CVE search

401,357 results
CVE-2026-97293HIGHWordPress Media LIbrary Assistant plugin <= 3.41 - SQL Injection vulnerabilityEPSS 0.2%CVE-2026-97292MEDIUMWordPress YITH WooCommerce Tab Manager plugin <= 2.15.0 - Cross Site Scripting (XSS) vulnerabilityEPSS 0.1%CVE-2026-97289HIGHWordPress Quiz And Survey Master plugin <= 11.2.6 - Cross Site Scripting (XSS) vulnerabilityEPSS 0.1%CVE-2026-97288MEDIUMWordPress OAuth Server plugin <= 4.5.1 - Cross Site Scripting (XSS) vulnerabilityEPSS 0.1%CVE-2026-97287HIGHWordPress Event Tickets plugin <= 5.29.5 - SQL Injection vulnerabilityEPSS 0.2%CVE-2026-97286MEDIUMWordPress Strong Testimonials plugin <= 3.3.11 - Cross Site Scripting (XSS) vulnerabilityEPSS 0.2%CVE-2026-97285MEDIUMWordPress The Events Calendar plugin <= 6.17.5 - Broken Access Control vulnerabilityEPSS 0.2%CVE-2026-97282MEDIUMWordPress Review Schema plugin <= 3.1.0 - Insecure Direct Object References (IDOR) vulnerabilityEPSS 0.2%CVE-2026-97279MEDIUMWordPress Polylang plugin <= 3.8.9 - Cross Site Scripting (XSS) vulnerabilityEPSS 0.2%CVE-2026-97274CRITICALWordPress OAuth Single Sign On – SSO (OAuth Client) plugin <= 7.1.2 - Bypass vulnerability vulnerabilityEPSS 0.3%CVE-2026-97272HIGHWordPress Premmerce Permalink Manager for WooCommerce plugin <= 2.3.13 - Cross Site Scripting (XSS) vulnerabilityEPSS 0.1%CVE-2026-97271HIGHWordPress WPFunnels plugin <= 3.13.1 - Cross Site Scripting (XSS) vulnerabilityEPSS 0.1%CVE-2026-97270MEDIUMWordPress CMB2 plugin <= 2.13.0 - Cross Site Scripting (XSS) vulnerabilityEPSS 0.2%CVE-2026-97267MEDIUMWordPress Prevent files / folders access plugin <= 2.6.7 - Broken Access Control vulnerabilityEPSS 0.2%CVE-2026-97266MEDIUMWordPress Virtue/Ascend/Pinnacle Toolkit plugin <= 4.9.12.1 - Cross Site Scripting (XSS) vulnerabilityEPSS 0.1%CVE-2026-97262MEDIUMWordPress Visual Composer Website Builder plugin <= 45.16.2 - Cross Site Scripting (XSS) vulnerabilityEPSS 0.1%CVE-2026-97261MEDIUMWordPress Notivo plugin <= 1.4.2 - Sensitive Data Exposure vulnerabilityEPSS 0.2%CVE-2026-97253HIGHWordPress LayerSlider plugin <= 8.4.0 - Cross Site Scripting (XSS) vulnerabilityEPSS 0.1%CVE-2026-97250HIGHWordPress Geo Mashup plugin <= 1.13.21 - Cross Site Scripting (XSS) vulnerabilityEPSS 0.1%CVE-2026-97249MEDIUMWordPress Paid Member Subscriptions plugin <= 3.0.9 - Bypass Vulnerability vulnerabilityEPSS 0.2%