026-114708 |
medium | 6.5 | 0.0017 | 2026-10-26 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability i | |
CVE-2026-115950 |
medium | 6.5 | 0.0017 | 2026-10-26 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability i | |
CVE-2026-115951 |
medium | 6.5 | 0.0017 | 2026-10-26 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability i | |
CVE-2026-115953 |
medium | 6.5 | 0.0017 | 2026-10-26 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability i | |
CVE-2026-115955 |
medium | 6.5 | 0.0017 | 2026-10-26 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability i |