CVE Vulnerability Database
Search and browse 386,268 CVE records with CVSS scores, EPSS exploit predictions, and CISA KEV status.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2026-16745 | HIGH | 8.8 | 0.4% | Jul 23, 2026 | A flaw was found in odh-dashboard, the web console component of Red Hat OpenShift AI (RHOAI). Due to incorrect network b... |
| CVE-2026-65758 | HIGH | 8.2 | — | Jul 23, 2026 | Joomla Extension - tassos.gr - Sensitive data exposure in Convert Forms extension 2.5.0-5.2.2 - The front-end Submission... |
| CVE-2026-65757 | HIGH | 8.1 | 0.1% | Jul 23, 2026 | Joomla Extension - regularlabs.com - Inconsistent CSRF token checks / privilege checks in Modules Anywhere extension - T... |
| CVE-2026-65756 | MEDIUM | 6.1 | 0.2% | Jul 23, 2026 | Joomla Extension - regularlabs.com - XSS vector in Keyboard Shortcuts extension - Shortcut configuration accepted arbitr... |
| CVE-2026-65755 | HIGH | 7.5 | 0.1% | Jul 23, 2026 | Joomla Extension - regularlabs.com - Date-sensitive query-cache leakage in Articles Anywhere and Users Anywhere extensio... |
| CVE-2026-65754 | HIGH | 7.5 | 0.2% | Jul 23, 2026 | Joomla Extension - regularlabs.com - Insecure path handling in ReReplacer Pro extension - ReReplacer XML include paths c... |
| CVE-2026-65713 | MEDIUM | 6.5 | 0.2% | Jul 23, 2026 | Joomla Extension - regularlabs.com - Insecure path handling in Modals Pro extension - Modals gallery paths could enumera... |
| CVE-2026-65712 | MEDIUM | 6.2 | 0.2% | Jul 23, 2026 | Joomla Extension - regularlabs.com - Insecure path handling in CDN for Joomla Pro extension - CDN versioning could check... |
| CVE-2026-65431 | CRITICAL | 9.8 | 0.2% | Jul 23, 2026 | Joomla Extension - regularlabs.com - Zipslip in GeoIP extension - Geo IP database update archives have been broadly extr... |
| CVE-2026-65430 | HIGH | 7.5 | 0.1% | Jul 23, 2026 | Joomla Extension - regularlabs.com - MaxMind Credential leakage in GeoIP extension - MaxMind credentials where leaked in... |
| CVE-2026-64876 | HIGH | 8.8 | 0.1% | Jul 23, 2026 | Joomla Extension - regularlabs.com - Inconsistent CSRF token checks / privilege checks in GeoIP extension - Database-up... |
| CVE-2026-64875 | MEDIUM | 6.5 | 0.1% | Jul 23, 2026 | Joomla Extension - regularlabs.com - IP spoofing vulnerability in GeoIP extension - GeoIP lookups trusted spoofable forw... |
| CVE-2026-64874 | CRITICAL | 9.8 | 0.1% | Jul 23, 2026 | Joomla Extension - regularlabs.com - CDN Credential leakage Cache Cleaner Pro extension - CDN credentials were exposed i... |
| CVE-2026-64873 | CRITICAL | 9.8 | 0.1% | Jul 23, 2026 | Joomla Extension - regularlabs.com - SSRF in Cache Cleaner Pro extension - Custom query URLs could access internal or re... |
| CVE-2026-64872 | MEDIUM | 6.5 | 0.2% | Jul 23, 2026 | Joomla Extension - regularlabs.com - Path traversal in Cache Cleaner Pro extension - Custom purge and log paths could es... |
| CVE-2026-64871 | MEDIUM | 5.4 | 0.1% | Jul 23, 2026 | Joomla Extension - regularlabs.com - Inconsistent CSRF token checks / privilege checks in Cache Cleaner extension - Admi... |
| CVE-2026-64799 | HIGH | 7.5 | 0.2% | Jul 23, 2026 | Joomla Extension - regularlabs.com - SSRF via remote image downloads in Articles Anywhere and Users Anywhere extensions ... |
| CVE-2026-16078 | MEDIUM | 6.5 | 0.9% | Jul 23, 2026 | The WCPOS – Point of Sale (POS) plugin for WooCommerce plugin for WordPress is vulnerable to Directory Traversal in all ... |
| CVE-2026-15906 | MEDIUM | 6.5 | 0.5% | Jul 23, 2026 | The Premium Packages – Sell Digital Products Securely plugin for WordPress is vulnerable to generic SQL Injection via th... |
| CVE-2026-15827 | MEDIUM | 5.3 | 0.5% | Jul 23, 2026 | The GutenKit Blocks plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check ... |
| CVE-2026-15794 | MEDIUM | 6.4 | 0.3% | Jul 23, 2026 | The Grid/List View for WooCommerce plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'position' Shor... |
| CVE-2026-15786 | MEDIUM | 4.4 | 0.5% | Jul 23, 2026 | The WP Encryption – One Click Free SSL Certificate & SSL / HTTPS Redirect, Security & SSL Scan plugin for WordPress is v... |
| CVE-2026-15761 | MEDIUM | 6.5 | 0.5% | Jul 23, 2026 | The Tickera – Sell Tickets & Manage Events plugin for WordPress is vulnerable to generic SQL Injection via the 'tc_event... |
| CVE-2026-15647 | MEDIUM | 4.4 | 0.3% | Jul 23, 2026 | The Brands for WooCommerce plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'br_brand_tooltip' Term... |
| CVE-2026-15646 | MEDIUM | 6.4 | 0.3% | Jul 23, 2026 | The Brands for WooCommerce plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'style' Shortcode Attri... |