Total CVEs

140,279

Critical Severity

3,710

High Severity

13,344

Last 7 Days

1,816
Quick preset (or use dates below)
Clear Filters
๐Ÿ“… Showing Year: 2026 (January 1 - December 31, 2026) View All Years โ†’
Showing 261 - 280 of 36,684 CVEs
CVE-2026-56047 HIGH - 7.1

Unauthenticated Cross Site Scripting (XSS) in perfmatters <= 2.6.3 versions.

Vendor: Perfmatters, Powered Kinsta + GeneratePress Docs Changelog Feature requests Legal Affiliate Contact
Product: perfmatters
Published: Jun 26, 2026
Source: NVD
CVE-2026-56046 MEDIUM - 6.5

Subscriber Cross Site Scripting (XSS) in ListingPro <= 2.9.11 versions.

Vendor: CridioStudio
Product: ListingPro
Published: Jun 26, 2026
Source: NVD
CVE-2026-56045 HIGH - 7.1

Unauthenticated Cross Site Scripting (XSS) in Automatic < 3.135.1 versions.

Vendor: ValvePress
Product: Automatic
Published: Jun 26, 2026
Source: NVD
CVE-2026-56044 HIGH - 7.1

Unauthenticated Cross Site Scripting (XSS) in Blog2Social <= 8.9.2 versions.

Vendor: Adenion
Product: Blog2Social
Published: Jun 26, 2026
Source: NVD
CVE-2026-56043 HIGH - 7.1

Unauthenticated Cross Site Scripting (XSS) in Customer Reviews for WooCommerce <= 5.110.1 versions.

Vendor: CusRev
Product: Customer Reviews for WooCommerce
Published: Jun 26, 2026
Source: NVD
CVE-2026-56041 HIGH - 7.1

Unauthenticated Cross Site Scripting (XSS) in Responsive Lightbox <= 2.7.6 versions.

Vendor: dFactory
Product: Responsive Lightbox
Published: Jun 26, 2026
Source: NVD
CVE-2026-56040 HIGH - 7.1

Unauthenticated Cross Site Scripting (XSS) in Gutenverse Form <= 2.4.7 versions.

Vendor: WordPress.com
Product: Gutenverse Form
Published: Jun 26, 2026
Source: NVD
CVE-2026-56039 HIGH - 7.1

Unauthenticated Cross Site Scripting (XSS) in Quick Interest Slider <= 3.1.6 versions.

Vendor: WordPress.com
Product: Quick Interest Slider
Published: Jun 26, 2026
Source: NVD
CVE-2026-56038 HIGH - 8.8

Contributor Privilege Escalation in Frisbii Pay <= 1.8.2 versions.

Vendor: Frisbii
Product: Frisbii Pay
Published: Jun 26, 2026
Source: NVD
CVE-2026-56036 CRITICAL - 9.3

Unauthenticated SQL Injection in ์›Œ๋“œํ”„๋ ˆ์Šค ๊ฒฐ์ œ ์‹ฌํ”ŒํŽ˜์ด <= 5.5.6 versions.

Vendor: codemstory
Product: ์›Œ๋“œํ”„๋ ˆ์Šค ๊ฒฐ์ œ ์‹ฌํ”ŒํŽ˜์ด
Published: Jun 26, 2026
Source: NVD
CVE-2026-56035 HIGH - 8.6

Unauthenticated Multiple Vulnerabilities in BitFire Security <= 5.0.3 versions.

Vendor: Cory Marsh
Product: BitFire Security
Published: Jun 26, 2026
Source: NVD
CVE-2026-56034 CRITICAL - 9.3

Unauthenticated SQL Injection in Library Management System <= 3.5.7 versions.

Vendor: Online Web Tutor
Product: Library Management System
Published: Jun 26, 2026
Source: NVD
CVE-2026-56033 CRITICAL - 9.8

Unauthenticated Privilege Escalation in Dokan Pro <= 5.0.4 versions.

Vendor: Dokan Multivendor Plugin
Product: Dokan Pro
Published: Jun 26, 2026
Source: NVD
CVE-2026-56032 CRITICAL - 9.8

Subscriber PHP Object Injection in Buddyboss Platform <= 3.0.4 versions.

Vendor: BuddyBoss
Product: Buddyboss Platform
Published: Jun 26, 2026
Source: NVD
CVE-2026-56031 HIGH - 8.1

Unauthenticated PHP Object Injection in Uncanny Automator <= 7.3.1.2 versions.

Vendor: Uncanny Owl
Product: Uncanny Automator
Published: Jun 26, 2026
Source: NVD
CVE-2026-56030 CRITICAL - 9.8

Unauthenticated Privilege Escalation in Paytium <= 5.0.2 versions.

Vendor: paytiumsupport
Product: Paytium
Published: Jun 26, 2026
Source: NVD
CVE-2026-56029 HIGH - 7.5

Unauthenticated Broken Authentication in CorvusPay WooCommerce Payment Gateway <= 2.7.4 versions.

Vendor: corvuspay
Product: CorvusPay WooCommerce Payment Gateway
Published: Jun 26, 2026
Source: NVD
CVE-2026-56028 CRITICAL - 9.8

Unauthenticated Privilege Escalation in Easy Elements for Elementor &#8211; Addons &amp; Website Templates <= 1.4.9 versions.

Vendor: themewant
Product: Easy Elements for Elementor &#8211; Addons &amp; Website Templates
Published: Jun 26, 2026
Source: NVD
CVE-2026-56027 CRITICAL - 9.9

Customer Arbitrary File Upload in Booster for WooCommerce <= 8.0.1 versions.

Vendor: Pluggabl
Product: Booster for WooCommerce
Published: Jun 26, 2026
Source: NVD
CVE-2026-56026 MEDIUM - 6.4

Subscriber Server Side Request Forgery (SSRF) in utm.codes <= 1.9.0 versions.

Vendor: Chris Carlevato
Product: utm.codes
Published: Jun 26, 2026
Source: NVD