2026 CVE Vulnerabilities
83,522 CVEs published in 2026.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2026-2681 | MEDIUM | 5.3 | 0.3% | Feb 19, 2026 | A flaw was found in the blst cryptographic library. This out-of-bounds stack write vulnerability, specifically in the bl... |
| CVE-2026-2504 | MEDIUM | 4.3 | 0.2% | Feb 19, 2026 | The Dealia – Request a quote plugin for WordPress is vulnerable to unauthorized modification of data due to missing capa... |
| CVE-2026-2502 | MEDIUM | 6.1 | 0.3% | Feb 19, 2026 | The xmlrpc attacks blocker plugin for WordPress is vulnerable to Stored Cross-Site Scripting in versions up to, and incl... |
| CVE-2026-2284 | MEDIUM | 5.4 | 0.2% | Feb 19, 2026 | The News Element Elementor Blog Magazine plugin for WordPress is vulnerable to Missing Authorization in all versions up ... |
| CVE-2026-2282 | MEDIUM | 4.4 | 0.2% | Feb 19, 2026 | The Slidorion plugin for WordPress is vulnerable to Stored Cross-Site Scripting via admin settings in all versions up to... |
| CVE-2026-25474 | HIGH | 7.5 | 0.2% | Feb 19, 2026 | OpenClaw is a personal AI assistant. In versions 2026.1.30 and below, if channels.telegram.webhookSecret is not set when... |
| CVE-2026-25242 | CRITICAL | 9.8 | 0.6% | Feb 19, 2026 | Gogs is an open source self-hosted Git service. Versions 0.13.4 and below expose unauthenticated file upload endpoints b... |
| CVE-2026-25232 | HIGH | 8.8 | 0.4% | Feb 19, 2026 | Gogs is an open source self-hosted Git service. Versions 0.13.4 and below have an access control bypass vulnerability wh... |
| CVE-2026-25229 | MEDIUM | 6.5 | 0.3% | Feb 19, 2026 | Gogs is an open source self-hosted Git service. Versions 0.13.4 and below have a broken access control vulnerability whi... |
| CVE-2026-25120 | LOW | 2.7 | 0.3% | Feb 19, 2026 | Gogs is an open source self-hosted Git service. In versions 0.13.4 and below, the DeleteComment API does not verify that... |
| CVE-2026-24764 | LOW | 3.7 | 0.2% | Feb 19, 2026 | OpenClaw (formerly Clawdbot) is a personal AI assistant users run on their own devices. In versions 2026.2.2 and below, ... |
| CVE-2026-1994 | CRITICAL | 9.8 | 0.4% | Feb 19, 2026 | The s2Member plugin for WordPress is vulnerable to privilege escalation via account takeover in all versions up to, and ... |
| CVE-2026-1646 | MEDIUM | 6.4 | 0.2% | Feb 19, 2026 | The Advance Block Extend plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the TitleColor block attr... |
| CVE-2026-1455 | MEDIUM | 4.3 | 0.1% | Feb 19, 2026 | The Whatsiplus Scheduled Notification for Woocommerce plugin for WordPress is vulnerable to Cross-Site Request Forgery i... |
| CVE-2026-1405 | CRITICAL | 9.8 | 3.2% | Feb 19, 2026 | The Slider Future plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in th... |
| CVE-2026-1373 | MEDIUM | 6.4 | 0.2% | Feb 19, 2026 | The Easy Author Image plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'author_profile_picture_... |
| CVE-2026-1055 | MEDIUM | 4.4 | 0.2% | Feb 19, 2026 | The TalkJS plugin for WordPress is vulnerable to Stored Cross-Site Scripting via admin settings in all versions up to, a... |
| CVE-2026-1047 | MEDIUM | 4.4 | 0.3% | Feb 19, 2026 | The salavat counter Plugin plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'image_url' paramet... |
| CVE-2026-1044 | MEDIUM | 4.4 | 0.3% | Feb 19, 2026 | The Tennis Court Bookings plugin for WordPress is vulnerable to Stored Cross-Site Scripting via admin settings in all ve... |
| CVE-2026-1043 | MEDIUM | 4.4 | 0.2% | Feb 19, 2026 | The PostmarkApp Email Integrator plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin settin... |
| CVE-2026-0974 | HIGH | 8.8 | 0.6% | Feb 19, 2026 | The Orderable – WordPress Restaurant Online Ordering System and Food Ordering Plugin plugin for WordPress is vulnerable ... |
| CVE-2026-0926 | CRITICAL | 9.8 | 9.4% | Feb 19, 2026 | The Prodigy Commerce plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 3.... |
| CVE-2026-0912 | HIGH | 8.8 | 0.3% | Feb 19, 2026 | The Toret Manager plugin for WordPress is vulnerable to unauthorized modification of data that can lead to privilege esc... |
| CVE-2026-0722 | MEDIUM | 6.5 | 0.4% | Feb 19, 2026 | The Shield Security plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and includin... |
| CVE-2026-0561 | MEDIUM | 6.1 | 0.3% | Feb 19, 2026 | The Shield Security plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'message' parameter in ... |
Check if your code is affected by 2026 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now