Export limit exceeded: 381652 CVEs match your query. Please refine your search to export 10,000 CVEs or fewer.

Search

Expected end of text, found ':' (at char 29), (line:1, col:30)
Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Search Examples

CVEs in KEV CVEs with EPSS >= 80% Crit. Microsoft High Apache SQL Injection (CWE-89) Linux Kernel High (CVSS 3.1) Apache Struts RCE (Remote Code Execution) XSS (CWE-79) Critical (CVSS 4.0) CVEs to check

Search Results (381652 CVEs found)

Export CSV
CVE Vendors Products Updated CVSS v3.1
CVE-2026-32474 2 Wordpress, Wpwax 2 Wordpress, Templatiq 2026-08-21 9.9 Critical
Contributor Arbitrary File Upload in Templatiq <= 0.2.5 versions.
CVE-2026-66620 2 Derek Herman, Wordpress 2 Optiontree, Wordpress 2026-08-21 7.2 High
Editor PHP Object Injection in OptionTree <= 2.7.3 versions.
CVE-2026-66627 2 Edge22 Studios Ltd., Wordpress 2 Gp Premium, Wordpress 2026-08-21 9.9 Critical
Contributor Arbitrary File Upload in GP Premium <= 2.5.5 versions.
CVE-2026-66633 2 Wordpress, Wpmanageninja 2 Wordpress, Fluent Forms Pro Add On Pack 2026-08-21 7.1 High
Unauthenticated Cross Site Scripting (XSS) in Fluent Forms Pro Add On Pack < 6.2.12 versions.
CVE-2026-66634 2 Pantherius, Wordpress 2 Modal Survey, Wordpress 2026-08-21 4.3 Medium
Subscriber Insecure Direct Object References (IDOR) in Modal Survey <= 2.0.2.2.3 versions.
CVE-2026-66639 2 Wordpress, Wpzoom 2 Wordpress, Wpzoom Forms – Contact Form Plugin For Gutenberg 2026-08-21 6.5 Medium
Contributor Cross Site Scripting (XSS) in WPZOOM Forms – Contact Form Plugin for Gutenberg <= 2.0.4 versions.
CVE-2026-66640 2 Marcus (aka @msykes), Wordpress 2 Login With Ajax, Wordpress 2026-08-21 6.5 Medium
Contributor Cross Site Scripting (XSS) in Login With Ajax <= 4.5.1 versions.
CVE-2026-66643 2 Wordpress, Wronganswersonly 2 Wordpress, Wufoo Shortcode 2026-08-21 6.5 Medium
Contributor Cross Site Scripting (XSS) in Wufoo Shortcode <= 1.55 versions.
CVE-2026-66645 2 Wordpress, Wpdeveloper 2 Wordpress, Table Of Contents Block 2026-08-21 6.5 Medium
Contributor Cross Site Scripting (XSS) in Table Of Contents Block <= 1.5.0 versions.
CVE-2026-66646 2 Mythemeshop, Wordpress 2 Wp Tab Widget, Wordpress 2026-08-21 6.5 Medium
Contributor Cross Site Scripting (XSS) in WP Tab Widget <= 1.2.11 versions.
CVE-2026-68567 2 Wordpress, Wp Grids 2 Wordpress, Convert Pro 2026-08-21 7.1 High
Unauthenticated Cross Site Scripting (XSS) in Convert Pro <= 1.0.1 versions.
CVE-2026-73181 2 Themecomplete, Wordpress 2 Extra Product Options & Add-ons For Woocommerce, Wordpress 2026-08-21 7.5 High
Unauthenticated Arbitrary File Download in Extra Product Options & Add-Ons for WooCommerce < 7.6 versions.
CVE-2026-73338 2 Autopay, Wordpress 2 Autopay, Wordpress 2026-08-21 7.1 High
Unauthenticated Cross Site Scripting (XSS) in Autopay <= 5.0.0 versions.
CVE-2026-73342 2 Magazine3, Wordpress 2 Wp Multilang, Wordpress 2026-08-21 7.1 High
Unauthenticated Cross Site Scripting (XSS) in WP Multilang <= 2.4.31 versions.
CVE-2026-73359 2 Wordpress, Wp Legal Pages 2 Wordpress, Wp Cookie Notice For Gdpr, Ccpa & Eprivacy Consent 2026-08-21 6.5 Medium
Subscriber Cross Site Scripting (XSS) in WP Cookie Notice for GDPR, CCPA & ePrivacy Consent <= 4.3.9 versions.
CVE-2026-73375 2 Supsystic, Wordpress 2 Ultimate Maps By Supsystic, Wordpress 2026-08-21 7.1 High
Unauthenticated Cross Site Scripting (XSS) in Ultimate Maps by Supsystic < 1.5.0 versions.
CVE-2026-73376 2 Supsystic, Wordpress 2 Ultimate Maps By Supsystic, Wordpress 2026-08-21 9.8 Critical
Unauthenticated PHP Object Injection in Ultimate Maps by Supsystic < 1.5.0 versions.
CVE-2026-73377 2 Supsystic, Wordpress 2 Ultimate Maps By Supsystic, Wordpress 2026-08-21 7.5 High
Unauthenticated Broken Access Control in Ultimate Maps by Supsystic < 1.5.0 versions.
CVE-2026-73392 2 Highwarden, Wordpress 2 Super Store Finder, Wordpress 2026-08-21 9.3 Critical
Unauthenticated SQL Injection in Super Store Finder <= 7.8 versions.
CVE-2026-73397 2 Wordpress, Youzify 2 Wordpress, Youzify 2026-08-21 9.8 Critical
Unauthenticated Deserialization of untrusted data in Youzify <= 1.3.7 versions.