Total CVEs

150,882

Critical Severity

5,031

High Severity

17,660

Last 7 Days

2,090
Quick preset (or use dates below)
Clear Filters
📅 Showing Year: 2026 (January 1 - December 31, 2026) View All Years →
Showing 2,241 - 2,260 of 47,287 CVEs
CVE-2026-65538 MEDIUM - 5.9

Author Cross Site Scripting (XSS) in Machete <= 5.2 versions.

Vendor: Nilo Velez
Product: Machete
Published: Jul 23, 2026
Source: NVD
CVE-2026-65537 MEDIUM - 4.3

Subscriber Broken Access Control in Cyr to Lat reloaded – transliteration of links and file names <= 1.3.3 versions.

Vendor: Themeisle
Product: Cyr to Lat reloaded – transliteration of links and file names
Published: Jul 23, 2026
Source: NVD
CVE-2026-65536 MEDIUM - 6.5

Unauthenticated Cross Site Request Forgery (CSRF) in افزونه حمل و نقل ووکامرس (پست پیشتاز و سفارشی، پیک موتوری) <= 4.4.5 versions.

Vendor: Mahdi Yousefi
Product: افزونه حمل و نقل ووکامرس (پست پیشتاز و سفارشی، پیک موتوری)
Published: Jul 23, 2026
Source: NVD
CVE-2026-65535 MEDIUM - 4.3

Contributor Sensitive Data Exposure in TinyMCE Templates <= 4.8.1 versions.

Vendor: Takayuki Miyauchi
Product: TinyMCE Templates
Published: Jul 23, 2026
Source: NVD
CVE-2026-65534 MEDIUM - 5.9

Author Cross Site Scripting (XSS) in Custom links in Elementor Image Carousel <= 1.1.1 versions.

Vendor: Charlie Etienne
Product: Custom links in Elementor Image Carousel
Published: Jul 23, 2026
Source: NVD
CVE-2026-65533 MEDIUM - 6.5

Contributor Cross Site Scripting (XSS) in Smart SEO Tool <= 4.1.2 versions.

Vendor: wbolt.com
Product: Smart SEO Tool
Published: Jul 23, 2026
Source: NVD
CVE-2026-65532 HIGH - 7.6

Shop manager SQL Injection in Persian Woocommerce SMS <= 7.2.2 versions.

Vendor: PersianScript
Product: Persian Woocommerce SMS
Published: Jul 23, 2026
Source: NVD
CVE-2026-65531 MEDIUM - 4.8

Unauthenticated Broken Access Control in Qubely <= 1.8.14 versions.

Vendor: Themeum
Product: Qubely
Published: Jul 23, 2026
Source: NVD
CVE-2026-65530 MEDIUM - 4.3

Subscriber Broken Access Control in TemplateSpare <= 4.2.2 versions.

Vendor: Templatespare
Product: TemplateSpare
Published: Jul 23, 2026
Source: NVD
CVE-2026-65529 MEDIUM - 5.3

Unauthenticated Broken Access Control in Graphina <= 3.1.12 versions.

Vendor: Iqonic Design
Product: Graphina
Published: Jul 23, 2026
Source: NVD
CVE-2026-65528 MEDIUM - 6.5

Contributor Cross Site Scripting (XSS) in BSK PDF Manager <= 3.8 versions.

Vendor: bannersky
Product: BSK PDF Manager
Published: Jul 23, 2026
Source: NVD
CVE-2026-65527 MEDIUM - 6.5

Contributor Cross Site Scripting (XSS) in LIQUID SPEECH BALLOON <= 1.2.5 versions.

Vendor: lqd
Product: LIQUID SPEECH BALLOON
Published: Jul 23, 2026
Source: NVD
CVE-2026-65526 HIGH - 8.5

Contributor SQL Injection in Visualizer <= 4.0.6 versions.

Vendor: Themeisle
Product: Visualizer
Published: Jul 23, 2026
Source: NVD
CVE-2026-65525 MEDIUM - 5.3

Unauthenticated Broken Access Control in Civi Framework <= 2.2.0 versions.

Vendor: uxper
Product: Civi Framework
Published: Jul 23, 2026
Source: NVD
CVE-2026-65524 MEDIUM - 4.3

Contributor Broken Access Control in Avada Custom Branding <= 1.2 versions.

Vendor: ThemeFusion
Product: Avada Custom Branding
Published: Jul 23, 2026
Source: NVD
CVE-2026-65522 MEDIUM - 6.5

Contributor Cross Site Scripting (XSS) in Manual - Documentation, Knowledge Base & Education WordPress Theme <= 7.5.4 versions.

Vendor: pixelacehq
Product: Manual - Documentation, Knowledge Base & Education WordPress Theme
Published: Jul 23, 2026
Source: NVD
CVE-2026-65521 MEDIUM - 5.3

Unauthenticated Sensitive Data Exposure in WP Social Ninja <= 4.3.0 versions.

Vendor: Mahmudul Hasan Arif
Product: WP Social Ninja
Published: Jul 23, 2026
Source: NVD
CVE-2026-65519 MEDIUM - 6.5

Author Cross Site Scripting (XSS) in Photo Gallery <= 2.7.7.29 versions.

Vendor: gt3themes
Product: Photo Gallery
Published: Jul 23, 2026
Source: NVD
CVE-2026-65518 MEDIUM - 6.5

Contributor Cross Site Scripting (XSS) in Accept Donations with PayPal & Stripe <= 1.5.5 versions.

Vendor: Scott Paterson
Product: Accept Donations with PayPal & Stripe
Published: Jul 23, 2026
Source: NVD
CVE-2026-65516 HIGH - 7.2

Unauthenticated Server Side Request Forgery (SSRF) in PeproDev Ultimate Invoice <= 2.2.6 versions.

Vendor: Pepro Dev. Group
Product: PeproDev Ultimate Invoice
Published: Jul 23, 2026
Source: NVD