CVE Vulnerability Database
Search and browse 397,743 CVE records with CVSS scores, EPSS exploit predictions, and CISA KEV status.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2026-8991 | MEDIUM | 4.4 | 0.2% | Jun 6, 2026 | The Drag and Drop Multiple File Upload for Contact Form 7 plugin for WordPress is vulnerable to Stored Cross-Site Script... |
| CVE-2026-8978 | MEDIUM | 4.9 | 0.3% | Jun 6, 2026 | The OptinCraft – Drag & Drop Optins & Popup Builder for WordPress plugin for WordPress is vulnerable to generic SQL Inje... |
| CVE-2026-8502 | MEDIUM | 5.3 | 0.4% | Jun 6, 2026 | The LearnPress – WordPress LMS Plugin for Create and Sell Online Courses plugin for WordPress is vulnerable to Sensitive... |
| CVE-2026-7796 | MEDIUM | 6.4 | 0.2% | Jun 6, 2026 | The EmbedPress – PDF Embedder, Embed PDF viewer, YouTube Videos, 3D FlipBook, Social feeds & more plugin for WordPress i... |
| CVE-2026-7795 | MEDIUM | 6.4 | 0.3% | Jun 6, 2026 | The Click to Chat – WA Widget plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the [chat] shortcode... |
| CVE-2026-7792 | MEDIUM | 5.3 | 0.2% | Jun 6, 2026 | The WPForms – Easy Form Builder for WordPress – Contact Forms, Payment Forms, Surveys, & More plugin for WordPress is vu... |
| CVE-2026-7665 | MEDIUM | 5.3 | 5.1% | Jun 6, 2026 | The Essential Addons for Elementor – Popular Elementor Templates & Widgets plugin for WordPress is vulnerable to Informa... |
| CVE-2026-7566 | MEDIUM | 6.6 | 0.4% | Jun 6, 2026 | The LearnPress – Backup & Migration Tool plugin for WordPress is vulnerable to PHP Object Injection in all versions up t... |
| CVE-2026-7565 | MEDIUM | 4.9 | 0.6% | Jun 6, 2026 | The LearnPress – Backup & Migration Tool plugin for WordPress is vulnerable to Arbitrary File Read via Directory Travers... |
| CVE-2026-7537 | HIGH | 7.2 | 0.7% | Jun 6, 2026 | The MDJM Event Management plugin for WordPress is vulnerable to Arbitrary File Upload in all versions up to, and includi... |
| CVE-2026-2500 | MEDIUM | 4.4 | 0.3% | Jun 6, 2026 | The Quick Playground plugin for WordPress is vulnerable to Path Traversal in all versions up to, and including, 1.3.4. T... |
| CVE-2026-9281 | MEDIUM | 6.4 | 0.2% | Jun 6, 2026 | The Master Addons For Elementor – Widgets, Extensions, Theme Builder, Popup Builder & Template Kits plugin for WordPress... |
| CVE-2026-9008 | MEDIUM | 4.3 | 0.2% | Jun 6, 2026 | The Page-list plugin for WordPress is vulnerable to Missing Authorization in all versions up to, and including, 6.2. Thi... |
| CVE-2026-8901 | HIGH | 7.2 | 0.3% | Jun 6, 2026 | The Integration for Freshsales – Contact Form 7, WPForms, Elementor, Gravity Forms and More plugin for WordPress is vuln... |
| CVE-2026-8438 | HIGH | 7.2 | 0.3% | Jun 6, 2026 | The All-In-One Security (AIOS) – Security and Firewall plugin for WordPress is vulnerable to Stored Cross-Site Scripting... |
| CVE-2026-9719 | MEDIUM | 4.3 | 0.1% | Jun 6, 2026 | The LatePoint – Calendar Booking Plugin for Appointments and Events plugin for WordPress is vulnerable to Cross-Site Req... |
| CVE-2026-9290 | HIGH | 7.5 | 2.4% | Jun 6, 2026 | The WP User Manager – User Profile Builder & Membership plugin for WordPress is vulnerable to Local File Inclusion in al... |
| CVE-2026-8976 | MEDIUM | 4.3 | 0.3% | Jun 6, 2026 | The RSS Aggregator by Feedzy – Feed to Post, Autoblogging, News & YouTube Video Feeds Aggregator plugin for WordPress is... |
| CVE-2026-8900 | MEDIUM | 6.4 | 0.2% | Jun 6, 2026 | The Simple SEO Slideshow plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Shortcode Attributes in a... |
| CVE-2026-8893 | MEDIUM | 6.4 | 0.2% | Jun 6, 2026 | The Express Payment For Stripe plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'type' attribut... |
| CVE-2026-8608 | MEDIUM | 5.3 | 0.2% | Jun 6, 2026 | The Event Monster – Event Management, Events Calendar, Tickets plugin for WordPress is vulnerable to Insufficient Verifi... |
| CVE-2026-7047 | MEDIUM | 4.3 | 0.1% | Jun 6, 2026 | The Frontend User Notes plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and incl... |
| CVE-2026-6448 | MEDIUM | 4.9 | 0.4% | Jun 6, 2026 | The Quiz and Survey Master (QSM) – Easy Quiz and Survey Maker plugin for WordPress is vulnerable to time-based blind SQL... |
| CVE-2026-6242 | MEDIUM | 6.8 | 0.2% | Jun 6, 2026 | An authenticated format string vulnerability exists in the ONVIF Subscribe service in Tapo C520WS v2 due to improper han... |
| CVE-2026-6241 | MEDIUM | 6.8 | 0.2% | Jun 6, 2026 | An authenticated format string vulnerability is present in the ONVIF AddScopes in Tapo C520WS v2, where user-controlled ... |