2026 CVE Vulnerabilities
85,188 CVEs published in 2026.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2026-24991 | MEDIUM | 5.3 | 0.2% | Feb 3, 2026 | Authorization Bypass Through User-Controlled Key vulnerability in HT Plugins Extensions For CF7 extensions-for-cf7 allow... |
| CVE-2026-24990 | MEDIUM | 5.4 | 0.2% | Feb 3, 2026 | Missing Authorization vulnerability in Fahad Mahmood WP Docs wp-docs allows Exploiting Incorrectly Configured Access Con... |
| CVE-2026-24988 | MEDIUM | 6.5 | 0.1% | Feb 3, 2026 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Brian Hogg The Eve... |
| CVE-2026-24986 | MEDIUM | 5.4 | 0.1% | Feb 3, 2026 | Cross-Site Request Forgery (CSRF) vulnerability in wp.insider Simple Membership WP user Import simple-membership-wp-user... |
| CVE-2026-24985 | MEDIUM | 4.3 | 0.2% | Feb 3, 2026 | Missing Authorization vulnerability in approveme WP Forms Signature Contract Add-On wp-forms-signature-contract-add-on a... |
| CVE-2026-24984 | MEDIUM | 6.5 | 0.3% | Feb 3, 2026 | Missing Authorization vulnerability in Brecht Visual Link Preview visual-link-preview allows Exploiting Incorrectly Conf... |
| CVE-2026-24982 | MEDIUM | 5.3 | 0.2% | Feb 3, 2026 | Missing Authorization vulnerability in Brainstorm Force Spectra ultimate-addons-for-gutenberg allows Exploiting Incorrec... |
| CVE-2026-24967 | MEDIUM | 5.3 | 0.2% | Feb 3, 2026 | Missing Authorization vulnerability in ameliabooking Amelia ameliabooking allows Exploiting Incorrectly Configured Acces... |
| CVE-2026-24966 | MEDIUM | 4.3 | 0.1% | Feb 3, 2026 | Cross-Site Request Forgery (CSRF) vulnerability in Copyscape Copyscape Premium copyscape-premium allows Cross Site Reque... |
| CVE-2026-24965 | MEDIUM | 4.3 | 0.2% | Feb 3, 2026 | Missing Authorization vulnerability in Wasiliy Strecker / ContestGallery developer Contest Gallery contest-gallery allow... |
| CVE-2026-24962 | MEDIUM | 4.3 | 0.1% | Feb 3, 2026 | Cross-Site Request Forgery (CSRF) vulnerability in Brainstorm Force Sigmize sigmize allows Cross Site Request Forgery.Th... |
| CVE-2026-24961 | MEDIUM | 5.4 | 0.2% | Feb 3, 2026 | Server-Side Request Forgery (SSRF) vulnerability in ThemeGoods Grand Blog grandblog allows Server Side Request Forgery.T... |
| CVE-2026-24958 | MEDIUM | 6.5 | 0.2% | Feb 3, 2026 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Crocoblock JetElem... |
| CVE-2026-24957 | MEDIUM | 6.5 | 0.2% | Feb 3, 2026 | Missing Authorization vulnerability in WP Chill Strong Testimonials strong-testimonials allows Exploiting Incorrectly Co... |
| CVE-2026-24954 | HIGH | 8.8 | 0.4% | Feb 3, 2026 | Deserialization of Untrusted Data vulnerability in magepeopleteam WpEvently mage-eventpress allows Object Injection.This... |
| CVE-2026-24952 | MEDIUM | 6.5 | 0.2% | Feb 3, 2026 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Craig Hewitt Serio... |
| CVE-2026-24951 | MEDIUM | 4.3 | 0.2% | Feb 3, 2026 | Missing Authorization vulnerability in Saad Iqbal myCred mycred allows Exploiting Incorrectly Configured Access Control ... |
| CVE-2026-24947 | MEDIUM | 4.3 | 0.2% | Feb 3, 2026 | Missing Authorization vulnerability in LA-Studio LA-Studio Element Kit for Elementor lastudio-element-kit allows Exploit... |
| CVE-2026-24945 | MEDIUM | 5.3 | 0.2% | Feb 3, 2026 | Missing Authorization vulnerability in Themefic Ultimate Addons for Contact Form 7 ultimate-addons-for-contact-form-7 al... |
| CVE-2026-24942 | MEDIUM | 4.3 | 0.1% | Feb 3, 2026 | Cross-Site Request Forgery (CSRF) vulnerability in magepeopleteam WpEvently mage-eventpress allows Cross Site Request Fo... |
| CVE-2026-24940 | MEDIUM | 4.3 | 0.2% | Feb 3, 2026 | Missing Authorization vulnerability in Themefic Travelfic Toolkit travelfic-toolkit allows Exploiting Incorrectly Config... |
| CVE-2026-24939 | MEDIUM | 4.3 | 0.2% | Feb 3, 2026 | Missing Authorization vulnerability in WP Chill Modula Image Gallery modula-best-grid-gallery allows Exploiting Incorrec... |
| CVE-2026-24938 | MEDIUM | 5.9 | 0.2% | Feb 3, 2026 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Ajay Better Search... |
| CVE-2026-1814 | MEDIUM | 6.8 | 0.1% | Feb 3, 2026 | Rapid7 Nexpose versions 6.4.50 and later are vulnerable to an insufficient entropy issue in the CredentialsKeyStorePassw... |
| CVE-2026-1312 | MEDIUM | 5.4 | 0.8% | Feb 3, 2026 | An issue was discovered in 6.0 before 6.0.2, 5.2 before 5.2.11, and 4.2 before 4.2.28. `.QuerySet.order_by()` is subject... |
Check if your code is affected by 2026 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now