2026 CVE Vulnerabilities
85,248 CVEs published in 2026.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2026-1095 | MEDIUM | 6.4 | 0.3% | Jan 24, 2026 | The Canto Testimonials plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'fx' shortcode attribut... |
| CVE-2026-1088 | MEDIUM | 4.3 | 0.2% | Jan 24, 2026 | The Login Page Editor plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and includ... |
| CVE-2026-1084 | MEDIUM | 4.4 | 0.3% | Jan 24, 2026 | The Cookie consent for developers plugin for WordPress is vulnerable to Stored Cross-Site Scripting via multiple setting... |
| CVE-2026-1081 | MEDIUM | 4.3 | 0.2% | Jan 24, 2026 | The Set Bulk Post Categories plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and... |
| CVE-2026-1076 | MEDIUM | 4.3 | 0.2% | Jan 24, 2026 | The Star Review Manager plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and incl... |
| CVE-2026-1075 | MEDIUM | 4.3 | 0.2% | Jan 24, 2026 | The ZT Captcha plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.... |
| CVE-2026-1070 | MEDIUM | 4.3 | 0.2% | Jan 24, 2026 | The Alex User Counter plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and includ... |
| CVE-2026-0807 | HIGH | 7.2 | 0.3% | Jan 24, 2026 | The Frontis Blocks plugin for WordPress is vulnerable to Server-Side Request Forgery in all versions up to, and includin... |
| CVE-2026-0806 | MEDIUM | 4.9 | 0.4% | Jan 24, 2026 | The WP-ClanWars plugin for WordPress is vulnerable to SQL Injection via the 'orderby' parameter in all versions up to, a... |
| CVE-2026-24649 | — | — | — | Jan 24, 2026 | Rejected reason: Not used |
| CVE-2026-24648 | — | — | — | Jan 24, 2026 | Rejected reason: Not used |
| CVE-2026-24647 | — | — | — | Jan 24, 2026 | Rejected reason: Not used |
| CVE-2026-24646 | — | — | — | Jan 24, 2026 | Rejected reason: Not used |
| CVE-2026-24645 | — | — | — | Jan 24, 2026 | Rejected reason: Not used |
| CVE-2026-24644 | — | — | — | Jan 24, 2026 | Rejected reason: Not used |
| CVE-2026-24643 | — | — | — | Jan 24, 2026 | Rejected reason: Not used |
| CVE-2026-24642 | — | — | — | Jan 24, 2026 | Rejected reason: Not used |
| CVE-2026-24469 | HIGH | 7.5 | 0.6% | Jan 24, 2026 | C++ HTTP Server is an HTTP/1.1 server built to handle client connections and serve HTTP requests. Versions 1.0 and below... |
| CVE-2026-24422 | HIGH | 7.5 | 0.4% | Jan 24, 2026 | phpMyFAQ is an open source FAQ web application. In versions 4.0.16 and below, multiple public API endpoints improperly e... |
| CVE-2026-24420 | MEDIUM | 6.5 | 0.4% | Jan 24, 2026 | phpMyFAQ is an open source FAQ web application. Versions 4.0.16 and below allow an authenticated user without the dlatta... |
| CVE-2026-24421 | MEDIUM | 6.5 | 1.7% | Jan 24, 2026 | phpMyFAQ is an open source FAQ web application. Versions 4.0.16 and below have flawed authorization logic which exposes ... |
| CVE-2026-24412 | HIGH | 8.8 | 0.5% | Jan 24, 2026 | iccDEV provides libraries and tools for interacting with, manipulating, and applying ICC color management profiles. Vers... |
| CVE-2026-24411 | HIGH | 8.8 | 0.3% | Jan 24, 2026 | iccDEV provides libraries and tools for interacting with, manipulating, and applying ICC color management profiles. Vers... |
| CVE-2026-24410 | HIGH | 8.8 | 0.3% | Jan 24, 2026 | iccDEV provides libraries and tools for interacting with, manipulating, and applying ICC color management profiles. Vers... |
| CVE-2026-24409 | HIGH | 8.8 | 0.3% | Jan 24, 2026 | iccDEV provides libraries and tools for interacting with, manipulating, and applying ICC color management profiles. Vers... |
Check if your code is affected by 2026 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now