Total CVEs

140,409

Critical Severity

3,747

High Severity

13,543

Last 7 Days

1,660
Quick preset (or use dates below)
Clear Filters
๐Ÿ“… Showing Year: 2026 (January 1 - December 31, 2026) View All Years โ†’
Showing 381 - 400 of 36,814 CVEs
CVE-2026-56064 HIGH - 8.5

Subscriber SQL Injection in Tourfic <= 2.22.5 versions.

Vendor: Themefic
Product: Tourfic
Published: Jun 26, 2026
Source: NVD
CVE-2026-56063 HIGH - 8.3

Unauthenticated Broken Access Control in MailChimp Block <= 1.1.15 versions.

Vendor: bPlugins
Product: MailChimp Block
Published: Jun 26, 2026
Source: NVD
CVE-2026-56062 CRITICAL - 9.3

Unauthenticated SQL Injection in Quotes llama <= 3.1.5 versions.

Vendor: oooorgle
Product: Quotes llama
Published: Jun 26, 2026
Source: NVD
CVE-2026-56061 HIGH - 7.5

Unauthenticated Broken Access Control in Subscriptions for WooCommerce <= 1.9.5 versions.

Vendor: WP Swings
Product: Subscriptions for WooCommerce
Published: Jun 26, 2026
Source: NVD
CVE-2026-56060 HIGH - 7.5

Unauthenticated Sensitive Data Exposure in Print Invoice & Delivery Notes for WooCommerce <= 7.1.1 versions.

Vendor: tychesoftwares
Product: Print Invoice & Delivery Notes for WooCommerce
Published: Jun 26, 2026
Source: NVD
CVE-2026-56059 CRITICAL - 9.9

Subscriber Arbitrary File Upload in Travel Booking <= 2.2.5 versions.

Vendor: PhysCode
Product: Travel Booking
Published: Jun 26, 2026
Source: NVD
CVE-2026-56058 CRITICAL - 9.9

Subscriber Arbitrary File Upload in Quform <= 2.23.0 versions.

Vendor: ThemeCatcher
Product: Quform
Published: Jun 26, 2026
Source: NVD
CVE-2026-56057 CRITICAL - 9.8

Subscriber PHP Object Injection in Uncanny Automator Pro <= 7.3.0.6 versions.

Vendor: Uncanny Owl
Product: Uncanny Automator Pro
Published: Jun 26, 2026
Source: NVD
CVE-2026-56055 HIGH - 8.8

Subscriber PHP Object Injection in RealHomes <= 4.5.3 versions.

Vendor: InspiryThemes
Product: RealHomes
Published: Jun 26, 2026
Source: NVD
CVE-2026-56048 MEDIUM - 6.5

Unauthenticated Insecure Direct Object References (IDOR) in Payment Gateway Based Fees and Discounts for WooCommerce <= 3.0.0 versions.

Vendor: tychesoftwares
Product: Payment Gateway Based Fees and Discounts for WooCommerce
Published: Jun 26, 2026
Source: NVD
CVE-2026-56047 HIGH - 7.1

Unauthenticated Cross Site Scripting (XSS) in perfmatters <= 2.6.3 versions.

Vendor: Perfmatters, Powered Kinsta + GeneratePress Docs Changelog Feature requests Legal Affiliate Contact
Product: perfmatters
Published: Jun 26, 2026
Source: NVD
CVE-2026-56046 MEDIUM - 6.5

Subscriber Cross Site Scripting (XSS) in ListingPro <= 2.9.11 versions.

Vendor: CridioStudio
Product: ListingPro
Published: Jun 26, 2026
Source: NVD
CVE-2026-56045 HIGH - 7.1

Unauthenticated Cross Site Scripting (XSS) in Automatic < 3.135.1 versions.

Vendor: ValvePress
Product: Automatic
Published: Jun 26, 2026
Source: NVD
CVE-2026-56044 HIGH - 7.1

Unauthenticated Cross Site Scripting (XSS) in Blog2Social <= 8.9.2 versions.

Vendor: Adenion
Product: Blog2Social
Published: Jun 26, 2026
Source: NVD
CVE-2026-56043 HIGH - 7.1

Unauthenticated Cross Site Scripting (XSS) in Customer Reviews for WooCommerce <= 5.110.1 versions.

Vendor: CusRev
Product: Customer Reviews for WooCommerce
Published: Jun 26, 2026
Source: NVD
CVE-2026-56041 HIGH - 7.1

Unauthenticated Cross Site Scripting (XSS) in Responsive Lightbox <= 2.7.6 versions.

Vendor: dFactory
Product: Responsive Lightbox
Published: Jun 26, 2026
Source: NVD
CVE-2026-56040 HIGH - 7.1

Unauthenticated Cross Site Scripting (XSS) in Gutenverse Form <= 2.4.7 versions.

Vendor: WordPress.com
Product: Gutenverse Form
Published: Jun 26, 2026
Source: NVD
CVE-2026-56039 HIGH - 7.1

Unauthenticated Cross Site Scripting (XSS) in Quick Interest Slider <= 3.1.6 versions.

Vendor: WordPress.com
Product: Quick Interest Slider
Published: Jun 26, 2026
Source: NVD
CVE-2026-56038 HIGH - 8.8

Contributor Privilege Escalation in Frisbii Pay <= 1.8.2 versions.

Vendor: Frisbii
Product: Frisbii Pay
Published: Jun 26, 2026
Source: NVD
CVE-2026-56036 CRITICAL - 9.3

Unauthenticated SQL Injection in ์›Œ๋“œํ”„๋ ˆ์Šค ๊ฒฐ์ œ ์‹ฌํ”ŒํŽ˜์ด <= 5.5.6 versions.

Vendor: codemstory
Product: ์›Œ๋“œํ”„๋ ˆ์Šค ๊ฒฐ์ œ ์‹ฌํ”ŒํŽ˜์ด
Published: Jun 26, 2026
Source: NVD