CVE Vulnerability Database

Search and browse 394,846 CVE records with CVSS scores, EPSS exploit predictions, and CISA KEV status.

CVE IDSeverityCVSSDescription
CVE-2026-27333HIGH8.1Unauthenticated Deserialization of untrusted data in Paid Videochat Turnkey Site <= 7.3.23 versions.
CVE-2026-27089HIGH7.5Unauthenticated Bypass Vulnerability in WpTravelly <= 2.1.7 versions.
CVE-2026-27053CRITICAL9.8Unauthenticated PHP Object Injection in Broadcast Live Video < 7.1.3 versions.
CVE-2026-25440MEDIUM5.3Unauthenticated Broken Access Control in Essential Addons for Elementor < 6.6.0 versions.
CVE-2026-25425HIGH7.5Unauthenticated Broken Access Control in User Registration <= 5.1.2 versions.
CVE-2026-24637HIGH8.5Contributor SQL Injection in PowerPress Podcasting <= 11.15.10 versions.
CVE-2026-23970HIGH7.1Unauthenticated Cross Site Scripting (XSS) in Redirection for Contact Form 7 <= 3.2.8 versions.
CVE-2025-69332MEDIUM6.5Subscriber Broken Access Control in Bookify <= 1.1.1 versions.
CVE-2025-68872HIGH7.1Unauthenticated Cross Site Scripting (XSS) in Eli&#039;s WordCents adSense Widget with Analytics <= 1.3.03.27 versions.
CVE-2025-68851HIGH7.1Unauthenticated Cross Site Scripting (XSS) in Okay Toolkit <= 2.3 versions.
CVE-2025-68840HIGH7.1Unauthenticated Cross Site Scripting (XSS) in iRobots.txt SEO <= 1.1.2 versions.
CVE-2025-68049MEDIUM6.3Subscriber Broken Access Control in bunny.net <= 2.3.6 versions.
CVE-2025-60175MEDIUM4.4Administrator Server Side Request Forgery (SSRF) in PopAd <= 1.0.4 versions.
CVE-2025-59133HIGH7.5Custom role Insecure Direct Object References (IDOR) in Projectopia <= 5.1.25.2 versions.
CVE-2026-54444Rejected reason: ]** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2026-49489. Reason: This candidate is a...
CVE-2026-54296Rejected reason: ** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2026-12075. Reason: This candidate is a ...
CVE-2026-54295Rejected reason: ** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2026-12061. Reason: This candidate is a ...
CVE-2026-54294Rejected reason: ** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2026-12072. Reason: This candidate is a ...
CVE-2026-54292Rejected reason: ** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2026-12074. Reason: This candidate is a ...
CVE-2026-53705HIGH7.6A flaw was found in GStreamer's WavPack audio decoder in gst-plugins-good. When processing a specially crafted WavPack f...
CVE-2026-53704HIGH7.1A flaw was found in GStreamer's RealMedia demuxer in the gst-plugins-ugly package. When processing a RealMedia file cont...
CVE-2026-53703HIGH7.1A vulnerability was found in the GStreamer RealMedia demuxer (gst-plugins-ugly). When processing a RealMedia (.rm) file,...
CVE-2026-52722HIGH7.1A signed integer overflow vulnerability was found in GStreamer's VMnc decoder. A crafted VMnc stream with large cursor d...
CVE-2026-52721MEDIUM5.3Multiple out-of-bounds read vulnerabilities were found in GStreamer's pcapparse element. Malformed PCAP records can trig...
CVE-2026-52720HIGH8.8A heap buffer overflow vulnerability was found in GStreamer's librfb (RFB/VNC client). The rectangle bounds check incorr...