CVE Vulnerability Database
Search and browse 398,037 CVE records with CVSS scores, EPSS exploit predictions, and CISA KEV status.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2025-40946 | HIGH | 8.3 | 0.2% | May 12, 2026 | A vulnerability has been identified in blueplanet 100 NX3 M8 (All versions), blueplanet 100 TL3 GEN2 (All versions < V6.... |
| CVE-2025-40833 | HIGH | 8.7 | 0.3% | May 12, 2026 | The affected devices contain a null pointer dereference vulnerability while processing specially crafted IPv4 requests. ... |
| CVE-2024-54017 | MEDIUM | 6.9 | 0.3% | May 12, 2026 | A vulnerability has been identified in SIPROTEC 5 6MD84 (CP300) (All versions < V11.0), SIPROTEC 5 6MD85 (CP200) (All ve... |
| CVE-2026-7661 | MEDIUM | 6.4 | 0.2% | May 12, 2026 | The Bootstrap Shortcode plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the `box` shortcode in all... |
| CVE-2026-7659 | MEDIUM | 6.4 | 0.2% | May 12, 2026 | The Advanced Social Media Icons plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the `social` short... |
| CVE-2026-7626 | MEDIUM | 5.3 | 0.3% | May 12, 2026 | The Slek Gateway for WooCommerce plugin for WordPress is vulnerable to Information Exposure in version 1.0. This is due ... |
| CVE-2026-7616 | MEDIUM | 4.3 | 0.1% | May 12, 2026 | The Zawgyi Embed plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, ... |
| CVE-2026-7562 | MEDIUM | 4.3 | 0.1% | May 12, 2026 | The WP-Redirection plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to and including ... |
| CVE-2026-7561 | MEDIUM | 6.1 | 0.1% | May 12, 2026 | The Tm – WordPress Redirection plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, a... |
| CVE-2026-7464 | MEDIUM | 6.1 | 0.2% | May 12, 2026 | The WP Google Maps Integration plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the `page` param... |
| CVE-2026-7437 | MEDIUM | 6.1 | 0.2% | May 12, 2026 | The AzonPost plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the `editpos_hidden` parameter in ... |
| CVE-2026-7050 | MEDIUM | 4.3 | 0.3% | May 12, 2026 | The Forms Rb plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 1.1.9. Thi... |
| CVE-2026-6932 | MEDIUM | 4.3 | 0.1% | May 12, 2026 | The Woo Commerce Minimum Weight plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to a... |
| CVE-2026-6913 | MEDIUM | 6.4 | 0.2% | May 12, 2026 | The Shortcodely plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'widget_area' parameter in all... |
| CVE-2026-6808 | MEDIUM | 6.1 | 0.3% | May 12, 2026 | The Pricing Tables for WP plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'page' parameter ... |
| CVE-2026-6710 | MEDIUM | 4.3 | 0.1% | May 12, 2026 | The Skysa Text Ticker App plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and in... |
| CVE-2026-6709 | MEDIUM | 4.3 | 0.2% | May 12, 2026 | The Coinbase Commerce for Contact Form 7 plugin for WordPress is vulnerable to Missing Authorization in versions up to a... |
| CVE-2026-6708 | MEDIUM | 5.3 | 0.3% | May 12, 2026 | The HEL Online Classroom: AI-powered Online Classrooms plugin for WordPress is vulnerable to Missing Authorization in al... |
| CVE-2026-6690 | HIGH | 7.2 | 0.2% | May 12, 2026 | The LifePress plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'n' parameter of the lp_update_m... |
| CVE-2026-6663 | MEDIUM | 4.8 | 0.3% | May 12, 2026 | The GWD Connect plugin for WordPress is vulnerable to missing authorization to limited code execution in all versions up... |
| CVE-2026-6402 | MEDIUM | 6.5 | 0.2% | May 12, 2026 | webpack-dev-server versions up to and including 5.2.3 are vulnerable to cross-origin source code exposure when serving o... |
| CVE-2026-6256 | MEDIUM | 6.4 | 0.2% | May 12, 2026 | The Credits Shortcode plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'link' attribute of the ... |
| CVE-2026-6247 | MEDIUM | 6.4 | 0.2% | May 12, 2026 | The scratchblocks for WP plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'element' attribute o... |
| CVE-2026-6237 | MEDIUM | 6.4 | 0.2% | May 12, 2026 | The Quick Table plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'style' attribute of the 'qtbl... |
| CVE-2026-5715 | MEDIUM | 6.4 | 0.2% | May 12, 2026 | The Voyage Plus plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'class' attribute of the 'post... |