CVE Vulnerability Database
Search and browse 390,021 CVE records with CVSS scores, EPSS exploit predictions, and CISA KEV status.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2026-15297 | MEDIUM | 6.1 | 0.3% | Jul 10, 2026 | The Newsletter, SMTP, Email marketing and Subscribe forms by Brevo (formely Sendinblue) plugin for WordPress is vulnerab... |
| CVE-2026-15296 | MEDIUM | 6.4 | 0.3% | Jul 10, 2026 | The affiliate-toolkit – WP Affiliate Plugin with Amazon plugin for WordPress is vulnerable to Stored Cross-Site Scriptin... |
| CVE-2026-15293 | HIGH | 8 | 0.3% | Jul 10, 2026 | The WP Business Intelligence Lite plugin for WordPress is vulnerable to authorization bypass in all versions up to, and ... |
| CVE-2026-15292 | MEDIUM | 6.4 | 0.2% | Jul 10, 2026 | The Sudoku Shortcode plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'background' parameter in... |
| CVE-2026-15291 | HIGH | 7.5 | 0.5% | Jul 10, 2026 | The Chat Help – Click to Chat Button & Form plugin for WordPress is vulnerable to Sensitive Information Exposure in all ... |
| CVE-2026-15290 | HIGH | 7.5 | 0.4% | Jul 10, 2026 | The Ultimate Member – User Profile, Registration, Login, Member Directory, Content Restriction & Membership Plugin plugi... |
| CVE-2026-15289 | MEDIUM | 5.9 | 0.3% | Jul 10, 2026 | The Booking calendar, Appointment Booking System plugin for WordPress is vulnerable to time-based SQL Injection via the ... |
| CVE-2026-15288 | HIGH | 7.5 | 0.3% | Jul 10, 2026 | The SureForms – Drag and Drop Form Builder for WordPress plugin for WordPress is vulnerable to Improper Input Validation... |
| CVE-2026-15287 | MEDIUM | 6.5 | 0.3% | Jul 10, 2026 | The rtMedia for WordPress, BuddyPress and bbPress plugin for WordPress is vulnerable to time-based SQL Injection via the... |
| CVE-2026-15286 | MEDIUM | 4.3 | 0.3% | Jul 10, 2026 | The Gutenberg Blocks with AI by Kadence WP – Page Builder Features plugin for WordPress is vulnerable to unauthorized po... |
| CVE-2026-15285 | MEDIUM | 6.4 | 0.3% | Jul 10, 2026 | The Plus Addons for Elementor plugin for WordPress was vulnerable to Authenticated (Contributor+) Stored Cross-Site Scri... |
| CVE-2026-15284 | MEDIUM | 6.4 | 0.3% | Jul 10, 2026 | The King Addons for Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'form_page_id' p... |
| CVE-2026-15283 | MEDIUM | 4.4 | 0.2% | Jul 10, 2026 | The WPvivid Backup for MainWP plugin for WordPress is vulnerable to Stored Cross-Site Scripting via admin settings in al... |
| CVE-2026-15282 | CRITICAL | 9.8 | 0.7% | Jul 10, 2026 | The Instant Appointment plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation... |
| CVE-2026-5069 | MEDIUM | 5.4 | 0.2% | Jul 10, 2026 | The Fluent Forms plugin for WordPress is vulnerable to incorrect authorization via the 'subscription_id' parameter in ve... |
| CVE-2026-54423 | HIGH | 8.2 | 0.5% | Jul 10, 2026 | In OpenStack Ironic before 37.0.1, an Ironic user with the ability to deploy nodes using the IPMI management interface c... |
| CVE-2026-44918 | MEDIUM | 5.5 | 0.4% | Jul 10, 2026 | OpenStack Ironic through before 37.0.1 allows creation or modification of nodes cross-project without authorization. |
| CVE-2026-15329 | MEDIUM | 4.3 | 0.2% | Jul 10, 2026 | A vulnerability was found in zhayujie CowAgent up to 2.1.0. This issue affects the function BrowserTool._do_navigate of ... |
| CVE-2026-15326 | LOW | 3.8 | 0.4% | Jul 10, 2026 | A vulnerability was identified in halo-dev halo up to 2.24.2. This affects the function ThemeUtils.unzipThemeTo of the f... |
| CVE-2026-15321 | LOW | 2.4 | 0.2% | Jul 10, 2026 | A vulnerability was found in MyEMS up to 6.4.0. The affected element is the function on_post of the file myems-api/core/... |
| CVE-2026-15070 | HIGH | 8.8 | 0.3% | Jul 10, 2026 | The Salon Booking System – Free Version plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions... |
| CVE-2026-14894 | CRITICAL | 9.8 | 0.5% | Jul 10, 2026 | The Super Forms – Drag & Drop Form Builder plugin for WordPress is vulnerable to Arbitrary File Upload in all versions u... |
| CVE-2026-13430 | HIGH | 7.2 | 0.6% | Jul 10, 2026 | The Post Export Import with Media plugin for WordPress is vulnerable to Arbitrary File Upload in all versions up to, and... |
| CVE-2026-11818 | MEDIUM | 5.4 | 0.3% | Jul 10, 2026 | The WPCafe – Restaurant Menu, Online Food Ordering & Table Booking System plugin for WordPress is vulnerable to authoriz... |
| CVE-2026-11392 | MEDIUM | 6.1 | 0.3% | Jul 10, 2026 | The WP Hotel Booking plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'check_in_date' and 'c... |