Export limit exceeded: 16305 CVEs match your query. Please refine your search to export 10,000 CVEs or fewer.

Search

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Search Examples

CVEs in KEV CVEs with EPSS >= 80% Crit. Microsoft High Apache SQL Injection (CWE-89) Linux Kernel High (CVSS 3.1) Apache Struts RCE (Remote Code Execution) XSS (CWE-79) Critical (CVSS 4.0) CVEs to check

Search Results (16305 CVEs found)

Export CSV
CVE Vendors Products Updated CVSS v3.1
CVE-2026-94500 2 Roxnor, Wordpress 2 Elementskit Elementor Addons Lite, Wordpress 2026-09-24 6.5 Medium
Contributor Cross Site Scripting (XSS) in ElementsKit Elementor addons Lite <= 4.0.5 versions.
CVE-2026-95593 2 Ben Roberts, Wordpress 2 Ultimeter, Wordpress 2026-09-24 7.6 High
Editor SQL Injection in Ultimeter <= 3.0.8 versions.
CVE-2026-95603 2 Victor Rodriguez, Wordpress 2 Reycob Product Import Export, Wordpress 2026-09-24 7.2 High
Shop manager PHP Object Injection in Reycob Product Import Export <= 2.3.0 versions.
CVE-2026-94176 2 Kitae-park, Wordpress 2 Mang Board Wp, Wordpress 2026-09-24 7.1 High
Unauthenticated Cross Site Scripting (XSS) in Mang Board WP <= 2.4.1 versions.
CVE-2026-94487 2 Publishpress, Wordpress 2 Capabilities, Wordpress 2026-09-24 8.1 High
Unauthenticated Cross Site Request Forgery (CSRF) in PublishPress Capabilities <= 2.50.1 versions.
CVE-2026-93623 2 Jordy Meow, Wordpress 2 Ai-engine, Wordpress 2026-09-24 5.3 Medium
Unauthenticated Insecure Direct Object References (IDOR) in AI Engine <= 3.7.8 versions.
CVE-2026-93774 2 Jacob N. Breetvelt, Wordpress 2 Wp Photo Album Plus, Wordpress 2026-09-24 7.1 High
Unauthenticated Cross Site Scripting (XSS) in WP Photo Album Plus <= 9.3.02.002 versions.
CVE-2026-94391 2 Rustaurius, Wordpress 2 Ultimate Faq, Wordpress 2026-09-24 6.5 Medium
Contributor Cross Site Scripting (XSS) in Ultimate FAQ <= 2.4.14 versions.
CVE-2026-93527 2 Bdthemes, Wordpress 2 Live Copy Paste For Elementor, Wordpress 2026-09-23 8.5 High
Contributor SQL Injection in Live Copy Paste for Elementor <= 1.5.10 versions.
CVE-2026-94179 2 Razorpay, Wordpress 2 Razorpay Payment Button, Wordpress 2026-09-23 7.1 High
Unauthenticated Cross Site Scripting (XSS) in Razorpay Payment Button <= 2.4.9 versions.
CVE-2026-94461 2 Metaphorcreations, Wordpress 2 Ditty, Wordpress 2026-09-23 6.5 Medium
Contributor Cross Site Scripting (XSS) in Ditty <= 3.1.69 versions.
CVE-2026-94680 2 Radiustheme, Wordpress 2 The Post Grid, Wordpress 2026-09-23 6.5 Medium
Contributor Cross Site Scripting (XSS) in The Post Grid <= 7.9.5 versions.
CVE-2026-94498 2 Appmysite, Wordpress 2 Appmysite, Wordpress 2026-09-23 6.5 Medium
Unauthenticated Broken Access Control in AppMySite <= 3.15.4 versions.
CVE-2026-94671 2 Radiustheme, Wordpress 2 The Post Grid, Wordpress 2026-09-23 6.5 Medium
Contributor Cross Site Scripting (XSS) in The Post Grid <= 7.9.5 versions.
CVE-2026-94679 2 Wordpress, Wpmanageninja 2 Wordpress, Fluent Support 2026-09-23 5.4 Medium
Subscriber Broken Access Control in Fluent Support <= 2.3.2 versions.
CVE-2026-94682 2 Secondlinethemes, Wordpress 2 Podcast Importer Secondline, Wordpress 2026-09-23 6.5 Medium
Contributor Cross Site Scripting (XSS) in Podcast Importer SecondLine <= 1.5.6 versions.
CVE-2026-95513 2 Vcita, Wordpress 2 Online Booking & Scheduling Calendar For Wordpress By Vcita, Wordpress 2026-09-23 7.5 High
Unauthenticated Broken Access Control in Online Booking & Scheduling Calendar for WordPress by vcita <= 4.6.0 versions.
CVE-2026-95514 2 Netgsm, Wordpress 2 Netgsm, Wordpress 2026-09-23 5.3 Medium
Unauthenticated Bypass Vulnerability in Netgsm <= 2.10.0 versions.
CVE-2026-95525 2 Wedevs, Wordpress 2 Wp User Frontend, Wordpress 2026-09-23 6.5 Medium
Subscriber Arbitrary File Deletion in WP User Frontend <= 4.3.11 versions.
CVE-2026-94080 2 Webwizards, Wordpress 2 Marketking, Wordpress 2026-09-23 5.3 Medium
Unauthenticated Broken Access Control in MarketKing <= 2.1.70 versions.