Export limit exceeded: 16392 CVEs match your query. Please refine your search to export 10,000 CVEs or fewer.

Search

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Search Examples

CVEs in KEV CVEs with EPSS >= 80% Crit. Microsoft High Apache SQL Injection (CWE-89) Linux Kernel High (CVSS 3.1) Apache Struts RCE (Remote Code Execution) XSS (CWE-79) Critical (CVSS 4.0) CVEs to check

Search Results (16392 CVEs found)

Export CSV
CVE Vendors Products Updated CVSS v3.1
CVE-2026-94118 2 Leap13, Wordpress 2 Premium Blocks – Gutenberg Blocks For Wordpress, Wordpress 2026-09-24 6.5 Medium
Contributor Cross Site Scripting (XSS) in Premium Blocks – Gutenberg Blocks for WordPress <= 2.3.17 versions.
CVE-2026-94174 2 Webfactory, Wordpress 2 Email Log, Wordpress 2026-09-24 7.6 High
Administrator SQL Injection in Email Log <= 2.63 versions.
CVE-2026-94457 2 Webfactory, Wordpress 2 Captcha Code, Wordpress 2026-09-24 4.8 Medium
Unauthenticated Bypass Vulnerability in Captcha Code <= 3.32 versions.
CVE-2026-94500 2 Roxnor, Wordpress 2 Elementskit Elementor Addons Lite, Wordpress 2026-09-24 6.5 Medium
Contributor Cross Site Scripting (XSS) in ElementsKit Elementor addons Lite <= 4.0.5 versions.
CVE-2026-95593 2 Ben Roberts, Wordpress 2 Ultimeter, Wordpress 2026-09-24 7.6 High
Editor SQL Injection in Ultimeter <= 3.0.8 versions.
CVE-2026-95603 2 Victor Rodriguez, Wordpress 2 Reycob Product Import Export, Wordpress 2026-09-24 7.2 High
Shop manager PHP Object Injection in Reycob Product Import Export <= 2.3.0 versions.
CVE-2026-94176 2 Kitae-park, Wordpress 2 Mang Board Wp, Wordpress 2026-09-24 7.1 High
Unauthenticated Cross Site Scripting (XSS) in Mang Board WP <= 2.4.1 versions.
CVE-2026-94487 2 Publishpress, Wordpress 2 Capabilities, Wordpress 2026-09-24 8.1 High
Unauthenticated Cross Site Request Forgery (CSRF) in PublishPress Capabilities <= 2.50.1 versions.
CVE-2026-93623 2 Jordy Meow, Wordpress 2 Ai-engine, Wordpress 2026-09-24 5.3 Medium
Unauthenticated Insecure Direct Object References (IDOR) in AI Engine <= 3.7.8 versions.
CVE-2026-93774 2 Jacob N. Breetvelt, Wordpress 2 Wp Photo Album Plus, Wordpress 2026-09-24 7.1 High
Unauthenticated Cross Site Scripting (XSS) in WP Photo Album Plus <= 9.3.02.002 versions.
CVE-2026-94391 2 Rustaurius, Wordpress 2 Ultimate Faq, Wordpress 2026-09-24 6.5 Medium
Contributor Cross Site Scripting (XSS) in Ultimate FAQ <= 2.4.14 versions.
CVE-2026-93527 2 Bdthemes, Wordpress 2 Live Copy Paste For Elementor, Wordpress 2026-09-23 8.5 High
Contributor SQL Injection in Live Copy Paste for Elementor <= 1.5.10 versions.
CVE-2026-94179 2 Razorpay, Wordpress 2 Razorpay Payment Button, Wordpress 2026-09-23 7.1 High
Unauthenticated Cross Site Scripting (XSS) in Razorpay Payment Button <= 2.4.9 versions.
CVE-2026-94461 2 Metaphorcreations, Wordpress 2 Ditty, Wordpress 2026-09-23 6.5 Medium
Contributor Cross Site Scripting (XSS) in Ditty <= 3.1.69 versions.
CVE-2026-94680 2 Radiustheme, Wordpress 2 The Post Grid, Wordpress 2026-09-23 6.5 Medium
Contributor Cross Site Scripting (XSS) in The Post Grid <= 7.9.5 versions.
CVE-2026-94684 2 Oceanwp, Wordpress 2 Ocean Extra, Wordpress 2026-09-23 6.5 Medium
Contributor Cross Site Scripting (XSS) in Ocean Extra <= 2.6.1 versions.
CVE-2026-94498 2 Appmysite, Wordpress 2 Appmysite, Wordpress 2026-09-23 6.5 Medium
Unauthenticated Broken Access Control in AppMySite <= 3.15.4 versions.
CVE-2026-94671 2 Radiustheme, Wordpress 2 The Post Grid, Wordpress 2026-09-23 6.5 Medium
Contributor Cross Site Scripting (XSS) in The Post Grid <= 7.9.5 versions.
CVE-2026-94679 2 Wordpress, Wpmanageninja 2 Wordpress, Fluent Support 2026-09-23 5.4 Medium
Subscriber Broken Access Control in Fluent Support <= 2.3.2 versions.
CVE-2026-94682 2 Secondlinethemes, Wordpress 2 Podcast Importer Secondline, Wordpress 2026-09-23 6.5 Medium
Contributor Cross Site Scripting (XSS) in Podcast Importer SecondLine <= 1.5.6 versions.