CVE Vulnerability Database
Search and browse 381,181 CVE records with CVSS scores, EPSS exploit predictions, and CISA KEV status.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2026-17571 | MEDIUM | 6.1 | 0.2% | Aug 1, 2026 | The Fluent Forms – Customizable Contact Forms, Survey, Quiz, & Conversational Form Builder plugin for WordPress is vulne... |
| CVE-2026-17555 | MEDIUM | 4.9 | 0.3% | Aug 1, 2026 | The WPvivid Backup & Migration plugin for WordPress is vulnerable to SQL Injection via the export_data parameter in vers... |
| CVE-2026-16685 | MEDIUM | 6.4 | 0.2% | Aug 1, 2026 | The Download Manager plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'icon' Shortcode Attribute in... |
| CVE-2026-16684 | MEDIUM | 6.4 | 0.2% | Aug 1, 2026 | The Easy Property Listings plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'facebook' User Contact... |
| CVE-2026-16635 | HIGH | 8.8 | 0.3% | Aug 1, 2026 | The Pronamic Pay plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 10.1.0... |
| CVE-2026-16614 | MEDIUM | 4.9 | 0.3% | Aug 1, 2026 | The GSheetConnector – CF7 Google Sheets Connector with Real-Time Sync plugin for WordPress is vulnerable to generic SQL ... |
| CVE-2026-16144 | HIGH | 8.1 | 0.7% | Aug 1, 2026 | The Kali Forms — Contact Form & Drag-and-Drop Builder plugin for WordPress is vulnerable to Remote Code Execution in all... |
| CVE-2026-16091 | MEDIUM | 6.4 | 0.2% | Aug 1, 2026 | The GamiPress – Gamification plugin to reward points, achievements, badges & ranks in WordPress plugin for WordPress is ... |
| CVE-2026-16090 | MEDIUM | 6.4 | 0.2% | Aug 1, 2026 | The GamiPress – Gamification plugin to reward points, achievements, badges & ranks in WordPress plugin for WordPress is ... |
| CVE-2026-16087 | MEDIUM | 6.5 | 0.3% | Aug 1, 2026 | The Icegram Engage – Popups, Optins, CTAs & Lead Generation plugin for WordPress is vulnerable to second-order SQL Injec... |
| CVE-2026-15964 | CRITICAL | 9.8 | 0.5% | Aug 1, 2026 | The Single Sign On For TNG plugin for WordPress is vulnerable to Authentication Bypass via unauthenticated password rese... |
| CVE-2026-15951 | MEDIUM | 4.9 | 0.3% | Aug 1, 2026 | The Icegram Mailer plugin for WordPress is vulnerable to SQL Injection via the 'fields' parameter in versions up to, and... |
| CVE-2026-15950 | MEDIUM | 6.4 | 0.2% | Aug 1, 2026 | The Cozy Blocks – Page Builder for Gutenberg Editor & FSE with 600+ Patterns, 58 Blocks & Templates plugin for WordPress... |
| CVE-2026-15662 | MEDIUM | 6.4 | 0.2% | Aug 1, 2026 | The Advanced Woo Labels – Product Labels & Badges for WooCommerce plugin for WordPress is vulnerable to Stored Cross-Sit... |
| CVE-2026-15649 | MEDIUM | 6.4 | 0.2% | Aug 1, 2026 | The Powerkit – Supercharge your WordPress Site plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Sho... |
| CVE-2026-15645 | MEDIUM | 6.4 | 0.2% | Aug 1, 2026 | The Powerkit – Supercharge your WordPress Site plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'na... |
| CVE-2026-15644 | MEDIUM | 6.4 | 0.2% | Aug 1, 2026 | The Powerkit – Supercharge your WordPress Site plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'st... |
| CVE-2026-15601 | MEDIUM | 4.9 | 0.8% | Aug 1, 2026 | The Kirki – Freeform Page Builder, Website Builder & Customizer plugin for WordPress is vulnerable to Path Traversal (Zi... |
| CVE-2026-15450 | HIGH | 8.1 | 0.4% | Aug 1, 2026 | The Nex Forms – Ultimate Form Builder – Lite plugin for WordPress is vulnerable to arbitrary file deletion via path trav... |
| CVE-2026-15052 | HIGH | 7.2 | 0.2% | Aug 1, 2026 | The MailChimp Subscribe Form, Optin Builder, PopUp Builder, Form Builder plugin for WordPress is vulnerable to Stored Cr... |
| CVE-2026-15018 | MEDIUM | 5.3 | 0.3% | Aug 1, 2026 | The Database Collation Fix plugin for WordPress is vulnerable to time-based SQL Injection via the 'force-collation-algor... |
| CVE-2026-13458 | MEDIUM | 6.4 | 0.3% | Aug 1, 2026 | The GenerateBlocks plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Dynamic Tag Injection in HTML A... |
| CVE-2026-11995 | MEDIUM | 5.3 | 0.3% | Aug 1, 2026 | The Gutena Forms – Contact Form, Survey Form, Feedback Form, Booking Form, and Custom Form Builder plugin for WordPress ... |
| CVE-2026-10782 | MEDIUM | 4.3 | 0.3% | Aug 1, 2026 | The RealHomes Memberships plugin for WordPress is vulnerable to authorization bypass in all versions up to, and includin... |
| CVE-2025-14073 | MEDIUM | 5.3 | 0.2% | Aug 1, 2026 | The WooCommerce PayPal Payments plugin for WordPress is vulnerable to Sensitive Information Disclosure due to an Insecur... |