2026 CVE Vulnerabilities
45,151 CVEs published in 2026.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2026-57772 | HIGH | 8.5 | 0.4% | Jul 13, 2026 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in WP Inventory WP In... |
| CVE-2026-57771 | HIGH | 8.5 | 0.4% | Jul 13, 2026 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Milan Petrovic GD ... |
| CVE-2026-57768 | HIGH | 8.2 | 0.3% | Jul 13, 2026 | Incorrect Privilege Assignment vulnerability in favethemes Houzez Login Register houzez-login-register allows Privilege ... |
| CVE-2026-57745 | HIGH | 7.1 | 0.3% | Jul 13, 2026 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in stmcan RT-Theme 18... |
| CVE-2026-57743 | HIGH | 8.1 | 0.6% | Jul 13, 2026 | Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in... |
| CVE-2026-57741 | HIGH | 7.1 | 0.3% | Jul 13, 2026 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in AcyMailing Newslet... |
| CVE-2026-57740 | HIGH | 7.1 | 0.3% | Jul 13, 2026 | Missing Authorization vulnerability in AcyMailing Newsletter Team AcyMailing SMTP Newsletter acymailing allows Exploitin... |
| CVE-2026-57734 | HIGH | 7.1 | 0.3% | Jul 13, 2026 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in tagDiv tagDiv Comp... |
| CVE-2026-57733 | HIGH | 7.1 | 0.3% | Jul 13, 2026 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in tagDiv tagDiv Clou... |
| CVE-2026-57732 | HIGH | 7.1 | 0.3% | Jul 13, 2026 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in tagDiv tagDiv Opt-... |
| CVE-2026-57729 | HIGH | 7.5 | 0.4% | Jul 13, 2026 | Missing Authorization vulnerability in UX-themes Flatsome flatsome allows Exploiting Incorrectly Configured Access Contr... |
| CVE-2026-57728 | HIGH | 7.1 | 0.3% | Jul 13, 2026 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in UX-themes Flatsome... |
| CVE-2026-57727 | HIGH | 7.5 | 0.4% | Jul 13, 2026 | Missing Authorization vulnerability in Themeum Kirki kirki allows Exploiting Incorrectly Configured Access Control Secur... |
| CVE-2026-57725 | HIGH | 7.1 | 0.3% | Jul 13, 2026 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Themeum Kirki kirk... |
| CVE-2026-57718 | HIGH | 7.1 | 0.3% | Jul 13, 2026 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Unlimited Elements... |
| CVE-2026-57715 | HIGH | 7.1 | 0.3% | Jul 13, 2026 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WPManageNinja Flue... |
| CVE-2026-57713 | HIGH | 8.8 | 0.5% | Jul 13, 2026 | Deserialization of Untrusted Data vulnerability in Marcus (aka @msykes) Events Manager events-manager allows Object Inje... |
| CVE-2026-57712 | HIGH | 7.1 | 0.3% | Jul 13, 2026 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WPZOOM WPZOOM Port... |
| CVE-2026-57709 | HIGH | 8.6 | 0.5% | Jul 13, 2026 | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in WP Swings Membership For... |
| CVE-2026-57708 | HIGH | 7.1 | 0.3% | Jul 13, 2026 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in CRM Perks Contact ... |
| CVE-2026-57706 | HIGH | 7.1 | 0.3% | Jul 13, 2026 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Dokan, Inc. Dokan ... |
| CVE-2026-57705 | HIGH | 7.5 | 0.3% | Jul 13, 2026 | Missing Authorization vulnerability in Nexcess Event Tickets event-tickets allows Exploiting Incorrectly Configured Acce... |
| CVE-2026-57697 | HIGH | 7.5 | 0.5% | Jul 13, 2026 | Authentication Bypass Using an Alternate Path or Channel vulnerability in Metagauss ProfileGrid profilegrid-user-profil... |
| CVE-2026-57695 | HIGH | 7.1 | 0.3% | Jul 13, 2026 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Dan Rossiter Docum... |
| CVE-2026-57668 | HIGH | 7.1 | 0.3% | Jul 13, 2026 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Basix NEX-Forms ne... |
Check if your code is affected by 2026 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now