CVE Vulnerability Database
Search and browse 390,029 CVE records with CVSS scores, EPSS exploit predictions, and CISA KEV status.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2026-8848 | HIGH | 7.2 | 0.7% | Jul 9, 2026 | The Popup Maker – Boost Sales, Conversions, Optins, Subscribers with the Ultimate WP Popup Builder plugin for WordPress ... |
| CVE-2026-7558 | MEDIUM | 5.3 | 0.3% | Jul 9, 2026 | The Age Verification & Identity Verification by Token of Trust plugin for WordPress is vulnerable to unauthorized access... |
| CVE-2026-6910 | MEDIUM | 6.4 | 0.2% | Jul 9, 2026 | The Bookero.pl – system rezerwacji online plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the `boo... |
| CVE-2026-59269 | LOW | 3.8 | 0.2% | Jul 9, 2026 | A user authenticating to Kubernetes clusters via the Pinniped Supervisor could potentially gain elevated permissions in ... |
| CVE-2026-57111 | HIGH | 7.5 | 0.2% | Jul 9, 2026 | Permissive Cross-Origin Resource Sharing (CORS) in the REST API (helix-rest, org.apache.helix.rest.server.filters.CORSFi... |
| CVE-2026-4653 | MEDIUM | 6.4 | 0.2% | Jul 9, 2026 | The Block, Suspend, Report for BuddyPress plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'lin... |
| CVE-2026-33390 | HIGH | 8.1 | 0.2% | Jul 9, 2026 | An Incorrect Privilege Assignment vulnerability was discovered in the synchronization functionality due to Arc sensors r... |
| CVE-2026-31985 | HIGH | 8.3 | 0.1% | Jul 9, 2026 | When the upstream Guardian or CMC was configured in the Remote Collector via n2os-tui, the generated configuration disab... |
| CVE-2026-31984 | HIGH | 8.7 | 0.3% | Jul 9, 2026 | A denial-of-service vulnerability caused by unbounded resource allocation was discovered in the audit logging functional... |
| CVE-2026-31983 | MEDIUM | 6.9 | 0.2% | Jul 9, 2026 | A Missing Authentication vulnerability was discovered in the SSH keys synchronization endpoint. An unauthenticated attac... |
| CVE-2026-31982 | HIGH | 7.1 | 0.2% | Jul 9, 2026 | An Open Redirect vulnerability was discovered in the SAML Single Sign-On functionality due to insufficient validation of... |
| CVE-2026-31981 | MEDIUM | 4.8 | 0.1% | Jul 9, 2026 | A Stored HTML Injection vulnerability was discovered in the Diagram tab and Graph view due to a shared input validation ... |
| CVE-2026-15000 | HIGH | 7.2 | 0.3% | Jul 9, 2026 | The Connect Contact Form 7 and Mailchimp plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Mailchimp... |
| CVE-2026-14343 | MEDIUM | 6.4 | 0.2% | Jul 9, 2026 | The Download Manager plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'note_before' and 'note_after... |
| CVE-2026-14342 | MEDIUM | 4.9 | 0.3% | Jul 9, 2026 | The Mail Mint – Email Marketing, Newsletter, Email Automation & WooCommerce Emails plugin for WordPress is vulnerable to... |
| CVE-2026-14245 | CRITICAL | 9.8 | 0.6% | Jul 9, 2026 | The miniOrange OTP Login, Verification and SMS Notifications plugin for WordPress is vulnerable to Authentication Bypass... |
| CVE-2026-13771 | MEDIUM | 6.4 | 0.2% | Jul 9, 2026 | The Customer Reviews for WooCommerce plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'color' Short... |
| CVE-2026-13450 | MEDIUM | 5.3 | 0.4% | Jul 9, 2026 | The GamiPress – Gamification plugin to reward points, achievements, badges & ranks in WordPress plugin for WordPress is ... |
| CVE-2026-13334 | MEDIUM | 6.1 | 0.2% | Jul 9, 2026 | The Mang Board WP plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'stag' parameter in all v... |
| CVE-2026-13253 | MEDIUM | 6.4 | 0.2% | Jul 9, 2026 | The Ultimate Post plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'moreResultsText' block attr... |
| CVE-2026-13080 | MEDIUM | 6.6 | 0.7% | Jul 9, 2026 | The WPFunnels – Funnel Builder for WooCommerce with Checkout & One Click Upsell plugin for WordPress is vulnerable to Lo... |
| CVE-2026-13011 | MEDIUM | 6.5 | 0.3% | Jul 9, 2026 | The ERP: Complete HR, Accounting & CRM Suite with Recruitment and WooCommerce CRM Support plugin for WordPress is vulner... |
| CVE-2026-12418 | MEDIUM | 5.3 | 0.2% | Jul 9, 2026 | The User Frontend: AI Powered Frontend Posting, User Directory, Profile, Membership & User Registration plugin for WordP... |
| CVE-2026-12406 | MEDIUM | 5.3 | 0.3% | Jul 9, 2026 | The User Frontend: AI Powered Frontend Posting, User Directory, Profile, Membership & User Registration plugin for WordP... |
| CVE-2026-12170 | MEDIUM | 6.4 | 0.3% | Jul 9, 2026 | The AcyMailing – An Ultimate Newsletter Plugin and Marketing Automation Solution for WordPress plugin for WordPress is v... |