Total CVEs

140,410

Critical Severity

3,747

High Severity

13,544

Last 7 Days

1,653
Quick preset (or use dates below)
Clear Filters
📅 Showing Year: 2026 (January 1 - December 31, 2026) View All Years →
Showing 321 - 340 of 36,815 CVEs
CVE-2026-57662 HIGH - 8.5

Contributor SQL Injection in Contest Gallery <= 30.0.0 versions.

Vendor: Wasiliy Strecker
Product: Contest Gallery
Published: Jun 26, 2026
Source: NVD
CVE-2026-57661 MEDIUM - 5.4

Subscriber Broken Access Control in WPComplete <= 2.9.5.5 versions.

Vendor: Nexcess
Product: WPComplete
Published: Jun 26, 2026
Source: NVD
CVE-2026-57660 MEDIUM - 5.3

Unauthenticated Broken Access Control in Booking and Rental Manager <= 2.7.1 versions.

Vendor: magepeopleteam
Product: Booking and Rental Manager
Published: Jun 26, 2026
Source: NVD
CVE-2026-57659 HIGH - 8.8

Unauthenticated Cross Site Request Forgery (CSRF) in Paid Memberships Pro - Add Member From Admin <= 0.7.2 versions.

Vendor: Stranger Studios
Product: Paid Memberships Pro - Add Member From Admin
Published: Jun 26, 2026
Source: NVD
CVE-2026-57658 CRITICAL - 9.1

Administrator Arbitrary File Upload in TemplateSpare <= 4.2.0 versions.

Vendor: Templatespare
Product: TemplateSpare
Published: Jun 26, 2026
Source: NVD
CVE-2026-57657 MEDIUM - 4.3

Unauthenticated Cross Site Request Forgery (CSRF) in Gmail SMTP <= 1.2.3.19 versions.

Vendor: Noor Alam
Product: Gmail SMTP
Published: Jun 26, 2026
Source: NVD
CVE-2026-57656 MEDIUM - 5.9

Author Cross Site Scripting (XSS) in Hester Core <= 1.1.8 versions.

Vendor: peregrinethemes
Product: Hester Core
Published: Jun 26, 2026
Source: NVD
CVE-2026-57655 HIGH - 8.2

Unauthenticated Cross Site Request Forgery (CSRF) in Child Theme Wizard <= 1.4 versions.

Vendor: Jay Versluis
Product: Child Theme Wizard
Published: Jun 26, 2026
Source: NVD
CVE-2026-57654 MEDIUM - 6.5

Affiliate Broken Access Control in Affiliates Manager <= 2.9.49 versions.

Vendor: wp.insider
Product: Affiliates Manager
Published: Jun 26, 2026
Source: NVD
CVE-2026-57653 HIGH - 8.5

Contributor SQL Injection in WP Job Portal <= 2.5.2 versions.

Vendor: wpjobportal
Product: WP Job Portal
Published: Jun 26, 2026
Source: NVD
CVE-2026-57652 MEDIUM - 5.3

Unauthenticated Insecure Direct Object References (IDOR) in JS Help Desk <= 3.1.0 versions.

Vendor: JoomSky
Product: JS Help Desk
Published: Jun 26, 2026
Source: NVD
CVE-2026-57651 MEDIUM - 6.5

Contributor Cross Site Scripting (XSS) in Ghost Kit <= 3.6.0 versions.

Vendor: nK
Product: Ghost Kit
Published: Jun 26, 2026
Source: NVD
CVE-2026-57650 MEDIUM - 6.5

Contributor Cross Site Scripting (XSS) in Magazine Blocks <= 1.8.3 versions.

Vendor: BlockArt
Product: Magazine Blocks
Published: Jun 26, 2026
Source: NVD
CVE-2026-57649 MEDIUM - 4.3

Subscriber Broken Access Control in Shoppable Images Lite <= 1.3 versions.

Vendor: studiowombat
Product: Shoppable Images Lite
Published: Jun 26, 2026
Source: NVD
CVE-2026-57648 MEDIUM - 4.3

Contributor Broken Access Control in Nelio Content <= 4.3.4 versions.

Vendor: Nelio Software
Product: Nelio Content
Published: Jun 26, 2026
Source: NVD
CVE-2026-57647 HIGH - 7.5

Contributor Local File Inclusion in Panorama Viewer – 360 Degree Image + Video Viewer <= 1.6.1 versions.

Vendor: bPlugins
Product: Panorama Viewer – 360 Degree Image + Video Viewer
Published: Jun 26, 2026
Source: NVD
CVE-2026-57646 MEDIUM - 5.4

Subscriber Insecure Direct Object References (IDOR) in Majestic Support <= 1.1.7 versions.

Vendor: Majestic Support
Product: Majestic Support
Published: Jun 26, 2026
Source: NVD
CVE-2026-57645 HIGH - 8.1

newsletters_subscribers Broken Access Control in Newsletters <= 4.13 versions.

Vendor: Tribulant Software
Product: Newsletters
Published: Jun 26, 2026
Source: NVD
CVE-2026-57644 HIGH - 8.5

Contributor SQL Injection in Restaurant Menu by MotoPress <= 2.4.10 versions.

Vendor: jetmonsters
Product: Restaurant Menu by MotoPress
Published: Jun 26, 2026
Source: NVD
CVE-2026-57643 HIGH - 8.5

Contributor SQL Injection in WP Post Author <= 3.9.1 versions.

Vendor: AF themes
Product: WP Post Author
Published: Jun 26, 2026
Source: NVD