2026 CVE Vulnerabilities

52,008 CVEs published in 2026.

Filter:MEDIUMClear
CVE IDSeverityCVSSDescription
CVE-2026-32381MEDIUM5.3Missing Authorization vulnerability in raratheme App Landing Page app-landing-page allows Exploiting Incorrectly Configu...
CVE-2026-32380MEDIUM5.3Missing Authorization vulnerability in raratheme Numinous numinous allows Exploiting Incorrectly Configured Access Contr...
CVE-2026-32379MEDIUM5.3Missing Authorization vulnerability in raratheme Rara Academic rara-academic allows Exploiting Incorrectly Configured Ac...
CVE-2026-32378MEDIUM5.3Missing Authorization vulnerability in raratheme Book Landing Page book-landing-page allows Exploiting Incorrectly Confi...
CVE-2026-32377MEDIUM5.3Missing Authorization vulnerability in raratheme Pranayama Yoga pranayama-yoga allows Exploiting Incorrectly Configured ...
CVE-2026-32376MEDIUM5.3Missing Authorization vulnerability in raratheme Kalon kalon allows Exploiting Incorrectly Configured Access Control Sec...
CVE-2026-32375MEDIUM5.3Missing Authorization vulnerability in raratheme Travel Diaries travel-diaries allows Exploiting Incorrectly Configured ...
CVE-2026-32374MEDIUM5.3Missing Authorization vulnerability in raratheme The Minimal the-minimal allows Exploiting Incorrectly Configured Access...
CVE-2026-32373MEDIUM5.4Missing Authorization vulnerability in Cozy Vision SMS Alert Order Notifications sms-alert allows Exploiting Incorrectly...
CVE-2026-32372MEDIUM5.3Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in RadiusTheme ShopBuilder – El...
CVE-2026-32371MEDIUM5.3Missing Authorization vulnerability in raratheme Elegant Pink elegant-pink allows Exploiting Incorrectly Configured Acce...
CVE-2026-32370MEDIUM5.3Missing Authorization vulnerability in raratheme Influencer influencer allows Exploiting Incorrectly Configured Access C...
CVE-2026-32363MEDIUM5.3Missing Authorization vulnerability in Funlus Oy WPLifeCycle free-php-version-info allows Exploiting Incorrectly Configu...
CVE-2026-32362MEDIUM5.3Missing Authorization vulnerability in activity-log.com WP Sessions Time Monitoring Full Automatic activitytime allows E...
CVE-2026-32361MEDIUM6.5Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Marketing Fire Edi...
CVE-2026-32360MEDIUM5.9Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in richplugins Rich S...
CVE-2026-32359MEDIUM6.5Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in bPlugins Icon List...
CVE-2026-32357MEDIUM6.4Server-Side Request Forgery (SSRF) vulnerability in Katsushi Kawamori Simple Blog Card simple-blog-card allows Server Si...
CVE-2026-32356MEDIUM6.5Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in robosoft Robo Gall...
CVE-2026-32354MEDIUM5.3Insertion of Sensitive Information Into Sent Data vulnerability in magepeopleteam WpEvently mage-eventpress allows Retri...
CVE-2026-32353MEDIUM6.4Server-Side Request Forgery (SSRF) vulnerability in MailerPress Team MailerPress mailerpress allows Server Side Request ...
CVE-2026-32352MEDIUM6.5Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Elementor Elemento...
CVE-2026-32351MEDIUM5.9Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in blubrry PowerPress...
CVE-2026-32350MEDIUM5.3Missing Authorization vulnerability in wpradiant Chocolate House chocolate-house allows Exploiting Incorrectly Configure...
CVE-2026-32349MEDIUM4.9Server-Side Request Forgery (SSRF) vulnerability in Andy Fragen Embed PDF Viewer embed-pdf-viewer allows Server Side Req...

Check if your code is affected by 2026 CVEs

Strix scans your code and infrastructure for known vulnerabilities automatically.

Scan your code now