CVE Vulnerability Database
Search and browse 425,026 CVE records with CVSS scores, EPSS exploit predictions, and CISA KEV status.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2026-39752 | HIGH | 7.7 | 0.4% | Oct 6, 2026 | Contributor Arbitrary File Deletion in Jobs for WordPress <= 2.8.2 versions. |
| CVE-2026-39751 | HIGH | 7.5 | 0.3% | Oct 6, 2026 | Unauthenticated Broken Access Control in PayPlug for WooCommerce (Official) <= 3.1.0 versions. |
| CVE-2026-39750 | HIGH | 7.1 | 0.2% | Oct 6, 2026 | Unauthenticated Cross Site Scripting (XSS) in StoreGrowth: Smart Sales Booster for WooCommerce | BOGO, Upsells, Direct C... |
| CVE-2026-39749 | MEDIUM | 6.5 | 0.3% | Oct 6, 2026 | Subscriber Broken Access Control in App for Cloudflare® <= 1.10.1 versions. |
| CVE-2026-39748 | HIGH | 7.1 | 0.2% | Oct 6, 2026 | Unauthenticated Cross Site Scripting (XSS) in EduMall <= 4.5.3 versions. |
| CVE-2026-39747 | HIGH | 8.5 | 0.3% | Oct 6, 2026 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in WofficeIO Woffice ... |
| CVE-2026-39746 | CRITICAL | 9.3 | 0.4% | Oct 6, 2026 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Booknetic Bookneti... |
| CVE-2026-39745 | HIGH | 7.1 | 0.2% | Oct 6, 2026 | Unauthenticated Cross Site Scripting (XSS) in Contact Form to DB by BestWebSoft <= 1.7.6 versions. |
| CVE-2026-39731 | HIGH | 7.1 | 0.2% | Oct 6, 2026 | Unauthenticated Cross Site Scripting (XSS) in Database for CF7 <= 1.2.6 versions. |
| CVE-2026-39730 | HIGH | 7.1 | 0.3% | Oct 6, 2026 | Missing Authorization vulnerability in Marcin Wise Chat wise-chat allows Exploiting Incorrectly Configured Access Contro... |
| CVE-2026-39729 | HIGH | 7.2 | 0.3% | Oct 6, 2026 | Unauthenticated Sensitive Data Exposure in Edwiser Bridge <= 4.3.4 versions. |
| CVE-2026-39728 | HIGH | 7.2 | 0.3% | Oct 6, 2026 | Unauthenticated Server Side Request Forgery (SSRF) in Instapage Plugin <= 3.7.2 versions. |
| CVE-2026-39727 | MEDIUM | 6.5 | 0.2% | Oct 6, 2026 | Subscriber Cross Site Scripting (XSS) in WC Fields Factory <= 4.1.12 versions. |
| CVE-2026-39726 | HIGH | 7.1 | 0.2% | Oct 6, 2026 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Lumise Lumise Prod... |
| CVE-2026-39725 | — | — | 0.7% | Oct 6, 2026 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. Duplicate to CVE-2026-1829. |
| CVE-2026-39724 | HIGH | 7.1 | 0.2% | Oct 6, 2026 | Unauthenticated Cross Site Scripting (XSS) in HTTP Requests Manager <= 1.3.11 versions. |
| CVE-2026-39722 | HIGH | 7.1 | 0.2% | Oct 6, 2026 | Unauthenticated Cross Site Scripting (XSS) in WPLMS <= 4.972 versions. |
| CVE-2026-39720 | HIGH | 7.1 | 0.2% | Oct 6, 2026 | Unauthenticated Cross Site Scripting (XSS) in Mapster WP Maps <= 2.0.4 versions. |
| CVE-2026-39719 | HIGH | 7.2 | 0.3% | Oct 6, 2026 | Unauthenticated Server Side Request Forgery (SSRF) in PDF Smart Viewer for Elementor <= 1.0.4 versions. |
| CVE-2026-32581 | HIGH | 7.1 | 0.3% | Oct 6, 2026 | Subscriber SQL Injection in Mooberry Book Manager 4.16.2 versions. |
| CVE-2026-32580 | HIGH | 7.5 | 0.3% | Oct 6, 2026 | Unauthenticated SQL Injection in WooCommerce Lottery <= 2.2.9 versions. |
| CVE-2026-32579 | CRITICAL | 10 | 0.5% | Oct 6, 2026 | Unauthenticated Arbitrary File Upload in Kognetiks Chatbot for WordPress <= 2.4.9 versions. |
| CVE-2026-32578 | HIGH | 7.1 | 0.3% | Oct 6, 2026 | Subscriber Broken Access Control in ECPay Ecommerce for WooCommerce <= 1.1.2606090 versions. |
| CVE-2026-32577 | HIGH | 7.1 | 0.2% | Oct 6, 2026 | Unauthenticated Cross Site Scripting (XSS) in Frontend File Manager <= 23.6 versions. |
| CVE-2026-32575 | HIGH | 7.1 | 0.2% | Oct 6, 2026 | Unauthenticated Cross Site Scripting (XSS) in SUMO Affiliates Pro <= 11.7.0 versions. |