2026 CVE Vulnerabilities
45,444 CVEs published in 2026.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2026-12162 | MEDIUM | 5.5 | 0.1% | Jun 16, 2026 | Improper host validation in the social login autofill feature in Devolutions Remote Desktop Manager 2026.2.8 allows an ... |
| CVE-2026-48157 | MEDIUM | 6.1 | 0.2% | Jun 15, 2026 | Slim is a PHP micro framework that enables users to write simple web applications and APIs. In versions 4.4.0 through 4.... |
| CVE-2026-49775 | MEDIUM | 6.5 | 0.2% | Jun 15, 2026 | Unauthenticated Broken Access Control in Welcart e-Commerce <= 2.11.28 versions. |
| CVE-2026-49773 | MEDIUM | 6.5 | 0.2% | Jun 15, 2026 | Subscriber Cross Site Scripting (XSS) in FV Flowplayer Video Player < 7.5.51.7212 versions. |
| CVE-2026-49043 | MEDIUM | 4.7 | 0.1% | Jun 15, 2026 | Unauthenticated Cross Site Request Forgery (CSRF) in WP Migrate Lite <= 2.7.8 versions. |
| CVE-2026-48965 | MEDIUM | 6.5 | 0.3% | Jun 15, 2026 | Subscriber Sensitive Data Exposure in XCloner <= 4.8.6 versions. |
| CVE-2026-48887 | MEDIUM | 6.5 | 0.2% | Jun 15, 2026 | Unauthenticated Broken Access Control in JS Help Desk <= 3.0.9 versions. |
| CVE-2026-48880 | MEDIUM | 6.5 | 0.2% | Jun 15, 2026 | Subscriber Cross Site Scripting (XSS) in WP Job Portal <= 2.5.2 versions. |
| CVE-2026-48878 | MEDIUM | 6.5 | 0.3% | Jun 15, 2026 | Subscriber Sensitive Data Exposure in Visual Link Preview <= 2.4.1 versions. |
| CVE-2026-48870 | MEDIUM | 6.5 | 0.2% | Jun 15, 2026 | Subscriber Cross Site Scripting (XSS) in King Addons for Elementor <= 51.1.62 versions. |
| CVE-2026-48518 | MEDIUM | 4.3 | 0.2% | Jun 15, 2026 | MultiJuicer is used to run separate Juice Shop instances on a central kubernetes cluster without the need for local inst... |
| CVE-2026-42752 | MEDIUM | 6.5 | 0.2% | Jun 15, 2026 | Unauthenticated Bypass Vulnerability in Stripe Payments <= 2.0.98 versions. |
| CVE-2026-42743 | MEDIUM | 6.5 | 0.1% | Jun 15, 2026 | Unauthenticated Broken Authentication in Masteriyo - LMS <= 2.1.8 versions. |
| CVE-2026-42688 | MEDIUM | 6.5 | 0.2% | Jun 15, 2026 | Subscriber Cross Site Scripting (XSS) in Modula Image Gallery <= 2.14.23 versions. |
| CVE-2026-42663 | MEDIUM | 6.5 | 0.2% | Jun 15, 2026 | Unauthenticated Cross Site Scripting (XSS) in Simple Membership <= 4.7.2 versions. |
| CVE-2026-42662 | MEDIUM | 6.5 | 0.3% | Jun 15, 2026 | Unauthenticated Bypass Vulnerability in Event Tickets <= 5.27.5 versions. |
| CVE-2026-42660 | MEDIUM | 6.5 | 0.3% | Jun 15, 2026 | Subscriber Sensitive Data Exposure in Contest Gallery <= 28.1.7 versions. |
| CVE-2026-42659 | MEDIUM | 6.5 | 0.3% | Jun 15, 2026 | Subscriber Broken Access Control in Advanced Form Integration <= 1.126.12 versions. |
| CVE-2026-42657 | MEDIUM | 5.3 | 0.2% | Jun 15, 2026 | Unauthenticated Other Vulnerability Type in Contest Gallery <= 28.1.7 versions. |
| CVE-2026-42656 | MEDIUM | 6.5 | 0.2% | Jun 15, 2026 | Subscriber Cross Site Scripting (XSS) in Contest Gallery <= 28.1.6 versions. |
| CVE-2026-42655 | MEDIUM | 5.9 | 0.2% | Jun 15, 2026 | Unauthenticated Bypass Vulnerability in Best Payments Plugin for WP <= 4.6.19 versions. |
| CVE-2026-42651 | MEDIUM | 6.3 | 0.2% | Jun 15, 2026 | Subscriber Broken Access Control in Classified Listing <= 5.3.9 versions. |
| CVE-2026-42640 | MEDIUM | 6.5 | 0.2% | Jun 15, 2026 | Unauthenticated Broken Access Control in Classified Listing <= 5.3.8 versions. |
| CVE-2026-42378 | MEDIUM | 6.5 | 0.4% | Jun 15, 2026 | Subscriber Broken Authentication in WP Full Stripe Free <= 8.4.1 versions. |
| CVE-2026-41556 | MEDIUM | 6.5 | 0.2% | Jun 15, 2026 | Subscriber Cross Site Scripting (XSS) in ProfilePress <= 4.16.13 versions. |
Check if your code is affected by 2026 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now