Export limit exceeded: 102093 CVEs match your query. Please refine your search to export 10,000 CVEs or fewer.

Search

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Search Examples

CVEs in KEV CVEs with EPSS >= 80% Crit. Microsoft High Apache SQL Injection (CWE-89) Linux Kernel High (CVSS 3.1) Apache Struts RCE (Remote Code Execution) XSS (CWE-79) Critical (CVSS 4.0) CVEs to check

Search Results (102093 CVEs found)

Export CSV
CVE Vendors Products Updated CVSS v3.1
CVE-2026-96833 2026-09-30 7.2 High
Editor PHP Object Injection in Ultimate Addons for Contact Form 7 <= 3.5.51 versions.
CVE-2026-96832 2026-09-30 7.2 High
Shop manager PHP Object Injection in Content Egg <= 6.3.1 versions.
CVE-2026-96831 2026-09-30 8.8 High
Contributor PHP Object Injection in Themify Builder <= 7.8.1 versions.
CVE-2026-96830 2026-09-30 7.1 High
Unauthenticated Cross Site Scripting (XSS) in GiveWP <= 4.16.9 versions.
CVE-2026-96828 2026-09-30 7.6 High
Administrator SQL Injection in Category Discount Woocommerce <= 5.18 versions.
CVE-2026-96827 2026-09-30 7.6 High
Administrator SQL Injection in Admin Notices Manager <= 1.6.0 versions.
CVE-2026-96823 2026-09-30 7.5 High
Unauthenticated Arbitrary Content Deletion in Customer Reviews for WooCommerce <= 5.120.0 versions.
CVE-2026-96820 2026-09-30 7.1 High
Subscriber Cross Site Scripting (XSS) in Awesome Support <= 6.3.9 versions.
CVE-2026-96819 2026-09-30 7.1 High
Subscriber Cross Site Scripting (XSS) in oik <= 4.15.4 versions.
CVE-2026-96818 2026-09-30 7.5 High
Unauthenticated Broken Access Control in WP Express Checkout (Accept PayPal Payments) <= 2.4.9 versions.
CVE-2026-96817 2026-09-30 8.2 High
Subscriber Broken Access Control in MakeCommerce for WooCommerce <= 4.1.0 versions.
CVE-2026-96816 2026-09-30 7.1 High
Unauthenticated Cross Site Scripting (XSS) in Trusted Shops Easy Integration for WooCommerce <= 2.0.6 versions.
CVE-2026-96815 2026-09-30 7.2 High
Custom role Privilege Escalation in Vitepos <= 3.5.0 versions.
CVE-2026-96814 2026-09-30 7.1 High
Unauthenticated Cross Site Scripting (XSS) in WooCommerce Product Table Lite <= 5.6.7 versions.
CVE-2026-96352 2026-09-30 7.1 High
Unauthenticated Cross Site Scripting (XSS) in YITH WooCommerce Ajax Search <= 2.28.0 versions.
CVE-2026-96351 2026-09-30 7.1 High
Unauthenticated Cross Site Scripting (XSS) in Classified Listing <= 6.1.3 versions.
CVE-2026-96348 2026-09-30 7.5 High
Unauthenticated Broken Access Control in Bookly <= 28.2 versions.
CVE-2026-96346 2026-09-30 7.6 High
Author SQL Injection in WP ERP <= 1.17.9 versions.
CVE-2026-96345 2026-09-30 7.6 High
Administrator SQL Injection in Estatik <= 4.3.5 versions.
CVE-2026-96344 2026-09-30 7.2 High
Custom role PHP Object Injection in eCommerce Product Catalog <= 3.6.0 versions.