CVE search
401,023 resultsCVE-2026-97273HIGHWordPress Premmerce Wishlist for WooCommerce plugin <= 1.1.13 - Cross Site Scripting (XSS) vulnerabilityEPSS 0.2%CVE-2026-97269MEDIUMWordPress WPFunnels plugin <= 3.13.1 - Insecure Direct Object References (IDOR) vulnerabilityEPSS 0.2%CVE-2026-97268HIGHWordPress Premmerce Wishlist for WooCommerce plugin <= 1.1.13 - Cross Site Scripting (XSS) vulnerabilityEPSS 0.2%CVE-2026-97260HIGHWordPress MaxGalleria plugin <= 6.5.3 - Cross Site Scripting (XSS) vulnerabilityEPSS 0.2%CVE-2026-97258MEDIUMWordPress Aruba Migration Tool plugin <= 1.0.4 - Broken Access Control vulnerabilityEPSS 0.3%CVE-2026-97251MEDIUMWordPress Bus Ticket Booking with Seat Reservation plugin <= 5.9.3 - Insecure Direct Object References (IDOR) vulnerabilityEPSS 0.2%CVE-2026-95588HIGHWordPress AcyMailing SMTP Newsletter plugin <= 11.0.5 - Arbitrary File Deletion vulnerabilityEPSS 0.3%CVE-2026-94390HIGHWordPress Hide Shipping Method For WooCommerce plugin <= 1.5.4 - PHP Object Injection vulnerabilityEPSS 0.4%CVE-2026-62073HIGHWordPress WP Full Stripe Free plugin <= 8.5.6 - Broken Access Control vulnerabilityEPSS 0.2%CVE-2026-62071CRITICALWordPress WordPress File Upload plugin <= 5.1.10 - SQL Injection vulnerabilityEPSS 0.2%CVE-2026-103752CRITICALWordPress Authorizer plugin <= 3.15.3 - Privilege Escalation vulnerabilityEPSS 0.3%CVE-2026-103687MEDIUMrhukster dom-sanitizer SVG Sanitization DOMSanitizer.php url incomplete blacklistEPSS 0.5%CVE-2024-58388HIGHSharp Multifunction Printers Local File Inclusion via installed_emanual_down.htmlEPSS 0.8%CVE-2026-79900MEDIUMHeap overflow in KSL checksum initializationEPSS 0.2%CVE-2026-79901CRITICALPredictable Active Directory service-account passwords in BoKS ManagerEPSS 0.3%CVE-2026-103686MEDIUMrhukster dom-sanitizer URL Validation DOMSanitizer.php isDangerousUrl cross site scriptingEPSS 0.4%CVE-2026-66253LOWHCL iControl is affected by a Session Timeout vulnerabilityEPSS 0.1%CVE-2026-66249LOWHCL iControl is affected by a Missing Secure Attribute vulnerabilityEPSS 0.1%CVE-2026-66248LOWHCL iControl is affected by an Improper Error Handling vulnerabilityEPSS 0.2%CVE-2026-66247MEDIUMiControl is affected by an insecure Cross-Origin Resource Sharing (CORS) policy vulnerability, which could allow a malicious website to execEPSS 0.2%