CVE Vulnerability Database
Search and browse 390,135 CVE records with CVSS scores, EPSS exploit predictions, and CISA KEV status.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2025-69153 | HIGH | 7.1 | — | Jul 2, 2026 | Unauthenticated Cross Site Scripting (XSS) in Trendy Travel <= 6.7 versions. |
| CVE-2025-69152 | HIGH | 7.1 | — | Jul 2, 2026 | Unauthenticated Cross Site Scripting (XSS) in Artale | Wedding Photography WordPress <= 2.2.2 versions. |
| CVE-2025-69134 | HIGH | 7.5 | — | Jul 2, 2026 | Unauthenticated Arbitrary Content Deletion in OpenAI Chatbot for WordPress – Helper <= 1.1.4 versions. |
| CVE-2025-69133 | HIGH | 7.5 | — | Jul 2, 2026 | Subscriber Local File Inclusion in Tourmaster <= 5.4.5 versions. |
| CVE-2025-69132 | MEDIUM | 6.5 | — | Jul 2, 2026 | Subscriber Sensitive Data Exposure in Corpkit <= 1.0.5 versions. |
| CVE-2025-69094 | HIGH | 8.5 | — | Jul 2, 2026 | Subscriber SQL Injection in Unicamp <= 2.2.2 versions. |
| CVE-2025-66076 | MEDIUM | 5.3 | — | Jul 2, 2026 | Unauthenticated Broken Access Control in Woostify Sites Library <= 1.6.2 versions. |
| CVE-2025-58902 | HIGH | 8.1 | — | Jul 2, 2026 | Unauthenticated Local File Inclusion in Lighthouse <= 1.2.12 versions. |
| CVE-2026-54431 | MEDIUM | 5.1 | — | Jul 2, 2026 | In liboauth2 the Demonstrating Proof-of-Possession (DPoP) verifier accepts a proof whose JSON Web Key (jwk) header conta... |
| CVE-2026-54430 | MEDIUM | 5.1 | — | Jul 2, 2026 | liboauth2 is vulnerable to Server-Side Request Forgery in oauth2_jose_jwks_aws_alb_resolve() function. The AWS ALB verif... |
| CVE-2026-9834 | HIGH | 7.2 | 2.7% | Jul 2, 2026 | The WP Database Backup – Unlimited Database & Files Backup by Backup for WP plugin for WordPress is vulnerable to OS Com... |
| CVE-2026-9188 | MEDIUM | 5.3 | 0.5% | Jul 2, 2026 | The Appointment Bookings for Zoom GoogleMeet and more – Wappointment plugin for WordPress is vulnerable to Insecure Dire... |
| CVE-2026-9145 | MEDIUM | 6.5 | 0.4% | Jul 2, 2026 | The Database for Contact Form 7, WPforms, Elementor forms plugin for WordPress is vulnerable to Arbitrary File Copy via ... |
| CVE-2026-8482 | MEDIUM | 4.3 | 0.2% | Jul 2, 2026 | A vulnerability was discovered on StormShield Network Security 4.3.0 to 4.3.41 (included), 4.8.0 to 4.8.15 (included) , ... |
| CVE-2026-8441 | HIGH | 7.5 | 0.4% | Jul 2, 2026 | The WP Review Slider Pro plugin for WordPress is vulnerable to SQL Injection via the 'notinstring' parameter of the wprp... |
| CVE-2026-14336 | HIGH | 8.2 | 0.3% | Jul 2, 2026 | PIA's OIDC issuer allowlist for Jenkins tokens uses a bare string-prefix check (issuer.startswith(' https://ci.eclipse.o... |
| CVE-2026-14029 | MEDIUM | 6.5 | 0.4% | Jul 2, 2026 | The Groundhogg — CRM, Newsletters, and Marketing Automation plugin for WordPress is vulnerable to generic SQL Injection ... |
| CVE-2026-13459 | MEDIUM | 5.3 | 0.6% | Jul 2, 2026 | The JetFormBuilder — Dynamic Blocks Form Builder plugin for WordPress is vulnerable to authorization bypass in all versi... |
| CVE-2026-13369 | HIGH | 7.5 | 0.5% | Jul 2, 2026 | The Ninja Forms - File Uploads plugin for WordPress is vulnerable to Arbitrary File Read via the attach_files() function... |
| CVE-2026-13252 | MEDIUM | 6.4 | 0.3% | Jul 2, 2026 | The RSS Aggregator by Feedzy – Feed to Post, Autoblogging, News & YouTube Video Feeds Aggregator plugin for WordPress is... |
| CVE-2026-13251 | HIGH | 7.5 | 0.8% | Jul 2, 2026 | The Perfmatters plugin for WordPress is vulnerable to Directory Traversal in all versions up to, and including, 2.6.4 vi... |
| CVE-2026-12657 | MEDIUM | 5.3 | 0.7% | Jul 2, 2026 | The LatePoint – Calendar Booking Plugin for Appointments and Events plugin for WordPress is vulnerable to Insecure Direc... |
| CVE-2026-12472 | MEDIUM | 5.3 | 0.5% | Jul 2, 2026 | The Kirki – Freeform Page Builder, Website Builder & Customizer plugin for WordPress is vulnerable to authorization bypa... |
| CVE-2026-12134 | MEDIUM | 4.3 | 0.4% | Jul 2, 2026 | The JoomSport – for Sports: Team & League, Football, Hockey & more plugin for WordPress is vulnerable to authorization b... |
| CVE-2026-12122 | MEDIUM | 5.3 | 0.5% | Jul 2, 2026 | The Kirki – Freeform Page Builder, Website Builder & Customizer plugin for WordPress is vulnerable to Sensitive Informat... |