Total CVEs

140,323

Critical Severity

3,747

High Severity

13,514

Last 7 Days

1,767
Quick preset (or use dates below)
Clear Filters
๐Ÿ“… Showing Year: 2026 (January 1 - December 31, 2026) View All Years โ†’
Showing 301 - 320 of 36,728 CVEs
CVE-2026-56058 CRITICAL - 9.9

Subscriber Arbitrary File Upload in Quform <= 2.23.0 versions.

Vendor: ThemeCatcher
Product: Quform
Published: Jun 26, 2026
Source: NVD
CVE-2026-56057 CRITICAL - 9.8

Subscriber PHP Object Injection in Uncanny Automator Pro <= 7.3.0.6 versions.

Vendor: Uncanny Owl
Product: Uncanny Automator Pro
Published: Jun 26, 2026
Source: NVD
CVE-2026-56055 HIGH - 8.8

Subscriber PHP Object Injection in RealHomes <= 4.5.3 versions.

Vendor: InspiryThemes
Product: RealHomes
Published: Jun 26, 2026
Source: NVD
CVE-2026-56048 MEDIUM - 6.5

Unauthenticated Insecure Direct Object References (IDOR) in Payment Gateway Based Fees and Discounts for WooCommerce <= 3.0.0 versions.

Vendor: tychesoftwares
Product: Payment Gateway Based Fees and Discounts for WooCommerce
Published: Jun 26, 2026
Source: NVD
CVE-2026-56047 HIGH - 7.1

Unauthenticated Cross Site Scripting (XSS) in perfmatters <= 2.6.3 versions.

Vendor: Perfmatters, Powered Kinsta + GeneratePress Docs Changelog Feature requests Legal Affiliate Contact
Product: perfmatters
Published: Jun 26, 2026
Source: NVD
CVE-2026-56046 MEDIUM - 6.5

Subscriber Cross Site Scripting (XSS) in ListingPro <= 2.9.11 versions.

Vendor: CridioStudio
Product: ListingPro
Published: Jun 26, 2026
Source: NVD
CVE-2026-56045 HIGH - 7.1

Unauthenticated Cross Site Scripting (XSS) in Automatic < 3.135.1 versions.

Vendor: ValvePress
Product: Automatic
Published: Jun 26, 2026
Source: NVD
CVE-2026-56044 HIGH - 7.1

Unauthenticated Cross Site Scripting (XSS) in Blog2Social <= 8.9.2 versions.

Vendor: Adenion
Product: Blog2Social
Published: Jun 26, 2026
Source: NVD
CVE-2026-56043 HIGH - 7.1

Unauthenticated Cross Site Scripting (XSS) in Customer Reviews for WooCommerce <= 5.110.1 versions.

Vendor: CusRev
Product: Customer Reviews for WooCommerce
Published: Jun 26, 2026
Source: NVD
CVE-2026-56041 HIGH - 7.1

Unauthenticated Cross Site Scripting (XSS) in Responsive Lightbox <= 2.7.6 versions.

Vendor: dFactory
Product: Responsive Lightbox
Published: Jun 26, 2026
Source: NVD
CVE-2026-56040 HIGH - 7.1

Unauthenticated Cross Site Scripting (XSS) in Gutenverse Form <= 2.4.7 versions.

Vendor: WordPress.com
Product: Gutenverse Form
Published: Jun 26, 2026
Source: NVD
CVE-2026-56039 HIGH - 7.1

Unauthenticated Cross Site Scripting (XSS) in Quick Interest Slider <= 3.1.6 versions.

Vendor: WordPress.com
Product: Quick Interest Slider
Published: Jun 26, 2026
Source: NVD
CVE-2026-56038 HIGH - 8.8

Contributor Privilege Escalation in Frisbii Pay <= 1.8.2 versions.

Vendor: Frisbii
Product: Frisbii Pay
Published: Jun 26, 2026
Source: NVD
CVE-2026-56036 CRITICAL - 9.3

Unauthenticated SQL Injection in ์›Œ๋“œํ”„๋ ˆ์Šค ๊ฒฐ์ œ ์‹ฌํ”ŒํŽ˜์ด <= 5.5.6 versions.

Vendor: codemstory
Product: ์›Œ๋“œํ”„๋ ˆ์Šค ๊ฒฐ์ œ ์‹ฌํ”ŒํŽ˜์ด
Published: Jun 26, 2026
Source: NVD
CVE-2026-56035 HIGH - 8.6

Unauthenticated Multiple Vulnerabilities in BitFire Security <= 5.0.3 versions.

Vendor: Cory Marsh
Product: BitFire Security
Published: Jun 26, 2026
Source: NVD
CVE-2026-56034 CRITICAL - 9.3

Unauthenticated SQL Injection in Library Management System <= 3.5.7 versions.

Vendor: Online Web Tutor
Product: Library Management System
Published: Jun 26, 2026
Source: NVD
CVE-2026-56033 CRITICAL - 9.8

Unauthenticated Privilege Escalation in Dokan Pro <= 5.0.4 versions.

Vendor: Dokan Multivendor Plugin
Product: Dokan Pro
Published: Jun 26, 2026
Source: NVD
CVE-2026-56032 CRITICAL - 9.8

Subscriber PHP Object Injection in Buddyboss Platform <= 3.0.4 versions.

Vendor: BuddyBoss
Product: Buddyboss Platform
Published: Jun 26, 2026
Source: NVD
CVE-2026-56031 HIGH - 8.1

Unauthenticated PHP Object Injection in Uncanny Automator <= 7.3.1.2 versions.

Vendor: Uncanny Owl
Product: Uncanny Automator
Published: Jun 26, 2026
Source: NVD
CVE-2026-56030 CRITICAL - 9.8

Unauthenticated Privilege Escalation in Paytium <= 5.0.2 versions.

Vendor: paytiumsupport
Product: Paytium
Published: Jun 26, 2026
Source: NVD