2026 CVE Vulnerabilities
83,538 CVEs published in 2026.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2026-1941 | MEDIUM | 6.4 | 0.3% | Feb 18, 2026 | The WP Event Aggregator plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'wp_events' s... |
| CVE-2026-1656 | MEDIUM | 5.3 | 0.3% | Feb 18, 2026 | The Business Directory Plugin for WordPress is vulnerable to authorization bypass due to a missing authorization check i... |
| CVE-2026-1649 | MEDIUM | 4.4 | 0.2% | Feb 18, 2026 | The Community Events plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'ce_venue_name' parameter... |
| CVE-2026-2419 | LOW | 2.7 | 0.7% | Feb 18, 2026 | The WP-DownloadManager plugin for WordPress is vulnerable to Path Traversal in all versions up to, and including, 1.69 v... |
| CVE-2026-2112 | MEDIUM | 4.3 | 0.2% | Feb 18, 2026 | The Dam Spam plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.0.... |
| CVE-2026-25421 | — | — | — | Feb 18, 2026 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. Collision with another CVE. |
| CVE-2026-1943 | MEDIUM | 4.4 | 0.3% | Feb 18, 2026 | The YayMail – WooCommerce Email Customizer plugin for WordPress is vulnerable to Stored Cross-Site Scripting via setting... |
| CVE-2026-1938 | MEDIUM | 5.3 | 0.3% | Feb 18, 2026 | The YayMail – WooCommerce Email Customizer plugin for WordPress is vulnerable to unauthorized license key deletion due t... |
| CVE-2026-1860 | MEDIUM | 4.3 | 0.3% | Feb 18, 2026 | The Kali Forms plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and includi... |
| CVE-2026-1831 | LOW | 2.7 | 0.3% | Feb 18, 2026 | The YayMail - WooCommerce Email Customizer plugin for WordPress is vulnerable to unauthorized plugin installation and ac... |
| CVE-2026-1655 | MEDIUM | 4.3 | 0.3% | Feb 18, 2026 | The EventPrime plugin for WordPress is vulnerable to unauthorized post modification due to missing authorization checks ... |
| CVE-2026-2644 | HIGH | 7.8 | 0.2% | Feb 18, 2026 | A weakness has been identified in niklasso minisat up to 2.2.0. This issue affects the function Solver::value in the lib... |
| CVE-2026-2642 | LOW | 3.3 | 0.2% | Feb 18, 2026 | A security vulnerability has been detected in ggreer the_silver_searcher up to 2.2.0. The impacted element is the functi... |
| CVE-2026-2633 | MEDIUM | 4.3 | 0.3% | Feb 18, 2026 | The Gutenberg Blocks with AI by Kadence WP plugin for WordPress is vulnerable to Missing Authorization in all versions u... |
| CVE-2026-2296 | HIGH | 7.2 | 0.6% | Feb 18, 2026 | The Product Addons for Woocommerce – Product Options with Custom Fields plugin for WordPress is vulnerable to Code Injec... |
| CVE-2026-2281 | MEDIUM | 4.4 | 0.2% | Feb 18, 2026 | The Private Comment plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'Label text' setting in al... |
| CVE-2026-2019 | HIGH | 7.2 | 0.5% | Feb 18, 2026 | The Cart All In One For WooCommerce plugin for WordPress is vulnerable to Code Injection in all versions up to, and incl... |
| CVE-2026-1937 | HIGH | 7.2 | 0.4% | Feb 18, 2026 | The YayMail – WooCommerce Email Customizer plugin for WordPress is vulnerable to unauthorized modification of data that ... |
| CVE-2026-1857 | MEDIUM | 4.3 | 0.3% | Feb 18, 2026 | The Gutenberg Blocks with AI by Kadence WP plugin for WordPress is vulnerable to Server-Side Request Forgery in all vers... |
| CVE-2026-1807 | MEDIUM | 6.4 | 0.2% | Feb 18, 2026 | The InteractiveCalculator for WordPress plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin... |
| CVE-2026-1666 | MEDIUM | 6.1 | 0.3% | Feb 18, 2026 | The Download Manager plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'redirect_to' paramete... |
| CVE-2026-1640 | MEDIUM | 4.3 | 0.3% | Feb 18, 2026 | The Taskbuilder – WordPress Project Management & Task Management plugin for WordPress is vulnerable to authorization byp... |
| CVE-2026-2641 | LOW | 3.3 | 0.2% | Feb 18, 2026 | A weakness has been identified in universal-ctags ctags up to 6.2.1. The affected element is the function parseExpressio... |
| CVE-2026-2023 | MEDIUM | 4.3 | 0.2% | Feb 18, 2026 | The WP Plugin Info Card plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and incl... |
| CVE-2026-1906 | MEDIUM | 4.3 | 0.3% | Feb 18, 2026 | The PDF Invoices & Packing Slips for WooCommerce plugin for WordPress is vulnerable to Insecure Direct Object Reference ... |
Check if your code is affected by 2026 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now