Vulnerability Weakness Types
Browse CVEs by CWE classification. Click a CWE to see all associated vulnerabilities.
CWE-284 (2655)
CWE-79 (1918)
CWE-416 (1383)
CWE-862 (1246)
CWE-89 (1118)
CWE-22 (1046)
CWE-125 (940)
CWE-200 (866)
CWE-306 (862)
CWE-122 (834)
CWE-20 (815)
CWE-787 (735)
CWE-78 (727)
CWE-918 (707)
CWE-863 (667)
CWE-94 (653)
CWE-74 (604)
CWE-639 (577)
CWE-400 (545)
CWE-269 (509)
CWE-119 (507)
CWE-502 (488)
CWE-287 (453)
CWE-770 (450)
CWE-121 (414)
CWE-190 (383)
CWE-77 (380)
CWE-362 (376)
CWE-476 (311)
CWE-352 (289)
| CVE | Severity | CVSS | EPSS | Published | Description | Flags |
|---|---|---|---|---|---|---|
CVE-2026-115953 |
medium | 6.5 | 0.0017 | 2026-10-26 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability i | |
CVE-2026-115955 |
medium | 6.5 | 0.0017 | 2026-10-26 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability i | |
CVE-2026-115956 |
medium | 6.5 | 0.0017 | 2026-10-26 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability i | |
CVE-2026-115961 |
medium | 6.5 | 0.0017 | 2026-10-26 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability i | |
CVE-2026-114710 |
medium | 6.5 | 0.0017 | 2026-10-26 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability i | |
CVE-2026-116395 |
medium | 6.5 | 0.0017 | 2026-10-26 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability i | |
CVE-2026-116396 |
medium | 6.5 | 0.0017 | 2026-10-26 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability i | |
CVE-2026-115966 |
medium | 6.5 | 0.0017 | 2026-10-26 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability i | |
CVE-2026-116398 |
medium | 6.5 | 0.0017 | 2026-10-26 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability i | |
CVE-2026-116400 |
medium | 6.5 | 0.0017 | 2026-10-26 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability i | |
CVE-2026-116408 |
medium | 6.5 | 0.0017 | 2026-10-26 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability i | |
CVE-2026-118087 |
medium | 6.5 | 0.0017 | 2026-10-29 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability i | |
CVE-2026-118094 |
medium | 6.5 | 0.0017 | 2026-10-29 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability i | |
CVE-2026-24533 |
medium | 6.5 | 0.0017 | 2026-10-29 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability i | |
CVE-2026-48196 |
medium | 6.5 | 0.0017 | 2026-10-29 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability i | |
CVE-2026-52709 |
medium | 6.5 | 0.0017 | 2026-10-29 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability i | |
CVE-2026-56056 |
medium | 6.5 | 0.0017 | 2026-10-29 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability i | |
CVE-2026-48195 |
medium | 6.5 | 0.0017 | 2026-10-29 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability i | |
CVE-2026-54862 |
medium | 6.5 | 0.0017 | 2026-10-29 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability i | |
CVE-2026-116857 |
medium | 6.5 | 0.0020 | 2026-10-29 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability i | |
CVE-2026-110881 |
medium | 6.5 | 0.0017 | 2026-10-29 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability i | |
CVE-2026-116849 |
medium | 6.5 | 0.0018 | 2026-10-29 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability i | |
CVE-2026-116850 |
medium | 6.5 | 0.0018 | 2026-10-29 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability i | |
CVE-2026-118095 |
medium | 6.5 | 0.0018 | 2026-10-29 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability i | |
CVE-2026-39737 |
medium | 6.5 | 0.0017 | 2026-10-29 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability i | |
CVE-2026-39742 |
medium | 6.5 | 0.0019 | 2026-10-29 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability i | |
CVE-2026-115610 |
medium | 6.5 | 0.0014 | 2026-10-29 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability i | |
CVE-2026-118097 |
medium | 6.5 | 0.0017 | 2026-10-29 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability i | |
CVE-2026-114706 |
medium | 6.5 | 0.0013 | 2026-10-29 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability i | |
CVE-2026-54865 |
medium | 6.5 | 0.0022 | 2026-10-29 | Subscriber Cross Site Scripting (XSS) in Podamibe Custom User Gravatar <= 1.0.8 versions. | |
CVE-2026-116848 |
medium | 6.5 | 0.0013 | 2026-10-29 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability i | |
CVE-2026-111088 |
medium | 6.5 | 0.0022 | 2026-10-20 | A Stored Cross-Site Scripting vulnerability exists in the SNS VPN log monitoring screen. | |
CVE-2026-119370 |
medium | 6.5 | — | 2026-10-30 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability i | |
CVE-2026-65444 |
medium | 6.5 | — | 2026-10-30 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability i | |
CVE-2026-119369 |
medium | 6.5 | — | 2026-10-30 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability i | |
CVE-2026-119365 |
medium | 6.5 | — | 2026-10-30 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability i | |
CVE-2026-39739 |
medium | 6.5 | — | 2026-10-30 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability i | |
CVE-2026-114711 |
medium | 6.5 | — | 2026-10-30 | Subscriber Cross Site Scripting (XSS) in MultiVendorX <= 5.0.20 versions. | |
CVE-2026-116854 |
medium | 6.5 | — | 2026-10-30 | Subscriber Cross Site Scripting (XSS) in WP Customer Area <= 8.4.0 versions. | |
CVE-2026-27061 |
medium | 6.5 | — | 2026-10-30 | Subscriber Cross Site Scripting (XSS) in User Registration <= 5.3.0 versions. | |
CVE-2026-109697 |
medium | 6.5 | 0.0014 | 2026-10-13 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability i | |
CVE-2026-107625 |
medium | 6.4 | 0.0019 | 2026-10-28 | The Ultimate Member – User Profile, Registration, Login, Member Directory, Content Restriction & Mem | |
CVE-2026-109209 |
medium | 6.4 | 0.0021 | 2026-10-28 | The All-in-One Video Gallery – Video Player & Galleries for YouTube, Vimeo & Self-Hosted Videos plug | |
CVE-2026-109974 |
medium | 6.4 | 0.0019 | 2026-10-28 | The All-in-One Video Gallery – Video Player & Galleries for YouTube, Vimeo & Self-Hosted Videos plug | |
CVE-2026-111727 |
medium | 6.4 | 0.0021 | 2026-10-28 | The Appointment Booking Calendar plugin for WordPress is vulnerable to Stored Cross-Site Scripting v | |
CVE-2026-103370 |
medium | 6.4 | 0.0026 | 2026-10-28 | The Awesome Support – WordPress HelpDesk & Support Plugin plugin for WordPress is vulnerable to Stor | |
CVE-2026-103996 |
medium | 6.4 | 0.0024 | 2026-10-28 | The If-So Dynamic Content – Elementor & All Page Builders Personalization plugin for WordPress is vu | |
CVE-2026-104729 |
medium | 6.4 | 0.0016 | 2026-10-28 | The Avada (Fusion) Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the | |
CVE-2026-104740 |
medium | 6.4 | 0.0024 | 2026-10-28 | The If-So Dynamic Content – Elementor & All Page Builders Personalization plugin for WordPress is vu | |
CVE-2026-107710 |
medium | 6.4 | 0.0020 | 2026-10-28 | The Hustle – Email Marketing, Lead Generation, Optins, Popups plugin for WordPress is vulnerable to |