CVE search
401,023 resultsCVE-2026-66246HIGHHCL iControl is affected by multiple security vulnerabilitiesEPSS 0.3%CVE-2026-102505MEDIUMImager versions before 1.037 for Perl overflow a heap buffer fetching float samples from a paletted image in i_gsampf_fpEPSS 0.2%CVE-2026-102504HIGHImager versions before 1.037 for Perl exit the process reading a raw image with an out-of-range raw_datachannels value in i_readraw_wiolEPSS 0.4%CVE-2026-62058MEDIUMWordPress CF7 Apps plugin <= 3.7.2 - Sensitive Data Exposure vulnerabilityEPSS 0.2%CVE-2026-62059HIGHWordPress Ultimate Member plugin <= 2.13.1 - SQL Injection vulnerabilityEPSS 0.3%CVE-2026-62060HIGHWordPress Captivate Sync plugin <= 3.3.2 - SQL Injection vulnerabilityEPSS 0.2%CVE-2026-62061MEDIUMWordPress ProfileGrid plugin <= 6.0.0.2 - Insecure Direct Object References (IDOR) vulnerabilityEPSS 0.2%CVE-2026-62063MEDIUMWordPress WpTravelly plugin <= 2.3.1 - Broken Access Control vulnerabilityEPSS 0.2%CVE-2026-102394MEDIUMWordPress Essential Addons for Elementor plugin <= 6.8.4 - Cross Site Scripting (XSS) vulnerabilityEPSS 0.1%CVE-2026-103339MEDIUMWordPress Metform plugin <= 4.3.0 - Cross Site Scripting (XSS) vulnerabilityEPSS 0.1%CVE-2026-102379HIGHWordPress BuildKit – Product Builder for WooCommerce – Custom PC Builder plugin <= 1.0.28 - SQL Injection vulnerabilityEPSS 0.2%CVE-2026-103063MEDIUMWordPress ElementsKit Elementor addons Lite plugin <= 4.0.6 - Cross Site Scripting (XSS) vulnerabilityEPSS 0.1%CVE-2026-103345MEDIUMWordPress Pie Register plugin <= 3.8.4.13 - Sensitive Data Exposure vulnerabilityEPSS 0.2%CVE-2026-103064MEDIUMWordPress ElementsKit Elementor addons Lite plugin <= 4.0.6 - Cross Site Scripting (XSS) vulnerabilityEPSS 0.1%CVE-2026-102390MEDIUMWordPress AFFI – Affiliate Marketing for WooCommerce plugin <= 1.0.9 - Broken Access Control vulnerabilityEPSS 0.2%CVE-2026-102382MEDIUMWordPress Majestic Support plugin <= 1.2.0 - Insecure Direct Object References (IDOR) vulnerabilityEPSS 0.2%CVE-2026-102381MEDIUMWordPress Majestic Support plugin <= 1.2.0 - Broken Access Control vulnerabilityEPSS 0.2%CVE-2026-103343MEDIUMWordPress FluentForm plugin <= 6.2.14 - Cross Site Scripting (XSS) vulnerabilityEPSS 0.1%CVE-2026-103341MEDIUMWordPress Unlimited Elements For Elementor (Free Widgets, Addons, Templates) plugin <= 2.0.20 - Broken Access Control vulnerabilityEPSS 0.2%CVE-2026-103340MEDIUMWordPress Site Reviews plugin <= 8.3.2 - Broken Access Control vulnerabilityEPSS 0.2%