CVE Vulnerability Database
Search and browse 397,943 CVE records with CVSS scores, EPSS exploit predictions, and CISA KEV status.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2026-8719 | HIGH | 8.8 | 0.4% | May 17, 2026 | The AI Engine – The Chatbot, AI Framework & MCP for WordPress plugin for WordPress is vulnerable to Privilege Escalation... |
| CVE-2026-8725 | HIGH | 7.3 | 0.3% | May 17, 2026 | A weakness has been identified in CoreWorxLab CAAL up to 1.6.0. The affected element is an unknown function of the file ... |
| CVE-2026-8724 | HIGH | 7.2 | 0.4% | May 17, 2026 | A security flaw has been discovered in Dataease 2.10.20. Impacted is the function SqlparserUtils.transFilter of the file... |
| CVE-2026-8723 | MEDIUM | 6.3 | 0.4% | May 17, 2026 | ### Summary `qs.stringify` throws `TypeError` when called with `arrayFormat: 'comma'` and `encodeValuesOnly: true` on... |
| CVE-2026-6050 | — | — | — | May 16, 2026 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. |
| CVE-2026-46728 | HIGH | 8.8 | 0.2% | May 16, 2026 | Das U-Boot before 2026.04 allows FIT (Flat Image Tree) signature verification bypass because hashed-nodes is omitted fro... |
| CVE-2021-47981 | MEDIUM | 5.4 | 0.2% | May 16, 2026 | Quick.CMS 6.7 contains a cross-site scripting vulnerability in the sliders form that allows authenticated attackers to i... |
| CVE-2021-47980 | HIGH | 7.1 | 0.2% | May 16, 2026 | Fuel CMS 1.4.13 contains a blind SQL injection vulnerability that allows authenticated attackers to manipulate database ... |
| CVE-2021-47979 | HIGH | 8.8 | 0.4% | May 16, 2026 | WordPress Plugin Backup and Restore 1.0.3 contains an arbitrary file deletion vulnerability that allows authenticated at... |
| CVE-2021-47978 | MEDIUM | 6.9 | 0.8% | May 16, 2026 | ProcessMaker 3.5.4 contains a local file inclusion vulnerability that allows unauthenticated attackers to read arbitrary... |
| CVE-2021-47977 | HIGH | 8.7 | 0.7% | May 16, 2026 | WordPress Plugin Anti-Malware Security and Bruteforce Firewall 4.20.59 contains a directory traversal vulnerability that... |
| CVE-2021-47976 | HIGH | 8.8 | 0.3% | May 16, 2026 | TextPattern CMS 4.9.0-dev contains a remote code execution vulnerability that allows authenticated attackers to upload a... |
| CVE-2021-47975 | HIGH | 7.2 | 0.2% | May 16, 2026 | WP Learn Manager 1.1.2 contains a stored cross-site scripting vulnerability that allows unauthenticated attackers to inj... |
| CVE-2021-47974 | HIGH | 8.5 | 0.1% | May 16, 2026 | VX Search 13.5.28 contains an unquoted service path vulnerability in both VX Search Server and VX Search Enterprise serv... |
| CVE-2021-47973 | HIGH | 8.7 | 0.3% | May 16, 2026 | Sticky Notes Widget 3.0.6 contains a denial of service vulnerability that allows attackers to crash the application by p... |
| CVE-2021-47972 | HIGH | 8.7 | 0.3% | May 16, 2026 | Sticky Notes & Color Widgets 1.4.2 contains a denial of service vulnerability that allows attackers to crash the applica... |
| CVE-2021-47971 | HIGH | 8.7 | 0.3% | May 16, 2026 | My Notes Safe 5.3 contains a denial of service vulnerability that allows attackers to crash the application by pasting e... |
| CVE-2021-47970 | HIGH | 8.7 | 0.3% | May 16, 2026 | Macaron Notes 5.5 contains a denial of service vulnerability that allows attackers to crash the application by creating ... |
| CVE-2021-47969 | HIGH | 8.7 | 0.3% | May 16, 2026 | Color Notes 1.4 contains a denial of service vulnerability that allows attackers to crash the application by pasting exc... |
| CVE-2021-47957 | MEDIUM | 6.4 | 0.2% | May 16, 2026 | Cookie Law Bar 1.2.1 contains a stored cross-site scripting vulnerability that allows authenticated attackers to inject ... |
| CVE-2021-47956 | HIGH | 8.8 | 0.3% | May 16, 2026 | EgavilanMedia PHPCRUD 1.0 contains an SQL injection vulnerability that allows unauthenticated attackers to manipulate da... |
| CVE-2021-47955 | MEDIUM | 5.4 | 0.2% | May 16, 2026 | CouchCMS 2.2.1 contains a cross-site scripting vulnerability that allows authenticated attackers to execute arbitrary Ja... |
| CVE-2021-47954 | HIGH | 8.8 | 0.2% | May 16, 2026 | LayerBB 1.1.4 contains an SQL injection vulnerability that allows unauthenticated attackers to manipulate database queri... |
| CVE-2021-47952 | CRITICAL | 9.8 | 0.7% | May 16, 2026 | python jsonpickle 2.0.0 contains a remote code execution vulnerability that allows attackers to execute arbitrary Python... |
| CVE-2021-47942 | HIGH | 8.7 | 0.5% | May 16, 2026 | Home Assistant Community Store (HACS) prior to 1.10.0 contains a path traversal vulnerability that allows unauthenticate... |