2026 CVE Vulnerabilities
67,200 CVEs published in 2026.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2026-32567 | MEDIUM | 6.8 | 0.3% | Mar 25, 2026 | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in icopydoc YML for Yandex ... |
| CVE-2026-32562 | MEDIUM | 5.4 | 0.1% | Mar 25, 2026 | Missing Authorization vulnerability in WP Folio Team PPWP password-protect-page allows Exploiting Incorrectly Configured... |
| CVE-2026-32546 | HIGH | 7.5 | 0.2% | Mar 25, 2026 | Missing Authorization vulnerability in StellarWP Restrict Content restrict-content allows Exploiting Incorrectly Configu... |
| CVE-2026-32545 | HIGH | 7.1 | 0.1% | Mar 25, 2026 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Taboola Taboola Pi... |
| CVE-2026-32544 | HIGH | 7.1 | 0.1% | Mar 25, 2026 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in OOPSpam Team OOPSp... |
| CVE-2026-32542 | HIGH | 7.1 | 0.1% | Mar 25, 2026 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in ThemeFusion Fusion... |
| CVE-2026-32541 | MEDIUM | 6.5 | 0.2% | Mar 25, 2026 | Missing Authorization vulnerability in Premmerce Premmerce Redirect Manager premmerce-redirect-manager allows Exploiting... |
| CVE-2026-32540 | HIGH | 7.1 | 0.1% | Mar 25, 2026 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Bookly Bookly book... |
| CVE-2026-32539 | CRITICAL | 9.3 | 0.2% | Mar 25, 2026 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in PublishPress Publi... |
| CVE-2026-32538 | HIGH | 7.5 | 0.2% | Mar 25, 2026 | Insertion of Sensitive Information Into Sent Data vulnerability in Noor Alam SMTP Mailer smtp-mailer allows Retrieve Emb... |
| CVE-2026-32537 | HIGH | 7.5 | 0.3% | Mar 25, 2026 | Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in... |
| CVE-2026-32536 | CRITICAL | 9.9 | 0.3% | Mar 25, 2026 | Unrestricted Upload of File with Dangerous Type vulnerability in halfdata Green Downloads halfdata-paypal-green-download... |
| CVE-2026-32535 | MEDIUM | 6.5 | 0.2% | Mar 25, 2026 | Authorization Bypass Through User-Controlled Key vulnerability in JoomSky JS Help Desk js-support-ticket allows Exploiti... |
| CVE-2026-32534 | HIGH | 8.5 | 0.2% | Mar 25, 2026 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in JoomSky JS Help De... |
| CVE-2026-32533 | MEDIUM | 6.5 | 0.2% | Mar 25, 2026 | Authorization Bypass Through User-Controlled Key vulnerability in LatePoint LatePoint latepoint allows Exploiting Incorr... |
| CVE-2026-32532 | HIGH | 7.1 | 0.1% | Mar 25, 2026 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in ThemeHunk Contact ... |
| CVE-2026-32531 | HIGH | 8.1 | 0.3% | Mar 25, 2026 | Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in... |
| CVE-2026-32530 | HIGH | 8.8 | 0.2% | Mar 25, 2026 | Incorrect Privilege Assignment vulnerability in WPFunnels Creator LMS creatorlms allows Privilege Escalation.This issue ... |
| CVE-2026-32529 | HIGH | 7.1 | 0.1% | Mar 25, 2026 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in don-themes Molla m... |
| CVE-2026-32528 | HIGH | 7.1 | 0.1% | Mar 25, 2026 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in don-themes Riode r... |
| CVE-2026-32527 | MEDIUM | 6.5 | 0.2% | Mar 25, 2026 | Missing Authorization vulnerability in CRM Perks WP Insightly for Contact Form 7, WPForms, Elementor, Formidable and Nin... |
| CVE-2026-32526 | HIGH | 7.1 | 0.2% | Mar 25, 2026 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in VillaTheme Abandon... |
| CVE-2026-32525 | CRITICAL | 9.9 | 0.3% | Mar 25, 2026 | Improper Control of Generation of Code ('Code Injection') vulnerability in jetmonsters JetFormBuilder jetformbuilder all... |
| CVE-2026-32524 | CRITICAL | 9.1 | 0.3% | Mar 25, 2026 | Unrestricted Upload of File with Dangerous Type vulnerability in Jordy Meow Photo Engine wplr-sync allows Upload a Web S... |
| CVE-2026-32523 | CRITICAL | 9.9 | 0.3% | Mar 25, 2026 | Unrestricted Upload of File with Dangerous Type vulnerability in denishua WPJAM Basic wpjam-basic allows Using Malicious... |
Check if your code is affected by 2026 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now