2026 CVE Vulnerabilities

68,975 CVEs published in 2026.

CVE IDSeverityCVSSDescription
CVE-2026-32408MEDIUM4.3Missing Authorization vulnerability in themefusecom Brizy brizy allows Exploiting Incorrectly Configured Access Control ...
CVE-2026-32407MEDIUM4.3Missing Authorization vulnerability in WPClever WPC Smart Wishlist for WooCommerce woo-smart-wishlist allows Exploiting ...
CVE-2026-32406MEDIUM4.3Missing Authorization vulnerability in WPClever WPC Product Bundles for WooCommerce woo-product-bundle allows Exploiting...
CVE-2026-32405MEDIUM5.3Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in xtemos WoodMart woodmart all...
CVE-2026-32404MEDIUM5.3Missing Authorization vulnerability in Studio99 Studio99 WP Monitor studio99-wp-monitor allows Exploiting Incorrectly Co...
CVE-2026-32403MEDIUM6.5Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in toocheke Toocheke ...
CVE-2026-32402MEDIUM5.3Missing Authorization vulnerability in Ays Pro Image Slider by Ays ays-slider allows Exploiting Incorrectly Configured A...
CVE-2026-32401HIGH7.2Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in...
CVE-2026-32400HIGH7.5Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in...
CVE-2026-32399HIGH8.5Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in David Lingren Medi...
CVE-2026-32398MEDIUM6.5Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition') vulnerability in Subrata Mal...
CVE-2026-32397MEDIUM5.3Missing Authorization vulnerability in YMC Filter & Grids ymc-smart-filter allows Exploiting Incorrectly Configured Acce...
CVE-2026-32396MEDIUM5.3Missing Authorization vulnerability in RadiusTheme Team tlp-team allows Exploiting Incorrectly Configured Access Control...
CVE-2026-32395MEDIUM5.3Missing Authorization vulnerability in Xpro Xpro Addons For Beaver Builder – Lite xpro-addons-beaver-builder-elementor a...
CVE-2026-32394MEDIUM4.3Missing Authorization vulnerability in PublishPress PublishPress Capabilities capability-manager-enhanced allows Exploit...
CVE-2026-32393HIGH7.5Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in...
CVE-2026-32392HIGH7.5Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in...
CVE-2026-32391MEDIUM5.4Missing Authorization vulnerability in linethemes SmartFix smartfix allows Exploiting Incorrectly Configured Access Cont...
CVE-2026-32390MEDIUM5.4Missing Authorization vulnerability in linethemes Nanosoft nanosoft allows Exploiting Incorrectly Configured Access Cont...
CVE-2026-32388MEDIUM5.4Missing Authorization vulnerability in linethemes GLB glb allows Exploiting Incorrectly Configured Access Control Securi...
CVE-2026-32387MEDIUM5.3Missing Authorization vulnerability in Noor Alam Checkout for PayPal checkout-for-paypal allows Exploiting Incorrectly C...
CVE-2026-32386MEDIUM4.3Missing Authorization vulnerability in EnvoThemes Envo Extra envo-extra allows Exploiting Incorrectly Configured Access ...
CVE-2026-32385MEDIUM5.4Missing Authorization vulnerability in Metagauss RegistrationMagic custom-registration-form-builder-with-submission-mana...
CVE-2026-32384HIGH7.5Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in...
CVE-2026-32383MEDIUM5.3Missing Authorization vulnerability in raratheme Ridhi ridhi allows Exploiting Incorrectly Configured Access Control Sec...

Check if your code is affected by 2026 CVEs

Strix scans your code and infrastructure for known vulnerabilities automatically.

Scan your code now