2026 CVE Vulnerabilities

52,080 CVEs published in 2026.

Filter:MEDIUMClear
CVE IDSeverityCVSSDescription
CVE-2026-32346MEDIUM5.3Missing Authorization vulnerability in raratheme Travel Agency travel-agency allows Exploiting Incorrectly Configured Ac...
CVE-2026-32345MEDIUM5.3Missing Authorization vulnerability in raratheme Perfect Portfolio perfect-portfolio allows Exploiting Incorrectly Confi...
CVE-2026-32344MEDIUM4.3Cross-Site Request Forgery (CSRF) vulnerability in desertthemes Corpiva corpiva allows Cross Site Request Forgery.This i...
CVE-2026-32343MEDIUM4.3Cross-Site Request Forgery (CSRF) vulnerability in Magazine3 Easy Table of Contents easy-table-of-contents allows Cross ...
CVE-2026-32342MEDIUM4.3Cross-Site Request Forgery (CSRF) vulnerability in Ays Pro Quiz Maker quiz-maker allows Cross Site Request Forgery.This ...
CVE-2026-32341MEDIUM5.3Missing Authorization vulnerability in raratheme Benevolent benevolent allows Exploiting Incorrectly Configured Access C...
CVE-2026-32340MEDIUM5.3Missing Authorization vulnerability in raratheme Business One Page business-one-page allows Exploiting Incorrectly Confi...
CVE-2026-32339MEDIUM5.3Missing Authorization vulnerability in raratheme Bakes And Cakes bakes-and-cakes allows Exploiting Incorrectly Configure...
CVE-2026-32338MEDIUM5.3Missing Authorization vulnerability in raratheme Construction Landing Page construction-landing-page allows Exploiting I...
CVE-2026-32337MEDIUM5.3Missing Authorization vulnerability in raratheme Preschool and Kindergarten preschool-and-kindergarten allows Exploiting...
CVE-2026-32336MEDIUM5.3Missing Authorization vulnerability in raratheme Rara Business rara-business allows Exploiting Incorrectly Configured Ac...
CVE-2026-32335MEDIUM5.3Missing Authorization vulnerability in raratheme The Conference the-conference allows Exploiting Incorrectly Configured ...
CVE-2026-32334MEDIUM5.3Missing Authorization vulnerability in raratheme JobScout jobscout allows Exploiting Incorrectly Configured Access Contr...
CVE-2026-32332MEDIUM5.3Missing Authorization vulnerability in Ays Pro Easy Form easy-form allows Exploiting Incorrectly Configured Access Contr...
CVE-2026-32331MEDIUM5.4Missing Authorization vulnerability in Israpil Textmetrics webtexttool allows Exploiting Incorrectly Configured Access C...
CVE-2026-32330MEDIUM4.3Cross-Site Request Forgery (CSRF) vulnerability in 10Web Photo Gallery by 10Web photo-gallery allows Cross Site Request ...
CVE-2026-32329MEDIUM5.3Missing Authorization vulnerability in Ays Pro Advanced Related Posts advanced-related-posts allows Exploiting Incorrect...
CVE-2026-32328MEDIUM5.4Cross-Site Request Forgery (CSRF) vulnerability in shufflehound Lemmony lemmony allows Cross Site Request Forgery.This i...
CVE-2026-32322MEDIUM5.3soroban-sdk is a Rust SDK for Soroban contracts. Prior to 22.0.11, 23.5.3, and 25.3.0, The Fr (scalar field) types for B...
CVE-2026-31949MEDIUM6.5LibreChat is a ChatGPT clone with additional features. Prior to 0.8.3-rc1, a Denial of Service (DoS) vulnerability exist...
CVE-2026-31919MEDIUM4.3Missing Authorization vulnerability in Josh Kohlbach Advanced Coupons for WooCommerce Coupons advanced-coupons-for-wooco...
CVE-2026-31918MEDIUM6.5Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in immonex immonex Ki...
CVE-2026-31916MEDIUM5.3Missing Authorization vulnerability in Iulia Cazan Latest Post Shortcode latest-post-shortcode allows Exploiting Incorre...
CVE-2026-31915MEDIUM5.3Missing Authorization vulnerability in UX-themes Flatsome flatsome allows Exploiting Incorrectly Configured Access Contr...
CVE-2026-31864MEDIUM6.8JumpServer is an open source bastion host and an operation and maintenance security audit system. a Server-Side Template...

Check if your code is affected by 2026 CVEs

Strix scans your code and infrastructure for known vulnerabilities automatically.

Scan your code now