Vulnerability Weakness Types
Browse CVEs by CWE classification. Click a CWE to see all associated vulnerabilities.
CWE-284 (2634)
CWE-79 (1856)
CWE-416 (1301)
CWE-862 (1191)
CWE-89 (1107)
CWE-22 (1028)
CWE-125 (885)
CWE-200 (849)
CWE-306 (840)
CWE-122 (831)
CWE-20 (798)
CWE-78 (716)
CWE-787 (693)
CWE-918 (693)
CWE-863 (648)
CWE-94 (642)
CWE-74 (601)
CWE-639 (547)
CWE-400 (532)
CWE-119 (503)
CWE-269 (502)
CWE-502 (472)
CWE-770 (443)
CWE-287 (433)
CWE-121 (408)
CWE-77 (375)
CWE-190 (372)
CWE-362 (323)
CWE-352 (283)
CWE-285 (243)
| CVE | Severity | CVSS | EPSS | Published | Description | Flags |
|---|---|---|---|---|---|---|
CVE-2026-57320 |
high | 7.1 | 0.0025 | 2026-06-29 | Unauthenticated Cross Site Scripting (XSS) in BEAR <= 1.1.8 versions. | |
CVE-2026-57333 |
high | 7.1 | 0.0025 | 2026-06-29 | Unauthenticated Cross Site Scripting (XSS) in Link Whisper Free <= 0.9.4 versions. | |
CVE-2026-57336 |
high | 7.1 | 0.0025 | 2026-06-29 | Unauthenticated Cross Site Scripting (XSS) in Jobify <= 4.3.2 versions. | |
CVE-2026-57337 |
high | 7.1 | 0.0025 | 2026-06-29 | Unauthenticated Cross Site Scripting (XSS) in Landing Page Builder <= 1.5.3.5 versions. | |
CVE-2026-57338 |
high | 7.1 | 0.0025 | 2026-06-29 | Unauthenticated Cross Site Scripting (XSS) in ARForms <= 7.1.2 versions. | |
CVE-2026-27402 |
high | 7.1 | 0.0025 | 2026-07-02 | Unauthenticated Cross Site Scripting (XSS) in Kids Life | Children School WordPress <= 5.2 versions. | |
CVE-2026-27404 |
high | 7.1 | 0.0025 | 2026-07-02 | Unauthenticated Cross Site Scripting (XSS) in LMS <= 9.7 versions. | |
CVE-2026-27408 |
high | 7.1 | 0.0025 | 2026-07-02 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability i | |
CVE-2026-27425 |
high | 7.1 | 0.0025 | 2026-07-02 | Unauthenticated Cross Site Scripting (XSS) in Automotive Listings <= 18.6 versions. | |
CVE-2026-27426 |
high | 7.1 | 0.0025 | 2026-07-02 | Unauthenticated Cross Site Scripting (XSS) in Automotive Car Dealership Business <= 13.3.3 versions. | |
CVE-2026-27430 |
high | 7.1 | 0.0025 | 2026-07-02 | Unauthenticated Cross Site Scripting (XSS) in TheFox <= 3.9.76 versions. | |
CVE-2026-57343 |
high | 7.1 | 0.0025 | 2026-07-02 | Unauthenticated Cross Site Scripting (XSS) in Real Estate 7 <= 3.5.9 versions. | |
CVE-2026-57344 |
high | 7.1 | 0.0025 | 2026-07-02 | Unauthenticated Cross Site Scripting (XSS) in Classified Listing <= 5.4.2 versions. | |
CVE-2026-57345 |
high | 7.1 | 0.0025 | 2026-07-02 | Unauthenticated Cross Site Scripting (XSS) in Internal Links Manager <= 3.0.3 versions. | |
CVE-2026-57349 |
high | 7.1 | 0.0025 | 2026-07-02 | Unauthenticated Cross Site Scripting (XSS) in WPeMatico RSS Feed Fetcher <= 2.8.17 versions. | |
CVE-2026-57350 |
high | 7.1 | 0.0025 | 2026-07-02 | Unauthenticated Cross Site Scripting (XSS) in WP Debugging <= 2.12.2 versions. | |
CVE-2026-57351 |
high | 7.1 | 0.0025 | 2026-07-02 | Unauthenticated Cross Site Scripting (XSS) in HandL UTM Grabber <= 2.9.2 versions. | |
CVE-2026-57356 |
high | 7.1 | 0.0025 | 2026-07-02 | Unauthenticated Cross Site Scripting (XSS) in MC Woocommerce Wishlist <= 1.9.19 versions. | |
CVE-2026-57357 |
high | 7.1 | 0.0025 | 2026-07-02 | Unauthenticated Cross Site Scripting (XSS) in Search Atlas SEO <= 2.6.6 versions. | |
CVE-2026-57358 |
high | 7.1 | 0.0025 | 2026-07-02 | Unauthenticated Cross Site Scripting (XSS) in Customize My Account for WooCommerce <= 4.3.9 versions | |
CVE-2026-57360 |
high | 7.1 | 0.0025 | 2026-07-02 | Unauthenticated Cross Site Scripting (XSS) in eCommerce Product Catalog <= 3.5.4 versions. | |
CVE-2026-57361 |
high | 7.1 | 0.0025 | 2026-07-02 | Unauthenticated Cross Site Scripting (XSS) in Survey Maker <= 5.2.2.5 versions. | |
CVE-2026-57362 |
high | 7.1 | 0.0025 | 2026-07-02 | Unauthenticated Cross Site Scripting (XSS) in ChatBot <= 8.3.2 versions. | |
CVE-2026-57366 |
high | 7.1 | 0.0025 | 2026-07-02 | Unauthenticated Cross Site Scripting (XSS) in WPAdverts <= 2.3.1 versions. | |
CVE-2026-57426 |
high | 7.1 | 0.0025 | 2026-07-02 | Unauthenticated Cross Site Scripting (XSS) in Modula - PRO <= 2.10.8 versions. | |
CVE-2026-57670 |
high | 7.1 | 0.0025 | 2026-07-02 | Unauthenticated Cross Site Scripting (XSS) in Google Maps CP <= 1.2.5 versions. | |
CVE-2026-57672 |
high | 7.1 | 0.0025 | 2026-07-02 | Unauthenticated Cross Site Scripting (XSS) in wpDataTables <= 6.5.1.1 versions. | |
CVE-2026-57674 |
high | 7.1 | 0.0025 | 2026-07-02 | Unauthenticated Cross Site Scripting (XSS) in Timetics <= 1.0.58 versions. | |
CVE-2026-57675 |
high | 7.1 | 0.0025 | 2026-07-02 | Unauthenticated Cross Site Scripting (XSS) in WP Photo Album Plus <= 9.2.02.004 versions. | |
CVE-2026-57678 |
high | 7.1 | 0.0025 | 2026-07-02 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability i | |
CVE-2026-57682 |
high | 7.1 | 0.0025 | 2026-07-02 | Unauthenticated Cross Site Scripting (XSS) in Simple Link Directory <= 15.0.5 versions. | |
CVE-2026-57686 |
high | 7.1 | 0.0025 | 2026-07-02 | Unauthenticated Cross Site Scripting (XSS) in WowAddons <= 1.6.14 versions. | |
CVE-2026-41122 |
high | 7.1 | 0.0028 | 2026-07-08 | Dell PowerProtect Data Domain, versions 7.7.1.0 through 8.7, LTS2026 release version 8.6.1.0 through | |
CVE-2026-57214 |
high | 7.1 | 0.0022 | 2026-07-10 | RabbitMQ is a messaging and streaming broker. Prior to 4.2.5, the RabbitMQ management UI renders the | |
CVE-2026-57363 |
high | 7.1 | 0.0025 | 2026-07-13 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability i | |
CVE-2026-57368 |
high | 7.1 | 0.0025 | 2026-07-13 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability i | |
CVE-2026-57369 |
high | 7.1 | 0.0025 | 2026-07-13 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability i | |
CVE-2026-57376 |
high | 7.1 | 0.0025 | 2026-07-13 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability i | |
CVE-2026-57379 |
high | 7.1 | 0.0025 | 2026-07-13 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability i | |
CVE-2026-57380 |
high | 7.1 | 0.0025 | 2026-07-13 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability i | |
CVE-2026-57381 |
high | 7.1 | 0.0025 | 2026-07-13 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability i | |
CVE-2026-57382 |
high | 7.1 | 0.0025 | 2026-07-13 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability i | |
CVE-2026-57383 |
high | 7.1 | 0.0025 | 2026-07-13 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability i | |
CVE-2026-57388 |
high | 7.1 | 0.0025 | 2026-07-13 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability i | |
CVE-2026-57394 |
high | 7.1 | 0.0025 | 2026-07-13 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability i | |
CVE-2026-57396 |
high | 7.1 | 0.0025 | 2026-07-13 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability i | |
CVE-2026-57398 |
high | 7.1 | 0.0025 | 2026-07-13 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability i | |
CVE-2026-57403 |
high | 7.1 | 0.0025 | 2026-07-13 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability i | |
CVE-2026-57409 |
high | 7.1 | 0.0025 | 2026-07-13 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability i | |
CVE-2026-57411 |
high | 7.1 | 0.0025 | 2026-07-13 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability i |