2026 CVE Vulnerabilities
53,516 CVEs published in 2026.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2026-24381 | MEDIUM | 5.4 | 0.1% | Jan 22, 2026 | Server-Side Request Forgery (SSRF) vulnerability in ThemeGoods PhotoMe photome allows Server Side Request Forgery.This i... |
| CVE-2026-24380 | MEDIUM | 5.3 | 0.2% | Jan 22, 2026 | Missing Authorization vulnerability in Metagauss EventPrime eventprime-event-calendar-management allows Exploiting Incor... |
| CVE-2026-24379 | MEDIUM | 6.5 | 0.2% | Jan 22, 2026 | Authorization Bypass Through User-Controlled Key vulnerability in wpjobportal WP Job Portal wp-job-portal allows Exploit... |
| CVE-2026-24377 | MEDIUM | 4.3 | 0.2% | Jan 22, 2026 | Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in POSIMYTH Nexter Blocks the-p... |
| CVE-2026-24374 | MEDIUM | 5.4 | 0.1% | Jan 22, 2026 | Cross-Site Request Forgery (CSRF) vulnerability in Metagauss RegistrationMagic custom-registration-form-builder-with-sub... |
| CVE-2026-24371 | MEDIUM | 4.3 | 0.2% | Jan 22, 2026 | Missing Authorization vulnerability in bookingalgorithms BA Book Everything ba-book-everything allows Exploiting Incorre... |
| CVE-2026-24368 | MEDIUM | 5.3 | 0.2% | Jan 22, 2026 | Missing Authorization vulnerability in ThemeOne The Grid allows Exploiting Incorrectly Configured Access Control Securit... |
| CVE-2026-24366 | MEDIUM | 5.3 | 0.2% | Jan 22, 2026 | Missing Authorization vulnerability in YITHEMES YITH WooCommerce Request A Quote yith-woocommerce-request-a-quote allows... |
| CVE-2026-24365 | MEDIUM | 5.4 | 0.1% | Jan 22, 2026 | Cross-Site Request Forgery (CSRF) vulnerability in storeapps Stock Manager for WooCommerce woocommerce-stock-manager all... |
| CVE-2026-24361 | MEDIUM | 6.5 | 0.1% | Jan 22, 2026 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in ThimPress LearnPre... |
| CVE-2026-24360 | MEDIUM | 4.4 | 0.1% | Jan 22, 2026 | Server-Side Request Forgery (SSRF) vulnerability in Craig Hewitt Seriously Simple Podcasting seriously-simple-podcasting... |
| CVE-2026-24358 | MEDIUM | 4.3 | 0.2% | Jan 22, 2026 | Missing Authorization vulnerability in ExpressTech Systems Quiz And Survey Master quiz-master-next allows Exploiting Inc... |
| CVE-2026-24357 | MEDIUM | 4.3 | 0.2% | Jan 22, 2026 | Missing Authorization vulnerability in Brecht WP Recipe Maker wp-recipe-maker allows Exploiting Incorrectly Configured A... |
| CVE-2026-24356 | MEDIUM | 4.9 | 0.2% | Jan 22, 2026 | Missing Authorization vulnerability in Roxnor GetGenie getgenie allows Exploiting Incorrectly Configured Access Control ... |
| CVE-2026-24355 | MEDIUM | 6.5 | 0.1% | Jan 22, 2026 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in favethemes Houzez ... |
| CVE-2026-24354 | MEDIUM | 6.5 | 0.1% | Jan 22, 2026 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in PenciDesign Penci ... |
| CVE-2026-24353 | MEDIUM | 4.3 | 0.2% | Jan 22, 2026 | Missing Authorization vulnerability in wpeverest User Registration user-registration allows Exploiting Incorrectly Confi... |
| CVE-2026-23976 | MEDIUM | 5.9 | 0.2% | Jan 22, 2026 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WP Chill Modula Im... |
| CVE-2026-23974 | MEDIUM | 5.3 | 0.2% | Jan 22, 2026 | Missing Authorization vulnerability in uxper Golo golo allows Exploiting Incorrectly Configured Access Control Security ... |
| CVE-2026-23764 | MEDIUM | 6.8 | 0.1% | Jan 22, 2026 | VB-Audio Voicemeeter, Voicemeeter Banana, and Voicemeeter Potato (versions ending in 1.1.1.9, 2.1.1.9, and 3.1.1.9 and e... |
| CVE-2026-23762 | MEDIUM | 6.9 | 0.2% | Jan 22, 2026 | VB-Audio Voicemeeter, Voicemeeter Banana, and Voicemeeter Potato (versions ending in 1.1.1.9, 2.1.1.9, and 3.1.1.9 and e... |
| CVE-2026-23761 | MEDIUM | 6.9 | 0.2% | Jan 22, 2026 | VB-Audio Voicemeeter, Voicemeeter Banana, and Voicemeeter Potato (versions ending in 1.1.1.9, 2.1.1.9, and 3.1.1.9 and e... |
| CVE-2026-22483 | MEDIUM | 5.4 | 0.1% | Jan 22, 2026 | Cross-Site Request Forgery (CSRF) vulnerability in winkm89 teachPress teachpress allows Cross Site Request Forgery.This ... |
| CVE-2026-22482 | MEDIUM | 4.9 | 0.1% | Jan 22, 2026 | Server-Side Request Forgery (SSRF) vulnerability in wbolt.com IMGspider imgspider allows Server Side Request Forgery.Thi... |
| CVE-2026-22481 | MEDIUM | 4.3 | 0.2% | Jan 22, 2026 | Missing Authorization vulnerability in Rasedul Haque Rumi BD Courier Order Ratio Checker bd-courier-order-ratio-checker ... |
Check if your code is affected by 2026 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now