Total CVEs

143,749

Critical Severity

4,091

High Severity

14,758

Last 7 Days

1,522
Quick preset (or use dates below)
Clear Filters
📅 Showing Year: 2026 (January 1 - December 31, 2026) View All Years →
Showing 1,961 - 1,980 of 40,154 CVEs
CVE-2026-57760 MEDIUM - 5.3

Missing Authorization vulnerability in Sendcloud Sendcloud Shipping allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects Sendcloud Shipping: from n/a through 1.0.29.

Vendor: Sendcloud
Product: Sendcloud Shipping
Published: Jul 02, 2026
Source: NVD
CVE-2026-57759 HIGH - 8.8

Unauthenticated Cross Site Request Forgery (CSRF) in ProfileGrid <= 5.9.9.7 versions.

Vendor: Metagauss
Product: ProfileGrid
Published: Jul 02, 2026
Source: NVD
CVE-2026-57758 HIGH - 7.1

Unauthenticated Cross Site Request Forgery (CSRF) in Permalink Manager for WooCommerce <= 1.0.8.2 versions.

Vendor: BeRocket
Product: Permalink Manager for WooCommerce
Published: Jul 02, 2026
Source: NVD
CVE-2026-57757 HIGH - 7.1

Unauthenticated Cross Site Request Forgery (CSRF) in pCloud WP Backup <= 2.0.2 versions.

Vendor: ploudapp
Product: pCloud WP Backup
Published: Jul 02, 2026
Source: NVD
CVE-2026-57756 HIGH - 8.5

Contributor SQL Injection in nicen-localize-image <= 1.4.9 versions.

Vendor: 友人a丶
Product: nicen-localize-image
Published: Jul 02, 2026
Source: NVD
CVE-2026-57755 MEDIUM - 6.5

Contributor Cross Site Scripting (XSS) in Mosaic Gallery &#8211; Advanced Gallery <= 1.2.0 versions.

Vendor: Misbah WP
Product: Mosaic Gallery &#8211; Advanced Gallery
Published: Jul 02, 2026
Source: NVD
CVE-2026-57754 MEDIUM - 6.5

Contributor Cross Site Scripting (XSS) in Livemesh Addons for WPBakery Page Builder <= 3.9.4 versions.

Vendor: Livemesh
Product: Livemesh Addons for WPBakery Page Builder
Published: Jul 02, 2026
Source: NVD
CVE-2026-57753 MEDIUM - 5.3

Unauthenticated Sensitive Data Exposure in Kit (formerly ConvertKit) for WooCommerce <= 2.1.5 versions.

Vendor: Nathanbarry
Product: Kit (formerly ConvertKit) for WooCommerce
Published: Jul 02, 2026
Source: NVD
CVE-2026-57752 HIGH - 8.5

Contributor SQL Injection in iNET Webkit 1.2.4 versions.

Vendor: iNET
Product: iNET Webkit
Published: Jul 02, 2026
Source: NVD
CVE-2026-57751 HIGH - 8.1

Unauthenticated Cross Site Request Forgery (CSRF) in Heateor Social Login <= 1.1.39 versions.

Vendor: Heateor Support
Product: Heateor Social Login
Published: Jul 02, 2026
Source: NVD
CVE-2026-57750 MEDIUM - 5.3

Unauthenticated Broken Access Control in ez Form Calculator Premium <= 2.14.1.2 versions.

Vendor: Keksdieb
Product: ez Form Calculator Premium
Published: Jul 02, 2026
Source: NVD
CVE-2026-57749 HIGH - 7.5

Contributor Local File Inclusion in SportsPress Pro <= 2.7.29 versions.

Vendor: ThemeBoy
Product: SportsPress Pro
Published: Jul 02, 2026
Source: NVD
CVE-2026-57748 HIGH - 7.5

Contributor Local File Inclusion in Shopify <= 1.0.0 versions.

Vendor: Shopify Help Center
Product: Shopify
Published: Jul 02, 2026
Source: NVD
CVE-2026-57747 MEDIUM - 6.5

Unauthenticated Cross Site Request Forgery (CSRF) in Booked <= 3.0.0 versions.

Vendor: ThemeREX
Product: Booked
Published: Jul 02, 2026
Source: NVD
CVE-2026-57746 HIGH - 7.1

Subscriber Broken Access Control in Booked <= 3.0.0 versions.

Vendor: ThemeREX
Product: Booked
Published: Jul 02, 2026
Source: NVD
CVE-2026-57731 MEDIUM - 6.5

Contributor Broken Access Control in Flatsome <= 3.20.5 versions.

Vendor: UX-themes
Product: Flatsome
Published: Jul 02, 2026
Source: NVD
CVE-2026-57730 MEDIUM - 4.3

Subscriber Broken Access Control in Flatsome <= 3.20.5 versions.

Vendor: UX-themes
Product: Flatsome
Published: Jul 02, 2026
Source: NVD
CVE-2026-57690 MEDIUM - 4.3

Unauthenticated Cross Site Request Forgery (CSRF) in Werkstatt <= 4.7.2 versions.

Vendor: Fuelthemes
Product: Werkstatt
Published: Jul 02, 2026
Source: NVD
CVE-2026-57689 MEDIUM - 4.3

Subscriber Broken Access Control in Werkstatt <= 4.7.2 versions.

Vendor: Fuelthemes
Product: Werkstatt
Published: Jul 02, 2026
Source: NVD
CVE-2026-57688 HIGH - 8.2

Unauthenticated Broken Access Control in POS Entegratör <= 3.7.103 versions.

Vendor: Gurmehub
Product: POS Entegratör
Published: Jul 02, 2026
Source: NVD