CVE Vulnerability Database

Search and browse 377,680 CVE records with CVSS scores, EPSS exploit predictions, and CISA KEV status.

CVE IDSeverityCVSSDescription
CVE-2026-66425MEDIUM6.5Unauthenticated Broken Authentication in Gutena Forms – Contact Form, Survey Form, Feedback Form, Booking Form, and Cust...
CVE-2026-65581CRITICAL9.8Unauthenticated PHP Object Injection in AI ANN <= 1.29.0 versions.
CVE-2026-65579CRITICAL9.8Unauthenticated PHP Object Injection in Agricola <= 1.21.0 versions.
CVE-2026-65578CRITICAL9.8Unauthenticated PHP Object Injection in Agora <= 1.9 versions.
CVE-2026-65577CRITICAL9.8Unauthenticated PHP Object Injection in Advice <= 1.18.0 versions.
CVE-2026-65576CRITICAL9.8Unauthenticated PHP Object Injection in Adrena <= 1.2.14 versions.
CVE-2026-65575CRITICAL9.8Unauthenticated PHP Object Injection in Accalia <= 1.5.3 versions.
CVE-2026-65574CRITICAL9.8Unauthenticated PHP Object Injection in Abogado <= 1.18 versions.
CVE-2026-65573CRITICAL9.8Unauthenticated PHP Object Injection in Abelle <= 1.22 versions.
CVE-2026-65572CRITICAL9.8Unauthenticated PHP Object Injection in A.Williams <= 1.3.1 versions.
CVE-2026-65571CRITICAL9.8Unauthenticated PHP Object Injection in 69 Clothing <= 1.2.11.1 versions.
CVE-2026-65570HIGH8.1Unauthenticated Bypass Vulnerability in Login with phone number <= 1.8.70 versions.
CVE-2026-65569HIGH8.5Subscriber SQL Injection in WP Job Portal <= 2.5.6 versions.
CVE-2026-65565HIGH7.1Unauthenticated Cross Site Scripting (XSS) in Survey Maker <= 5.2.3.3 versions.
CVE-2026-65560HIGH7.1Unauthenticated Cross Site Scripting (XSS) in Houzez Property Feed <= 2.5.48 versions.
CVE-2026-65559HIGH7.2Shop manager Privilege Escalation in Order Delivery Date for WooCommerce <= 4.6.0 versions.
CVE-2026-65556CRITICAL9.8Unauthenticated PHP Object Injection in WPBruiser {no- Captcha anti-Spam} <= 3.1.43 versions.
CVE-2026-65554HIGH7.1Subscriber Broken Access Control in AnsPress – Question and answer 4.4.4 versions.
CVE-2026-65553CRITICAL10Unauthenticated Remote Code Execution (RCE) in Spider Analyser &#8211; WordPress搜索引擎蜘蛛分析插件 <= 2.1.3 versions.
CVE-2026-65552CRITICAL9.8Subscriber PHP Object Injection in Export User Data <= 2.2.6 versions.
CVE-2026-65549HIGH7.2Author PHP Object Injection in Jeg Kit for Elementor <= 3.2.10 versions.
CVE-2026-65548CRITICAL9.9Contributor Remote Code Execution (RCE) in Betheme <= 28.4.2 versions.
CVE-2026-65547HIGH8.5Subscriber SQL Injection in Creative Mail <= 1.6.9 versions.
CVE-2026-65546CRITICAL9.3Unauthenticated SQL Injection in Qode Tours <= 3.1.3.1 versions.
CVE-2026-65545HIGH7.1Unauthenticated Cross Site Scripting (XSS) in AI Engine <= 3.6.8 versions.