CVE search

401,283 results
CVE-2026-97197HIGHWordPress WordPress Backup & Migration plugin <= 1.6.0 - Broken Access Control vulnerabilityEPSS 0.3%CVE-2026-97079MEDIUMWordPress Webba Booking plugin <= 6.5.0 - Insecure Direct Object References (IDOR) vulnerabilityEPSS 0.3%CVE-2026-97078MEDIUMWordPress Client Invoicing by Sprout Invoices plugin <= 20.8.17 - Insecure Direct Object References (IDOR) vulnerabilityEPSS 0.2%CVE-2026-97077HIGHWordPress Ad Inserter plugin <= 2.8.18 - Cross Site Scripting (XSS) vulnerabilityEPSS 0.2%CVE-2026-97074MEDIUMWordPress Newsletters, Email Marketing, SMS and Popups by Omnisend plugin <= 1.9.0 - Insecure Direct Object References (IDOR) vulnerabilityEPSS 0.2%CVE-2026-97067MEDIUMWordPress EWWW Image Optimizer plugin <= 8.7.7 - Cross Site Scripting (XSS) vulnerabilityEPSS 0.2%CVE-2026-97066MEDIUMWordPress GiveWP plugin <= 4.16.9 - Insecure Direct Object References (IDOR) vulnerabilityEPSS 0.2%CVE-2026-97065HIGHWordPress Happyforms plugin <= 1.26.15 - Cross Site Scripting (XSS) vulnerabilityEPSS 0.2%CVE-2026-96838HIGHWordPress Blacklist Manager &#8211; WooCommerce Anti-Fraud, Blacklist &amp; Checkout Verification plugin <= 2.3.1 - Cross Site Request Forgery (CSRF) vulnerabilityEPSS 0.1%CVE-2026-96837HIGHWordPress CartFlows plugin <= 3.2.0 - Remote Code Execution (RCE) vulnerabilityEPSS 0.5%CVE-2026-96836HIGHWordPress Parsi Date plugin <= 6.3 - Cross Site Scripting (XSS) vulnerabilityEPSS 0.2%CVE-2026-96835MEDIUMWordPress King Addons for Elementor plugin <= 51.1.85 - Cross Site Scripting (XSS) vulnerabilityEPSS 0.2%CVE-2026-96834MEDIUMWordPress GiveWP plugin <= 4.16.9 - Sensitive Data Exposure vulnerabilityEPSS 0.3%CVE-2026-96833HIGHWordPress Ultimate Addons for Contact Form 7 plugin <= 3.5.51 - PHP Object Injection vulnerabilityEPSS 0.4%CVE-2026-96832HIGHWordPress Content Egg plugin <= 6.3.1 - PHP Object Injection vulnerabilityEPSS 0.4%CVE-2026-96831HIGHWordPress Themify Builder plugin <= 7.8.1 - PHP Object Injection vulnerabilityEPSS 0.4%CVE-2026-96830HIGHWordPress GiveWP plugin <= 4.16.9 - Cross Site Scripting (XSS) vulnerabilityEPSS 0.2%CVE-2026-96829MEDIUMWordPress The Plus Addons for Elementor Page Builder Lite plugin <= 6.5.1 - Cross Site Scripting (XSS) vulnerabilityEPSS 0.2%CVE-2026-96828HIGHWordPress Category Discount Woocommerce plugin <= 5.18 - SQL Injection vulnerabilityEPSS 0.3%CVE-2026-96827HIGHWordPress Admin Notices Manager plugin <= 1.6.0 - SQL Injection vulnerabilityEPSS 0.3%