CVE Vulnerability Database
Search and browse 381,187 CVE records with CVSS scores, EPSS exploit predictions, and CISA KEV status.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2026-15052 | HIGH | 7.2 | 0.2% | Aug 1, 2026 | The MailChimp Subscribe Form, Optin Builder, PopUp Builder, Form Builder plugin for WordPress is vulnerable to Stored Cr... |
| CVE-2026-15018 | MEDIUM | 5.3 | 0.3% | Aug 1, 2026 | The Database Collation Fix plugin for WordPress is vulnerable to time-based SQL Injection via the 'force-collation-algor... |
| CVE-2026-13458 | MEDIUM | 6.4 | 0.3% | Aug 1, 2026 | The GenerateBlocks plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Dynamic Tag Injection in HTML A... |
| CVE-2026-11995 | MEDIUM | 5.3 | 0.3% | Aug 1, 2026 | The Gutena Forms – Contact Form, Survey Form, Feedback Form, Booking Form, and Custom Form Builder plugin for WordPress ... |
| CVE-2026-10782 | MEDIUM | 4.3 | 0.3% | Aug 1, 2026 | The RealHomes Memberships plugin for WordPress is vulnerable to authorization bypass in all versions up to, and includin... |
| CVE-2025-14073 | MEDIUM | 5.3 | 0.2% | Aug 1, 2026 | The WooCommerce PayPal Payments plugin for WordPress is vulnerable to Sensitive Information Disclosure due to an Insecur... |
| CVE-2026-2916 | MEDIUM | 4.3 | 0.2% | Aug 1, 2026 | The Jeg Kit for Elementor plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, an... |
| CVE-2026-15988 | HIGH | 8.8 | 0.2% | Aug 1, 2026 | The AI Engine – The Chatbot, AI Framework & MCP for WordPress plugin for WordPress is vulnerable to Cross-Site Request F... |
| CVE-2025-14469 | MEDIUM | 4.3 | 0.1% | Aug 1, 2026 | The Theme Editor plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, ... |
| CVE-2026-15932 | MEDIUM | 5.3 | 0.3% | Aug 1, 2026 | The Support Genix WordPress plugin before 1.4.48 does not prevent directory traversal in its ticket-attachment download... |
| CVE-2026-15368 | HIGH | 8.1 | 0.1% | Aug 1, 2026 | The User Profile Builder WordPress plugin before 3.16.4 does not correctly bind the automatic login performed after use... |
| CVE-2026-15262 | MEDIUM | 5.4 | 0.2% | Aug 1, 2026 | The Admin Columns for ACF Fields WordPress plugin through 0.3.2 does not escape Advanced Custom Fields values before out... |
| CVE-2026-15244 | HIGH | 7.2 | 0.5% | Aug 1, 2026 | The HUSKY WordPress plugin before 1.4.1 does not sanitize a stored setting value against directory traversal before con... |
| CVE-2026-15234 | MEDIUM | 5.4 | 0.2% | Aug 1, 2026 | The Codeless Page Builder WordPress plugin through 1.1.4 does not sanitize or validate a shortcode attribute before usin... |
| CVE-2026-14840 | MEDIUM | 5.3 | 0.1% | Aug 1, 2026 | The YOP Poll WordPress plugin before 7.0.6 does not validate the connection's origin IP address and instead trusts clien... |
| CVE-2026-14839 | HIGH | 7.5 | 0.1% | Aug 1, 2026 | The Mapster WP Maps WordPress plugin before 1.24.0 does not perform any authorization or post-status check on a public R... |
| CVE-2026-14836 | HIGH | 8.1 | 0.1% | Aug 1, 2026 | The Login & Register Forms WordPress plugin before 3.2.5 does not properly enforce the rate limit on its password-reset... |
| CVE-2026-14823 | LOW | 2.2 | 0.1% | Aug 1, 2026 | The Event Tickets and Registration WordPress plugin before 5.29.0.1 does not properly verify authorization on some of it... |
| CVE-2026-14822 | MEDIUM | 5.3 | 0.1% | Aug 1, 2026 | The Event Tickets and Registration WordPress plugin before 5.29.0.1 does not perform any authorization check on one of i... |
| CVE-2026-14596 | HIGH | 8.8 | 0.1% | Aug 1, 2026 | The DynamicKit for Elementor WordPress plugin before 1.0.3 does not validate the host of a user-supplied URL used as the... |
| CVE-2026-14561 | MEDIUM | 6.5 | 0.1% | Aug 1, 2026 | The Authora : Easy login with mobile number WordPress plugin before 1.7.7 does not keep its one-time login code confiden... |
| CVE-2026-14315 | MEDIUM | 6.5 | 0.1% | Aug 1, 2026 | The Pixel Tag Manager for WooCommerce WordPress plugin before 2.2.1 does not perform an authorization check on one of i... |
| CVE-2026-14309 | HIGH | 8.1 | 0.1% | Aug 1, 2026 | The Chat On Desk Order Notifications WordPress plugin before 1.0.9 does not verify that the one-time password has been ... |
| CVE-2026-14292 | MEDIUM | 5.4 | 0.2% | Aug 1, 2026 | The Download Manager WordPress plugin before 3.3.66 does not properly escape a package's title before outputting it in t... |
| CVE-2026-14214 | LOW | 2.7 | 0.1% | Aug 1, 2026 | The Booking for Appointments and Events Calendar WordPress plugin before 2.4.4 does not restrict which fields can be wr... |