2026 CVE Vulnerabilities
45,094 CVEs published in 2026.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2026-57709 | HIGH | 8.6 | 0.5% | Jul 13, 2026 | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in WP Swings Membership For... |
| CVE-2026-57708 | HIGH | 7.1 | 0.3% | Jul 13, 2026 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in CRM Perks Contact ... |
| CVE-2026-57706 | HIGH | 7.1 | 0.3% | Jul 13, 2026 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Dokan, Inc. Dokan ... |
| CVE-2026-57705 | HIGH | 7.5 | 0.3% | Jul 13, 2026 | Missing Authorization vulnerability in Nexcess Event Tickets event-tickets allows Exploiting Incorrectly Configured Acce... |
| CVE-2026-57697 | HIGH | 7.5 | 0.5% | Jul 13, 2026 | Authentication Bypass Using an Alternate Path or Channel vulnerability in Metagauss ProfileGrid profilegrid-user-profil... |
| CVE-2026-57695 | HIGH | 7.1 | 0.3% | Jul 13, 2026 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Dan Rossiter Docum... |
| CVE-2026-57668 | HIGH | 7.1 | 0.3% | Jul 13, 2026 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Basix NEX-Forms ne... |
| CVE-2026-57423 | HIGH | 7.1 | 0.3% | Jul 13, 2026 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Kofi Mokome Messag... |
| CVE-2026-57422 | HIGH | 7.1 | 0.3% | Jul 13, 2026 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in VillaTheme Bopo – ... |
| CVE-2026-57421 | HIGH | 7.1 | 0.3% | Jul 13, 2026 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in CRM Perks CRM Perk... |
| CVE-2026-57417 | HIGH | 7.1 | 0.3% | Jul 13, 2026 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in RexTheme Cart Lift... |
| CVE-2026-57416 | HIGH | 7.1 | 0.3% | Jul 13, 2026 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in SiteGround SiteGro... |
| CVE-2026-57415 | HIGH | 7.1 | 0.3% | Jul 13, 2026 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Codemenschen Gift ... |
| CVE-2026-57411 | HIGH | 7.1 | 0.3% | Jul 13, 2026 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Aman CF7 Views ... |
| CVE-2026-57410 | HIGH | 8.8 | 0.4% | Jul 13, 2026 | Incorrect Privilege Assignment vulnerability in MailerPress Team MailerPress mailerpress allows Privilege Escalation.Thi... |
| CVE-2026-57409 | HIGH | 7.1 | 0.3% | Jul 13, 2026 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in RealMag777 Active ... |
| CVE-2026-57407 | HIGH | 7.2 | 0.3% | Jul 13, 2026 | Server-Side Request Forgery (SSRF) vulnerability in WP Swings PDF Generator for WordPress pdf-generator-for-wp allows Se... |
| CVE-2026-57405 | HIGH | 7.1 | 0.3% | Jul 13, 2026 | Missing Authorization vulnerability in themehunk Open Shop open-shop allows Exploiting Incorrectly Configured Access Con... |
| CVE-2026-57403 | HIGH | 7.1 | 0.3% | Jul 13, 2026 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Milan Petrovic GD ... |
| CVE-2026-57399 | HIGH | 7.1 | 0.3% | Jul 13, 2026 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Proxy & VPN Bl... |
| CVE-2026-57398 | HIGH | 7.1 | 0.3% | Jul 13, 2026 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WebCodingPlace Rea... |
| CVE-2026-57396 | HIGH | 7.1 | 0.3% | Jul 13, 2026 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Flintop Free Gifts... |
| CVE-2026-57394 | HIGH | 7.1 | 0.3% | Jul 13, 2026 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Tribulant Software... |
| CVE-2026-57389 | HIGH | 8.6 | 0.5% | Jul 13, 2026 | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Adrian Tobey Groundhogg ... |
| CVE-2026-57388 | HIGH | 7.1 | 0.3% | Jul 13, 2026 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Themefic Hydra Boo... |
Check if your code is affected by 2026 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now