2026 CVE Vulnerabilities
53,393 CVEs published in 2026.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2026-25020 | MEDIUM | 4.3 | 0.2% | Feb 3, 2026 | Missing Authorization vulnerability in WP connect WP Sync for Notion wp-sync-for-notion allows Exploiting Incorrectly Co... |
| CVE-2026-25019 | MEDIUM | 5.3 | 0.2% | Feb 3, 2026 | Missing Authorization vulnerability in Vito Peleg Atarim atarim-visual-collaboration allows Exploiting Incorrectly Confi... |
| CVE-2026-25016 | MEDIUM | 4.3 | 0.2% | Feb 3, 2026 | Missing Authorization vulnerability in Nelio Software Nelio Popups nelio-popups allows Exploiting Incorrectly Configured... |
| CVE-2026-25015 | MEDIUM | 4.3 | 0.1% | Feb 3, 2026 | Cross-Site Request Forgery (CSRF) vulnerability in Stiofan UsersWP userswp allows Cross Site Request Forgery.This issue ... |
| CVE-2026-25014 | MEDIUM | 4.3 | 0.1% | Feb 3, 2026 | Cross-Site Request Forgery (CSRF) vulnerability in themelooks Enter Addons enteraddons allows Cross Site Request Forgery... |
| CVE-2026-25012 | MEDIUM | 5.3 | 0.2% | Feb 3, 2026 | Missing Authorization vulnerability in gfazioli WP Bannerize Pro wp-bannerize-pro allows Exploiting Incorrectly Configur... |
| CVE-2026-25011 | MEDIUM | 4.3 | 0.2% | Feb 3, 2026 | Missing Authorization vulnerability in Northern Beaches Websites WP Custom Admin Interface wp-custom-admin-interface all... |
| CVE-2026-25010 | MEDIUM | 5.3 | 0.2% | Feb 3, 2026 | Missing Authorization vulnerability in ILLID Share This Image share-this-image allows Exploiting Incorrectly Configured ... |
| CVE-2026-24998 | MEDIUM | 5.3 | 0.2% | Feb 3, 2026 | Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in WPMU DEV - Your All-in-One W... |
| CVE-2026-24997 | MEDIUM | 5.3 | 0.2% | Feb 3, 2026 | Missing Authorization vulnerability in Wired Impact Wired Impact Volunteer Management wired-impact-volunteer-management ... |
| CVE-2026-24996 | MEDIUM | 4.3 | 0.2% | Feb 3, 2026 | Missing Authorization vulnerability in wpelemento WPElemento Importer wpelemento-importer allows Exploiting Incorrectly ... |
| CVE-2026-24995 | MEDIUM | 4.3 | 0.2% | Feb 3, 2026 | Missing Authorization vulnerability in Iulia Cazan Latest Post Shortcode latest-post-shortcode allows Exploiting Incorre... |
| CVE-2026-24994 | MEDIUM | 5.3 | 0.2% | Feb 3, 2026 | Missing Authorization vulnerability in sunshinephotocart Sunshine Photo Cart sunshine-photo-cart allows Exploiting Incor... |
| CVE-2026-24992 | MEDIUM | 5.3 | 0.2% | Feb 3, 2026 | Insertion of Sensitive Information Into Sent Data vulnerability in WPFactory Advanced WooCommerce Product Sales Reportin... |
| CVE-2026-24991 | MEDIUM | 5.3 | 0.2% | Feb 3, 2026 | Authorization Bypass Through User-Controlled Key vulnerability in HT Plugins Extensions For CF7 extensions-for-cf7 allow... |
| CVE-2026-24990 | MEDIUM | 5.4 | 0.2% | Feb 3, 2026 | Missing Authorization vulnerability in Fahad Mahmood WP Docs wp-docs allows Exploiting Incorrectly Configured Access Con... |
| CVE-2026-24988 | MEDIUM | 6.5 | 0.1% | Feb 3, 2026 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Brian Hogg The Eve... |
| CVE-2026-24986 | MEDIUM | 5.4 | 0.1% | Feb 3, 2026 | Cross-Site Request Forgery (CSRF) vulnerability in wp.insider Simple Membership WP user Import simple-membership-wp-user... |
| CVE-2026-24985 | MEDIUM | 4.3 | 0.2% | Feb 3, 2026 | Missing Authorization vulnerability in approveme WP Forms Signature Contract Add-On wp-forms-signature-contract-add-on a... |
| CVE-2026-24984 | MEDIUM | 6.5 | 0.3% | Feb 3, 2026 | Missing Authorization vulnerability in Brecht Visual Link Preview visual-link-preview allows Exploiting Incorrectly Conf... |
| CVE-2026-24982 | MEDIUM | 5.3 | 0.2% | Feb 3, 2026 | Missing Authorization vulnerability in Brainstorm Force Spectra ultimate-addons-for-gutenberg allows Exploiting Incorrec... |
| CVE-2026-24967 | MEDIUM | 5.3 | 0.2% | Feb 3, 2026 | Missing Authorization vulnerability in ameliabooking Amelia ameliabooking allows Exploiting Incorrectly Configured Acces... |
| CVE-2026-24966 | MEDIUM | 4.3 | 0.1% | Feb 3, 2026 | Cross-Site Request Forgery (CSRF) vulnerability in Copyscape Copyscape Premium copyscape-premium allows Cross Site Reque... |
| CVE-2026-24965 | MEDIUM | 4.3 | 0.2% | Feb 3, 2026 | Missing Authorization vulnerability in Wasiliy Strecker / ContestGallery developer Contest Gallery contest-gallery allow... |
| CVE-2026-24962 | MEDIUM | 4.3 | 0.1% | Feb 3, 2026 | Cross-Site Request Forgery (CSRF) vulnerability in Brainstorm Force Sigmize sigmize allows Cross Site Request Forgery.Th... |
Check if your code is affected by 2026 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now