Total CVEs

143,818

Critical Severity

4,094

High Severity

14,786

Last 7 Days

1,526
Quick preset (or use dates below)
Clear Filters
📅 Showing Year: 2026 (January 1 - December 31, 2026) View All Years →
Showing 2,081 - 2,100 of 40,223 CVEs
CVE-2026-57355 MEDIUM - 6.5

Subscriber Broken Access Control in Classified Listing <= 5.4.2 versions.

Vendor: RadiusTheme
Product: Classified Listing
Published: Jul 02, 2026
Source: NVD
CVE-2026-57354 MEDIUM - 6.5

Subscriber Cross Site Scripting (XSS) in JetReviews <= 3.0.0.1 versions.

Vendor: Crocoblock. Jetimpex Inc.
Product: JetReviews
Published: Jul 02, 2026
Source: NVD
CVE-2026-57353 MEDIUM - 6.5

Subscriber Broken Access Control in Link Whisper Premium <= 2.9.0 versions.

Vendor: LinkWhisper
Product: Link Whisper Premium
Published: Jul 02, 2026
Source: NVD
CVE-2026-57352 MEDIUM - 4.8

Unauthenticated Broken Authentication in ALD – Dropshipping and Fulfillment for AliExpress and WooCommerce <= 2.2.0 versions.

Vendor: VillaTheme
Product: ALD – Dropshipping and Fulfillment for AliExpress and WooCommerce
Published: Jul 02, 2026
Source: NVD
CVE-2026-57351 HIGH - 7.1

Unauthenticated Cross Site Scripting (XSS) in HandL UTM Grabber <= 2.9.2 versions.

Vendor: Haktan Suren
Product: HandL UTM Grabber
Published: Jul 02, 2026
Source: NVD
CVE-2026-57350 HIGH - 7.1

Unauthenticated Cross Site Scripting (XSS) in WP Debugging <= 2.12.2 versions.

Vendor: Andy Fragen
Product: WP Debugging
Published: Jul 02, 2026
Source: NVD
CVE-2026-57349 HIGH - 7.1

Unauthenticated Cross Site Scripting (XSS) in WPeMatico RSS Feed Fetcher <= 2.8.17 versions.

Vendor: etruel
Product: WPeMatico RSS Feed Fetcher
Published: Jul 02, 2026
Source: NVD
CVE-2026-57348 HIGH - 7.2

Unauthenticated Server Side Request Forgery (SSRF) in Paid Member Subscriptions <= 3.0.4 versions.

Vendor: Cozmoslabs
Product: Paid Member Subscriptions
Published: Jul 02, 2026
Source: NVD
CVE-2026-57347 MEDIUM - 6.5

Subscriber Sensitive Data Exposure in Hotel Booking Lite <= 6.0.3 versions.

Vendor: jetmonsters
Product: Hotel Booking Lite
Published: Jul 02, 2026
Source: NVD
CVE-2026-57345 HIGH - 7.1

Unauthenticated Cross Site Scripting (XSS) in Internal Links Manager <= 3.0.3 versions.

Vendor: Webraketen
Product: Internal Links Manager
Published: Jul 02, 2026
Source: NVD
CVE-2026-57344 HIGH - 7.1

Unauthenticated Cross Site Scripting (XSS) in Classified Listing <= 5.4.2 versions.

Vendor: RadiusTheme
Product: Classified Listing
Published: Jul 02, 2026
Source: NVD
CVE-2026-57343 HIGH - 7.1

Unauthenticated Cross Site Scripting (XSS) in Real Estate 7 <= 3.5.9 versions.

Vendor: Contempoinc
Product: Real Estate 7
Published: Jul 02, 2026
Source: NVD
CVE-2026-57342 MEDIUM - 6.5

Subscriber Cross Site Scripting (XSS) in ShortPixel Adaptive Images <= 3.11.3 versions.

Vendor: ShortPixel
Product: ShortPixel Adaptive Images
Published: Jul 02, 2026
Source: NVD
CVE-2026-56037 HIGH - 8.8

Deserialization of Untrusted Data vulnerability in Themify Themify Popup allows Object Injection. This issue affects Themify Popup: from n/a through 1.4.3.

Vendor: Themify
Product: Themify Popup
Published: Jul 02, 2026
Source: NVD
CVE-2026-49779 MEDIUM - 6.5

Customer Path Traversal in Tax Exempt for WooCommerce <= 1.9.3 versions.

Vendor: Addify
Product: Tax Exempt for WooCommerce
Published: Jul 02, 2026
Source: NVD
CVE-2026-42382 HIGH - 8.1

Unauthenticated Local File Inclusion in Audrey <= 1.5 versions.

Vendor: Elated-Themes
Product: Audrey
Published: Jul 02, 2026
Source: NVD
CVE-2026-39448 HIGH - 7.5

Unauthenticated Broken Access Control in NOWPayments for WooCommerce <= 1.4.0 versions.

Vendor: CoderPress
Product: NOWPayments for WooCommerce
Published: Jul 02, 2026
Source: NVD
CVE-2026-27436 CRITICAL - 9.1

Editor Arbitrary Code Execution in Five Star Business Profile and Schema <= 2.3.19 versions.

Vendor: Rustaurius
Product: Five Star Business Profile and Schema
Published: Jul 02, 2026
Source: NVD
CVE-2026-27433 MEDIUM - 6.5

Unauthenticated Broken Access Control in Motors <= 5.6.80 versions.

Vendor: StylemixThemes
Product: Motors
Published: Jul 02, 2026
Source: NVD
CVE-2026-27430 HIGH - 7.1

Unauthenticated Cross Site Scripting (XSS) in TheFox <= 3.9.76 versions.

Vendor: tranmautritam
Product: TheFox
Published: Jul 02, 2026
Source: NVD