2026 CVE Vulnerabilities
83,649 CVEs published in 2026.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2026-0753 | HIGH | 7.2 | 0.3% | Feb 14, 2026 | The Super Simple Contact Form plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'sscf_name' p... |
| CVE-2026-0751 | MEDIUM | 6.4 | 0.3% | Feb 14, 2026 | The Payment Page | Payment Form for Stripe plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'pr... |
| CVE-2026-0745 | MEDIUM | 5.5 | 0.3% | Feb 14, 2026 | The User Language Switch plugin for WordPress is vulnerable to Server-Side Request Forgery in all versions up to, and in... |
| CVE-2026-0736 | MEDIUM | 6.4 | 0.3% | Feb 14, 2026 | The Chatbot for WordPress by Collect.chat plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the '_in... |
| CVE-2026-0735 | MEDIUM | 4.4 | 0.2% | Feb 14, 2026 | The User Language Switch plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'tab_color_picker_lan... |
| CVE-2026-0727 | MEDIUM | 5.4 | 0.3% | Feb 14, 2026 | The Accordion and Accordion Slider plugin for WordPress is vulnerable to authorization bypass in all versions up to, and... |
| CVE-2026-0693 | MEDIUM | 4.4 | 0.2% | Feb 14, 2026 | The Allow HTML in Category Descriptions plugin for WordPress is vulnerable to Stored Cross-Site Scripting via category d... |
| CVE-2026-0559 | MEDIUM | 6.4 | 0.2% | Feb 14, 2026 | The MasterStudy LMS WordPress Plugin – for Online Courses and Education plugin for WordPress is vulnerable to Stored Cro... |
| CVE-2026-0557 | MEDIUM | 6.4 | 0.2% | Feb 14, 2026 | The WP Data Access plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'wpda_app' shortco... |
| CVE-2026-1932 | MEDIUM | 5.3 | 0.3% | Feb 14, 2026 | The Appointment Booking Calendar Plugin – Bookr plugin for WordPress is vulnerable to unauthorized modification of data ... |
| CVE-2026-2469 | HIGH | 7.6 | 0.4% | Feb 14, 2026 | Versions of the package directorytree/imapengine before 1.22.3 are vulnerable to Improper Neutralization of Special Elem... |
| CVE-2026-2144 | HIGH | 8.1 | 0.5% | Feb 14, 2026 | The Magic Login Mail or QR Code plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and in... |
| CVE-2026-2027 | MEDIUM | 4.4 | 0.2% | Feb 14, 2026 | The AMP Enhancer – Compatibility Layer for Official AMP Plugin for WordPress is vulnerable to Stored Cross-Site Scriptin... |
| CVE-2026-1983 | MEDIUM | 4.3 | 0.1% | Feb 14, 2026 | The SEATT: Simple Event Attendance plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up t... |
| CVE-2026-1912 | MEDIUM | 6.4 | 0.2% | Feb 14, 2026 | The Citations tools plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'code' parameter in the 'c... |
| CVE-2026-1904 | MEDIUM | 6.4 | 0.2% | Feb 14, 2026 | The Simple Wp colorfull Accordion plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'title' para... |
| CVE-2026-1754 | MEDIUM | 6.1 | 0.2% | Feb 14, 2026 | The personal-authors-category plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the URL path in a... |
| CVE-2026-1164 | MEDIUM | 6.1 | 0.2% | Feb 14, 2026 | The Easy Voice Mail plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘message’ parameter in all... |
| CVE-2026-0692 | HIGH | 7.5 | 0.3% | Feb 14, 2026 | The BlueSnap Payment Gateway for WooCommerce plugin for WordPress is vulnerable to Missing Authorization in all versions... |
| CVE-2026-26303 | — | — | — | Feb 14, 2026 | Rejected reason: Not used |
| CVE-2026-26302 | — | — | — | Feb 14, 2026 | Rejected reason: Not used |
| CVE-2026-26301 | — | — | — | Feb 14, 2026 | Rejected reason: Not used |
| CVE-2026-26300 | — | — | — | Feb 14, 2026 | Rejected reason: Not used |
| CVE-2026-26299 | — | — | — | Feb 14, 2026 | Rejected reason: Not used |
| CVE-2026-26298 | — | — | — | Feb 14, 2026 | Rejected reason: Not used |
Check if your code is affected by 2026 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now