Export limit exceeded: 402652 CVEs match your query. Please refine your search to export 10,000 CVEs or fewer.

Export limit exceeded: 402652 CVEs match your query. Please refine your search to export 10,000 CVEs or fewer.

Search

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Search Examples

CVEs in KEV CVEs with EPSS >= 80% Crit. Microsoft High Apache SQL Injection (CWE-89) Linux Kernel High (CVSS 3.1) Apache Struts RCE (Remote Code Execution) XSS (CWE-79) Critical (CVSS 4.0) CVEs to check

Search Results (102521 CVEs found)

Export CSV
CVE Vendors Products Updated CVSS v3.1
CVE-2026-97237 2026-09-30 7.1 High
Unauthenticated Cross Site Scripting (XSS) in JetEngine <= 3.8.14.3 versions.
CVE-2026-97235 2026-09-30 7.1 High
Unauthenticated Cross Site Scripting (XSS) in ThemeREX Addons < 2.45.0 versions.
CVE-2026-97197 2026-09-30 7.5 High
Unauthenticated Broken Access Control in WordPress Backup & Migration <= 1.6.0 versions.
CVE-2026-97077 2026-09-30 7.1 High
Unauthenticated Cross Site Scripting (XSS) in Ad Inserter <= 2.8.18 versions.
CVE-2026-97065 2026-09-30 7.1 High
Unauthenticated Cross Site Scripting (XSS) in Happyforms <= 1.26.15 versions.
CVE-2026-96838 2026-09-30 8.8 High
Unauthenticated Cross Site Request Forgery (CSRF) in Blacklist Manager &#8211; WooCommerce Anti-Fraud, Blacklist &amp; Checkout Verification <= 2.3.1 versions.
CVE-2026-96837 2026-09-30 8.8 High
Contributor Remote Code Execution (RCE) in CartFlows <= 3.2.0 versions.
CVE-2026-96836 2026-09-30 7.1 High
Unauthenticated Cross Site Scripting (XSS) in Parsi Date <= 6.3 versions.
CVE-2026-96833 2026-09-30 7.2 High
Editor PHP Object Injection in Ultimate Addons for Contact Form 7 <= 3.5.51 versions.
CVE-2026-96832 2026-09-30 7.2 High
Shop manager PHP Object Injection in Content Egg <= 6.3.1 versions.
CVE-2026-96831 2026-09-30 8.8 High
Contributor PHP Object Injection in Themify Builder <= 7.8.1 versions.
CVE-2026-96830 2026-09-30 7.1 High
Unauthenticated Cross Site Scripting (XSS) in GiveWP <= 4.16.9 versions.
CVE-2026-96828 2026-09-30 7.6 High
Administrator SQL Injection in Category Discount Woocommerce <= 5.18 versions.
CVE-2026-96827 2026-09-30 7.6 High
Administrator SQL Injection in Admin Notices Manager <= 1.6.0 versions.
CVE-2026-96823 2026-09-30 7.5 High
Unauthenticated Arbitrary Content Deletion in Customer Reviews for WooCommerce <= 5.120.0 versions.
CVE-2026-96820 2026-09-30 7.1 High
Subscriber Cross Site Scripting (XSS) in Awesome Support <= 6.3.9 versions.
CVE-2026-96819 2026-09-30 7.1 High
Subscriber Cross Site Scripting (XSS) in oik <= 4.15.4 versions.
CVE-2026-96818 2026-09-30 7.5 High
Unauthenticated Broken Access Control in WP Express Checkout (Accept PayPal Payments) <= 2.4.9 versions.
CVE-2026-96817 2026-09-30 8.2 High
Subscriber Broken Access Control in MakeCommerce for WooCommerce <= 4.1.0 versions.
CVE-2026-96816 2026-09-30 7.1 High
Unauthenticated Cross Site Scripting (XSS) in Trusted Shops Easy Integration for WooCommerce <= 2.0.6 versions.