CVE Vulnerability Database
Search and browse 383,940 CVE records with CVSS scores, EPSS exploit predictions, and CISA KEV status.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2025-50455 | CRITICAL | 9.1 | 0.6% | Jul 27, 2026 | SQL injection vulnerability exists in the order_by parameter of the /customers/search endpoint in Alex Tselegidis EasyAp... |
| CVE-2026-66477 | MEDIUM | 5.3 | — | Jul 27, 2026 | Unauthenticated Broken Access Control in Gillion <= 4.13 versions. |
| CVE-2026-66476 | MEDIUM | 4.9 | — | Jul 27, 2026 | Administrator Arbitrary File Deletion in Easy Digital Downloads <= 3.6.9 versions. |
| CVE-2026-66475 | MEDIUM | 5.9 | — | Jul 27, 2026 | Shop manager Cross Site Scripting (XSS) in Checkout Field Editor for WooCommerce – Checkout Manager <= 3.0.5 versi... |
| CVE-2026-66474 | MEDIUM | 4.3 | — | Jul 27, 2026 | Unauthenticated Cross Site Request Forgery (CSRF) in Insert Headers and Footers Code – HT Script <= 1.1.8 versions. |
| CVE-2026-66448 | MEDIUM | 6.5 | — | Jul 27, 2026 | Contributor Cross Site Scripting (XSS) in Gallery PhotoBlocks <= 1.3.3 versions. |
| CVE-2026-66445 | MEDIUM | 6.5 | — | Jul 27, 2026 | Contributor Cross Site Scripting (XSS) in Open User Map <= 1.4.46 versions. |
| CVE-2026-66442 | MEDIUM | 5.4 | — | Jul 27, 2026 | Subscriber Broken Access Control in YayPricing <= 3.5.6 versions. |
| CVE-2026-66438 | MEDIUM | 5.3 | — | Jul 27, 2026 | Unauthenticated Sensitive Data Exposure in Exclusive Addons Elementor <= 2.8.0 versions. |
| CVE-2026-66437 | MEDIUM | 4.9 | — | Jul 27, 2026 | Contributor Server Side Request Forgery (SSRF) in Feedzy <= 5.2.4 versions. |
| CVE-2026-66434 | MEDIUM | 6.5 | — | Jul 27, 2026 | Contributor Cross Site Scripting (XSS) in Photonic Gallery & Lightbox for Flickr, SmugMug & Others <= 3.33 versions. |
| CVE-2026-66433 | MEDIUM | 6.5 | — | Jul 27, 2026 | Contributor Cross Site Scripting (XSS) in Location Weather <= 3.0.6 versions. |
| CVE-2026-66428 | MEDIUM | 4.3 | — | Jul 27, 2026 | Unauthenticated Cross Site Request Forgery (CSRF) in WP Google Review Slider <= 18.4 versions. |
| CVE-2026-66427 | HIGH | 7.6 | — | Jul 27, 2026 | Administrator SQL Injection in WP Google Review Slider <= 18.4 versions. |
| CVE-2026-66050 | HIGH | 8.7 | 0.7% | Jul 27, 2026 | NitroShare Desktop through 0.3.4 contains a path traversal vulnerability in its LAN file transfer server that allows una... |
| CVE-2026-65568 | MEDIUM | 5 | — | Jul 27, 2026 | Contributor Broken Access Control in Visual Composer Website Builder <= 45.15.0 versions. |
| CVE-2026-65567 | MEDIUM | 5.3 | — | Jul 27, 2026 | Unauthenticated Broken Access Control in Event Tickets <= 5.29.0.1 versions. |
| CVE-2026-65564 | MEDIUM | 5.3 | — | Jul 27, 2026 | Unauthenticated Sensitive Data Exposure in MapPress Maps for WordPress <= 2.97.6 versions. |
| CVE-2026-65563 | MEDIUM | 5.9 | — | Jul 27, 2026 | Author Cross Site Scripting (XSS) in Orbit Fox by ThemeIsle <= 3.0.7 versions. |
| CVE-2026-65562 | MEDIUM | 6.5 | — | Jul 27, 2026 | Contributor Cross Site Scripting (XSS) in BetterDocs <= 4.6.2 versions. |
| CVE-2026-65561 | MEDIUM | 6.5 | — | Jul 27, 2026 | Contributor Cross Site Scripting (XSS) in WordPress Social Login and Register <= 7.8.0 versions. |
| CVE-2026-65558 | MEDIUM | 5.4 | — | Jul 27, 2026 | Unauthenticated Server Side Request Forgery (SSRF) in AffiliateX <= 2.3.5 versions. |
| CVE-2026-65557 | MEDIUM | 5.9 | — | Jul 27, 2026 | Shop manager Cross Site Scripting (XSS) in Abandoned Cart Lite for WooCommerce <= 6.8.0 versions. |
| CVE-2026-65436 | MEDIUM | 6.8 | — | Jul 27, 2026 | Editor Arbitrary File Deletion in Kirki <= 6.0.13 versions. |
| CVE-2026-65435 | MEDIUM | 6.5 | — | Jul 27, 2026 | Unauthenticated Broken Access Control in Thrive Leads Version <= 10.9.2 versions. |