Vulnerability Weakness Types
Browse CVEs by CWE classification. Click a CWE to see all associated vulnerabilities.
CWE-284 (2634)
CWE-79 (1854)
CWE-416 (1298)
CWE-862 (1188)
CWE-89 (1100)
CWE-22 (1026)
CWE-125 (885)
CWE-200 (849)
CWE-306 (840)
CWE-122 (831)
CWE-20 (798)
CWE-78 (712)
CWE-918 (690)
CWE-787 (689)
CWE-863 (644)
CWE-94 (642)
CWE-74 (601)
CWE-639 (543)
CWE-400 (532)
CWE-119 (503)
CWE-269 (501)
CWE-502 (472)
CWE-770 (443)
CWE-287 (433)
CWE-121 (408)
CWE-77 (373)
CWE-190 (371)
CWE-362 (323)
CWE-352 (281)
CWE-285 (243)
| CVE | Severity | CVSS | EPSS | Published | Description | Flags |
|---|---|---|---|---|---|---|
CVE-2026-40770 |
high | 7.1 | 0.0018 | 2026-06-15 | Unauthenticated Cross Site Scripting (XSS) in Coupon Affiliates <= 7.5.3 versions. | |
CVE-2026-40787 |
high | 7.1 | 0.0018 | 2026-06-15 | Unauthenticated Cross Site Scripting (XSS) in Quiz And Survey Master <= 11.0.0 versions. | |
CVE-2026-40791 |
high | 7.1 | 0.0021 | 2026-06-15 | Unauthenticated Cross Site Scripting (XSS) in WP Time Slots Booking Form <= 1.2.46 versions. | |
CVE-2026-42649 |
high | 7.1 | 0.0018 | 2026-06-15 | Unauthenticated Cross Site Scripting (XSS) in Favicon Rotator <= 1.2.11 versions. | |
CVE-2026-42658 |
high | 7.1 | 0.0018 | 2026-06-15 | Unauthenticated Cross Site Scripting (XSS) in Classified Listing <= 5.3.8 versions. | |
CVE-2026-42775 |
high | 7.1 | 0.0018 | 2026-06-15 | Unauthenticated Cross Site Scripting (XSS) in AutomatorWP <= 5.7.2 versions. | |
CVE-2026-45437 |
high | 7.1 | 0.0018 | 2026-06-15 | Unauthenticated Cross Site Scripting (XSS) in Product Filter Widget for Elementor <= 1.0.6 versions. | |
CVE-2026-48838 |
high | 7.1 | 0.0024 | 2026-06-15 | Unauthenticated Cross Site Scripting (XSS) in Post SMTP <= 3.6.2 versions. | |
CVE-2026-48867 |
high | 7.1 | 0.0018 | 2026-06-15 | Unauthenticated Cross Site Scripting (XSS) in Quiz And Survey Master <= 11.1.2 versions. | |
CVE-2026-48871 |
high | 7.1 | 0.0023 | 2026-06-15 | Unauthenticated Cross Site Scripting (XSS) in MW WP Form <= 5.1.3 versions. | |
CVE-2026-48876 |
high | 7.1 | 0.0018 | 2026-06-15 | Unauthenticated Cross Site Scripting (XSS) in Stop Spammers <= 2026.3 versions. | |
CVE-2026-48885 |
high | 7.1 | 0.0018 | 2026-06-15 | Unauthenticated Cross Site Scripting (XSS) in HollerBox <= 2.3.10.1 versions. | |
CVE-2026-48966 |
high | 7.1 | 0.0018 | 2026-06-15 | Unauthenticated Cross Site Scripting (XSS) in Funnel Builder by FunnelKit <= 3.15.0.2 versions. | |
CVE-2026-49055 |
high | 7.1 | 0.0023 | 2026-06-15 | Unauthenticated Cross Site Scripting (XSS) in Drag and Drop Multiple File Upload – Contact Form 7 <= | |
CVE-2026-52702 |
high | 7.1 | 0.0014 | 2026-06-15 | Unauthenticated Cross Site Scripting (XSS) in SEO Redirection <= 9.17 versions. | |
CVE-2026-39437 |
high | 7.1 | 0.0014 | 2026-06-16 | Unauthenticated Cross Site Scripting (XSS) in Min Max Step Quantity Limits Manager for WooCommerce < | |
CVE-2026-54198 |
high | 7.1 | 0.0020 | 2026-06-16 | Unauthenticated Cross Site Scripting (XSS) in Media LIbrary Assistant <= 3.35 versions. | |
CVE-2026-22328 |
high | 7.1 | 0.0024 | 2026-06-17 | Unauthenticated Cross Site Scripting (XSS) in Auto Repair <= 22.6 versions. | |
CVE-2026-22329 |
high | 7.1 | 0.0019 | 2026-06-17 | Unauthenticated Cross Site Scripting (XSS) in Skillate <= 1.2.10 versions. | |
CVE-2026-22339 |
high | 7.1 | 0.0023 | 2026-06-17 | Unauthenticated Cross Site Scripting (XSS) in WPJobster <= 6.3.5 versions. | |
CVE-2026-39548 |
high | 7.1 | 0.0018 | 2026-06-17 | Unauthenticated Cross Site Scripting (XSS) in MagOne <= 9.0 versions. | |
CVE-2026-41557 |
high | 7.1 | 0.0023 | 2026-06-17 | Unauthenticated Cross Site Scripting (XSS) in Kapee < 1.7.1 versions. | |
CVE-2026-42385 |
high | 7.1 | 0.0023 | 2026-06-17 | Unauthenticated Cross Site Scripting (XSS) in Profile Builder Pro <= 3.15.0 versions. | |
CVE-2026-48869 |
high | 7.1 | 0.0019 | 2026-06-17 | Unauthenticated Cross Site Scripting (XSS) in Enfold <= 7.1.4 versions. | |
CVE-2026-49074 |
high | 7.1 | 0.0018 | 2026-06-17 | Unauthenticated Cross Site Scripting (XSS) in JetEngine <= 3.8.9.1 versions. | |
CVE-2026-49778 |
high | 7.1 | 0.0019 | 2026-06-17 | Unauthenticated Cross Site Scripting (XSS) in WPFunnels Pro <= 2.9.4 versions. | |
CVE-2026-54188 |
high | 7.1 | 0.0014 | 2026-06-17 | Unauthenticated Cross Site Scripting (XSS) in JetEngine <= 3.8.10 versions. | |
CVE-2026-54189 |
high | 7.1 | 0.0014 | 2026-06-17 | Unauthenticated Cross Site Scripting (XSS) in JetEngine <= 3.8.10 versions. | |
CVE-2026-54192 |
high | 7.1 | 0.0022 | 2026-06-17 | Unauthenticated Cross Site Scripting (XSS) in Popup box <= 6.2.9 versions. | |
CVE-2026-54195 |
high | 7.1 | 0.0020 | 2026-06-17 | Unauthenticated Cross Site Scripting (XSS) in JetFormBuilder <= 3.6.0.1 versions. | |
CVE-2026-40720 |
high | 7.1 | 0.0018 | 2026-06-17 | Unauthenticated Cross Site Scripting (XSS) in Royal Elementor Addons Pro < 1.7.1041 versions. | |
CVE-2026-54070 |
high | 7.1 | 0.0030 | 2026-06-24 | SiYuan is an open-source personal knowledge management system. Prior to 3.7.0, renderPackageREADME i | |
CVE-2026-56005 |
high | 7.1 | 0.0025 | 2026-06-25 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability i | |
CVE-2026-56014 |
high | 7.1 | 0.0025 | 2026-06-25 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability i | |
CVE-2026-56042 |
high | 7.1 | 0.0025 | 2026-06-25 | Customer Cross Site Scripting (XSS) in Advanced Order Export For WooCommerce <= 4.0.9 versions. | |
CVE-2026-56071 |
high | 7.1 | 0.0025 | 2026-06-25 | Unauthenticated Cross Site Scripting (XSS) in Forminator <= 1.53.1 versions. | |
CVE-2026-56011 |
high | 7.1 | 0.0025 | 2026-06-26 | Unauthenticated Cross Site Scripting (XSS) in MapPress Maps for WordPress <= 2.97.3 versions. | |
CVE-2026-56039 |
high | 7.1 | 0.0025 | 2026-06-26 | Unauthenticated Cross Site Scripting (XSS) in Quick Interest Slider <= 3.1.6 versions. | |
CVE-2026-56040 |
high | 7.1 | 0.0025 | 2026-06-26 | Unauthenticated Cross Site Scripting (XSS) in Gutenverse Form <= 2.4.7 versions. | |
CVE-2026-56041 |
high | 7.1 | 0.0025 | 2026-06-26 | Unauthenticated Cross Site Scripting (XSS) in Responsive Lightbox <= 2.7.6 versions. | |
CVE-2026-56043 |
high | 7.1 | 0.0025 | 2026-06-26 | Unauthenticated Cross Site Scripting (XSS) in Customer Reviews for WooCommerce <= 5.110.1 versions. | |
CVE-2026-56044 |
high | 7.1 | 0.0025 | 2026-06-26 | Unauthenticated Cross Site Scripting (XSS) in Blog2Social <= 8.9.2 versions. | |
CVE-2026-56045 |
high | 7.1 | 0.0025 | 2026-06-26 | Unauthenticated Cross Site Scripting (XSS) in Automatic < 3.135.1 versions. | |
CVE-2026-56047 |
high | 7.1 | 0.0025 | 2026-06-26 | Unauthenticated Cross Site Scripting (XSS) in perfmatters <= 2.6.3 versions. | |
CVE-2026-56072 |
high | 7.1 | 0.0025 | 2026-06-26 | Unauthenticated Cross Site Scripting (XSS) in WoodMart <= 8.5.3 versions. | |
CVE-2026-57312 |
high | 7.1 | 0.0025 | 2026-06-26 | Unauthenticated Cross Site Scripting (XSS) in Everest Forms <= 3.4.8 versions. | |
CVE-2026-57317 |
high | 7.1 | 0.0023 | 2026-06-26 | Unauthenticated Cross Site Scripting (XSS) in Simply Schedule Appointments <= 1.6.12.2 versions. | |
CVE-2026-57319 |
high | 7.1 | 0.0025 | 2026-06-26 | Unauthenticated Cross Site Scripting (XSS) in FOX <= 1.4.8 versions. | |
CVE-2026-57322 |
high | 7.1 | 0.0025 | 2026-06-26 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability i | |
CVE-2026-57325 |
high | 7.1 | 0.0025 | 2026-06-26 | Unauthenticated Cross Site Scripting (XSS) in NanoMag <= 1.8 versions. |