2026 CVE Vulnerabilities

51,445 CVEs published in 2026.

Filter:MEDIUMClear
CVE IDSeverityCVSSDescription
CVE-2026-32405MEDIUM5.3Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in xtemos WoodMart woodmart all...
CVE-2026-32404MEDIUM5.3Missing Authorization vulnerability in Studio99 Studio99 WP Monitor studio99-wp-monitor allows Exploiting Incorrectly Co...
CVE-2026-32403MEDIUM6.5Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in toocheke Toocheke ...
CVE-2026-32402MEDIUM5.3Missing Authorization vulnerability in Ays Pro Image Slider by Ays ays-slider allows Exploiting Incorrectly Configured A...
CVE-2026-32398MEDIUM6.5Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition') vulnerability in Subrata Mal...
CVE-2026-32397MEDIUM5.3Missing Authorization vulnerability in YMC Filter & Grids ymc-smart-filter allows Exploiting Incorrectly Configured Acce...
CVE-2026-32396MEDIUM5.3Missing Authorization vulnerability in RadiusTheme Team tlp-team allows Exploiting Incorrectly Configured Access Control...
CVE-2026-32395MEDIUM5.3Missing Authorization vulnerability in Xpro Xpro Addons For Beaver Builder – Lite xpro-addons-beaver-builder-elementor a...
CVE-2026-32394MEDIUM4.3Missing Authorization vulnerability in PublishPress PublishPress Capabilities capability-manager-enhanced allows Exploit...
CVE-2026-32391MEDIUM5.4Missing Authorization vulnerability in linethemes SmartFix smartfix allows Exploiting Incorrectly Configured Access Cont...
CVE-2026-32390MEDIUM5.4Missing Authorization vulnerability in linethemes Nanosoft nanosoft allows Exploiting Incorrectly Configured Access Cont...
CVE-2026-32388MEDIUM5.4Missing Authorization vulnerability in linethemes GLB glb allows Exploiting Incorrectly Configured Access Control Securi...
CVE-2026-32387MEDIUM5.3Missing Authorization vulnerability in Noor Alam Checkout for PayPal checkout-for-paypal allows Exploiting Incorrectly C...
CVE-2026-32386MEDIUM4.3Missing Authorization vulnerability in EnvoThemes Envo Extra envo-extra allows Exploiting Incorrectly Configured Access ...
CVE-2026-32385MEDIUM5.4Missing Authorization vulnerability in Metagauss RegistrationMagic custom-registration-form-builder-with-submission-mana...
CVE-2026-32383MEDIUM5.3Missing Authorization vulnerability in raratheme Ridhi ridhi allows Exploiting Incorrectly Configured Access Control Sec...
CVE-2026-32382MEDIUM5.3Missing Authorization vulnerability in raratheme Digital Download digital-download allows Exploiting Incorrectly Configu...
CVE-2026-32381MEDIUM5.3Missing Authorization vulnerability in raratheme App Landing Page app-landing-page allows Exploiting Incorrectly Configu...
CVE-2026-32380MEDIUM5.3Missing Authorization vulnerability in raratheme Numinous numinous allows Exploiting Incorrectly Configured Access Contr...
CVE-2026-32379MEDIUM5.3Missing Authorization vulnerability in raratheme Rara Academic rara-academic allows Exploiting Incorrectly Configured Ac...
CVE-2026-32378MEDIUM5.3Missing Authorization vulnerability in raratheme Book Landing Page book-landing-page allows Exploiting Incorrectly Confi...
CVE-2026-32377MEDIUM5.3Missing Authorization vulnerability in raratheme Pranayama Yoga pranayama-yoga allows Exploiting Incorrectly Configured ...
CVE-2026-32376MEDIUM5.3Missing Authorization vulnerability in raratheme Kalon kalon allows Exploiting Incorrectly Configured Access Control Sec...
CVE-2026-32375MEDIUM5.3Missing Authorization vulnerability in raratheme Travel Diaries travel-diaries allows Exploiting Incorrectly Configured ...
CVE-2026-32374MEDIUM5.3Missing Authorization vulnerability in raratheme The Minimal the-minimal allows Exploiting Incorrectly Configured Access...

Check if your code is affected by 2026 CVEs

Strix scans your code and infrastructure for known vulnerabilities automatically.

Scan your code now