CVE search
401,309 resultsCVE-2026-97240HIGHWordPress StifLi Backup Tools plugin <= 2.2.7 - Sensitive Data Exposure vulnerabilityEPSS 0.3%CVE-2026-97239MEDIUMWordPress MCP Content Manager Lite plugin <= 1.1.0 - Broken Access Control vulnerabilityEPSS 0.3%CVE-2026-97238MEDIUMWordPress JetEngine plugin <= 3.8.14.3 - Cross Site Scripting (XSS) vulnerabilityEPSS 0.2%CVE-2026-97237HIGHWordPress JetEngine plugin <= 3.8.14.3 - Cross Site Scripting (XSS) vulnerabilityEPSS 0.2%CVE-2026-97236MEDIUMWordPress ThemeREX Addons plugin < 2.45.0 - Cross Site Scripting (XSS) vulnerabilityEPSS 0.2%CVE-2026-97235HIGHWordPress ThemeREX Addons plugin < 2.45.0 - Cross Site Scripting (XSS) vulnerabilityEPSS 0.2%CVE-2026-97197HIGHWordPress WordPress Backup & Migration plugin <= 1.6.0 - Broken Access Control vulnerabilityEPSS 0.3%CVE-2026-97079MEDIUMWordPress Webba Booking plugin <= 6.5.0 - Insecure Direct Object References (IDOR) vulnerabilityEPSS 0.3%CVE-2026-97078MEDIUMWordPress Client Invoicing by Sprout Invoices plugin <= 20.8.17 - Insecure Direct Object References (IDOR) vulnerabilityEPSS 0.2%CVE-2026-97077HIGHWordPress Ad Inserter plugin <= 2.8.18 - Cross Site Scripting (XSS) vulnerabilityEPSS 0.2%CVE-2026-97074MEDIUMWordPress Newsletters, Email Marketing, SMS and Popups by Omnisend plugin <= 1.9.0 - Insecure Direct Object References (IDOR) vulnerabilityEPSS 0.2%CVE-2026-97067MEDIUMWordPress EWWW Image Optimizer plugin <= 8.7.7 - Cross Site Scripting (XSS) vulnerabilityEPSS 0.2%CVE-2026-97066MEDIUMWordPress GiveWP plugin <= 4.16.9 - Insecure Direct Object References (IDOR) vulnerabilityEPSS 0.2%CVE-2026-97065HIGHWordPress Happyforms plugin <= 1.26.15 - Cross Site Scripting (XSS) vulnerabilityEPSS 0.2%CVE-2026-96838HIGHWordPress Blacklist Manager – WooCommerce Anti-Fraud, Blacklist & Checkout Verification plugin <= 2.3.1 - Cross Site Request Forgery (CSRF) vulnerabilityEPSS 0.1%CVE-2026-96837HIGHWordPress CartFlows plugin <= 3.2.0 - Remote Code Execution (RCE) vulnerabilityEPSS 0.5%CVE-2026-96836HIGHWordPress Parsi Date plugin <= 6.3 - Cross Site Scripting (XSS) vulnerabilityEPSS 0.2%CVE-2026-96835MEDIUMWordPress King Addons for Elementor plugin <= 51.1.85 - Cross Site Scripting (XSS) vulnerabilityEPSS 0.2%CVE-2026-96834MEDIUMWordPress GiveWP plugin <= 4.16.9 - Sensitive Data Exposure vulnerabilityEPSS 0.3%CVE-2026-96833HIGHWordPress Ultimate Addons for Contact Form 7 plugin <= 3.5.51 - PHP Object Injection vulnerabilityEPSS 0.4%