CVE search

401,260 results
CVE-2026-97253HIGHWordPress LayerSlider plugin <= 8.4.0 - Cross Site Scripting (XSS) vulnerabilityEPSS 0.1%CVE-2026-97250HIGHWordPress Geo Mashup plugin <= 1.13.21 - Cross Site Scripting (XSS) vulnerabilityEPSS 0.1%CVE-2026-97249MEDIUMWordPress Paid Member Subscriptions plugin <= 3.0.9 - Bypass Vulnerability vulnerabilityEPSS 0.2%CVE-2026-97248CRITICALWordPress Booking Activities plugin <= 1.18.7.1 - PHP Object Injection vulnerabilityEPSS 0.4%CVE-2026-97247MEDIUMWordPress Blocksy Companion plugin <= 2.1.55 - Broken Access Control vulnerabilityEPSS 0.2%CVE-2026-97246MEDIUMWordPress ShortPixel Image Optimizer plugin <= 6.5.5 - PHP Object Injection vulnerabilityEPSS 0.2%CVE-2026-97245HIGHWordPress SureCart plugin <= 4.7.2 - Privilege Escalation vulnerabilityEPSS 0.3%CVE-2026-97244HIGHWordPress Creator LMS plugin <= 1.2.19 - Path Traversal vulnerabilityEPSS 0.3%CVE-2026-97243MEDIUMWordPress AllAble Connector plugin <= 0.13.4 - Broken Access Control vulnerabilityEPSS 0.2%CVE-2026-97242MEDIUMWordPress WEBO MCP plugin <= 3.0.18 - Arbitrary File Deletion vulnerabilityEPSS 0.4%CVE-2026-97241HIGHWordPress BackupEase plugin <= 2.2.2 - Sensitive Data Exposure vulnerabilityEPSS 0.3%CVE-2026-97240HIGHWordPress StifLi Backup Tools plugin <= 2.2.7 - Sensitive Data Exposure vulnerabilityEPSS 0.3%CVE-2026-97239MEDIUMWordPress MCP Content Manager Lite plugin <= 1.1.0 - Broken Access Control vulnerabilityEPSS 0.3%CVE-2026-97238MEDIUMWordPress JetEngine plugin <= 3.8.14.3 - Cross Site Scripting (XSS) vulnerabilityEPSS 0.2%CVE-2026-97237HIGHWordPress JetEngine plugin <= 3.8.14.3 - Cross Site Scripting (XSS) vulnerabilityEPSS 0.2%CVE-2026-97236MEDIUMWordPress ThemeREX Addons plugin < 2.45.0 - Cross Site Scripting (XSS) vulnerabilityEPSS 0.2%CVE-2026-97235HIGHWordPress ThemeREX Addons plugin < 2.45.0 - Cross Site Scripting (XSS) vulnerabilityEPSS 0.2%CVE-2026-97197HIGHWordPress WordPress Backup & Migration plugin <= 1.6.0 - Broken Access Control vulnerabilityEPSS 0.3%CVE-2026-97079MEDIUMWordPress Webba Booking plugin <= 6.5.0 - Insecure Direct Object References (IDOR) vulnerabilityEPSS 0.3%CVE-2026-97078MEDIUMWordPress Client Invoicing by Sprout Invoices plugin <= 20.8.17 - Insecure Direct Object References (IDOR) vulnerabilityEPSS 0.2%