Search
Search Results (396760 CVEs found)
| CVE | Vendors | Products | Updated | CVSS v3.1 |
|---|---|---|---|---|
| CVE-2026-94487 | 2026-09-23 | 8.1 High | ||
| Unauthenticated Cross Site Request Forgery (CSRF) in PublishPress Capabilities <= 2.50.1 versions. | ||||
| CVE-2026-94461 | 2026-09-23 | 6.5 Medium | ||
| Contributor Cross Site Scripting (XSS) in Ditty <= 3.1.69 versions. | ||||
| CVE-2026-94457 | 2026-09-23 | 4.8 Medium | ||
| Unauthenticated Bypass Vulnerability in Captcha Code <= 3.32 versions. | ||||
| CVE-2026-94391 | 2026-09-23 | 6.5 Medium | ||
| Contributor Cross Site Scripting (XSS) in Ultimate FAQ <= 2.4.14 versions. | ||||
| CVE-2026-94179 | 2026-09-23 | 7.1 High | ||
| Unauthenticated Cross Site Scripting (XSS) in Razorpay Payment Button <= 2.4.9 versions. | ||||
| CVE-2026-94176 | 2026-09-23 | 7.1 High | ||
| Unauthenticated Cross Site Scripting (XSS) in Mang Board WP <= 2.4.1 versions. | ||||
| CVE-2026-94174 | 2026-09-23 | 7.6 High | ||
| Administrator SQL Injection in Email Log <= 2.63 versions. | ||||
| CVE-2026-94168 | 2026-09-23 | 6.5 Medium | ||
| Contributor Cross Site Scripting (XSS) in Premium Addons for Elementor <= 4.11.105 versions. | ||||
| CVE-2026-94124 | 2026-09-23 | 8.5 High | ||
| Contributor SQL Injection in WP EasyCart <= 5.9.4 versions. | ||||
| CVE-2026-94118 | 2026-09-23 | 6.5 Medium | ||
| Contributor Cross Site Scripting (XSS) in Premium Blocks – Gutenberg Blocks for WordPress <= 2.3.17 versions. | ||||
| CVE-2026-94080 | 2026-09-23 | 5.3 Medium | ||
| Unauthenticated Broken Access Control in MarketKing <= 2.1.70 versions. | ||||
| CVE-2026-94079 | 2026-09-23 | 5.3 Medium | ||
| Unauthenticated Broken Access Control in WP User Manager <= 2.9.19 versions. | ||||
| CVE-2026-93774 | 2026-09-23 | 7.1 High | ||
| Unauthenticated Cross Site Scripting (XSS) in WP Photo Album Plus <= 9.3.02.002 versions. | ||||
| CVE-2026-93773 | 2026-09-23 | 8.5 High | ||
| Contributor SQL Injection in Mollie Forms <= 2.11.0 versions. | ||||
| CVE-2026-93772 | 2026-09-23 | 6.5 Medium | ||
| Subscriber Cross Site Scripting (XSS) in wpForo Forum <= 3.1.5 versions. | ||||
| CVE-2026-93623 | 2026-09-23 | 5.3 Medium | ||
| Unauthenticated Insecure Direct Object References (IDOR) in AI Engine <= 3.7.8 versions. | ||||
| CVE-2026-93622 | 2026-09-23 | 7.1 High | ||
| Unauthenticated Cross Site Scripting (XSS) in WPS Limit Login <= 1.5.9.3 versions. | ||||
| CVE-2026-93620 | 2026-09-23 | 6.5 Medium | ||
| Unauthenticated Broken Access Control in PayPlus Payment Gateway <= 8.2.5 versions. | ||||
| CVE-2026-93529 | 2026-09-23 | 6.5 Medium | ||
| Contributor Broken Access Control in WSP MCP – AI Agents Connector <= 2.7.0 versions. | ||||
| CVE-2026-93527 | 2026-09-23 | 8.5 High | ||
| Contributor SQL Injection in Live Copy Paste for Elementor <= 1.5.10 versions. | ||||