CVE-database
126.581 CVEs in database. Zoek op product (bv. fortinet, exchange) of CVE-ID.
- CVE-2026-94675 HIGH · 7.1 Unauthenticated Cross Site Scripting (XSS) in Fluent Forms Pro Add On Pack
- CVE-2026-94206 NONE Use of Password Hash With Insufficient Computational Effort vulnerability in danielberkompas cloak_ecto and danielberkompas cloak allows an attacker who holds the hashed values and the…
- CVE-2026-66588 NONE Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. False-positive.
- CVE-2026-62072 HIGH · 8.8 Subscriber Broken Access Control in Progress Planner
- CVE-2026-4889 NONE SQL injection (SQLi) vulnerability in the eLoanApp application, specifically in the POST parameter 'logina' of the user process endpoint '/ajax/users.php?op=verify'. The parameter is vulnerable to…
- CVE-2026-48199 HIGH · 7.5 Unauthenticated Broken Access Control in Sermon'e
- CVE-2026-48197 HIGH · 7.2 Incorrect Privilege Assignment vulnerability in PublishPress PublishPress Capabilities capability-manager-enhanced allows Privilege Escalation.This issue affects PublishPress Capabilities: from n/a through 2.45.0.
- CVE-2026-42638 HIGH · 7.5 Missing Authorization vulnerability in Awesomemotive Easy Digital Downloads easy-digital-downloads allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Easy Digital Downloads: from n/a through…
- CVE-2026-42637 MEDIUM · 6.5 Unauthenticated Settings Change in PayPlug for WooCommerce (Official)
- CVE-2026-42636 HIGH · 7.1 Niet-geauthenticeerde Cross-Site Scripting (XSS) in WP Cookie Notice voor GDPR, CCPA & ePrivacy-toestemming
- CVE-2026-42635 HIGH · 7.1 Unauthenticated Cross Site Scripting (XSS) in WooCommerce Simple Auctions
- CVE-2026-42634 HIGH · 7.1 Unauthenticated Cross Site Scripting (XSS) in Video Background Block – Use video as background in the section.
- CVE-2026-42418 HIGH · 7.1 De kwetsbaarheid 'Cross-site scripting' (XSS) in Socialrocket veroorzaakt door onjuiste neutralisatie van invoer tijdens het genereren van webpagina's. Socialrocket maakt Reflected XSS mogelijk. Dit probleem…
- CVE-2026-42417 CRITICAL · 9.3 Unauthenticated SQL Injection in ARMember Premium
- CVE-2026-42416 HIGH · 8.5 Subscriber SQL Injection in UDesign Core
- CVE-2026-42415 CRITICAL · 9.3 Unauthenticated SQL Injection in Porto Theme - Functionality
- CVE-2026-42414 HIGH · 8.5 Subscriber SQL Injection in ListingPro
- CVE-2026-42413 HIGH · 7.5 Unauthenticated Sensitive Data Exposure in Snapshotify – All-in-One Backup & Restore & Migrate
- CVE-2026-41562 HIGH · 7.5 Unauthenticated Sensitive Data Exposure in Norvis Backup
- CVE-2026-41561 HIGH · 7.5 Unauthenticated Sensitive Data Exposure in Museder RestoreOne
- CVE-2026-41560 HIGH · 7.5 Unauthenticated Broken Access Control in WXD Backup Lite
- CVE-2026-41559 HIGH · 7.5 Unauthenticated Sensitive Data Exposure in SafeSnap – Verified WordPress Backup & Restore
- CVE-2026-41555 CRITICAL · 9.3 Unauthenticated SQL Injection in Newsletter Subscription Form – User Subscriptions Form, Capture Email
- CVE-2026-40807 HIGH · 7.1 Unauthenticated Cross Site Scripting (XSS) in CF7 Views – Complete Entry Management for Contact Form 7
- CVE-2026-40806 HIGH · 7.1 Unauthenticated Cross Site Scripting (XSS) in Blog, Posts and Category Filter for Elementor
- CVE-2026-39798 MEDIUM · 6.5 Unauthenticated Settings Change in TrueBooker
- CVE-2026-39797 CRITICAL · 9.8 Unauthenticated PHP Object Injection in GDPR Framework By Data443
- CVE-2026-39796 HIGH · 7.5 Unauthenticated Broken Access Control in Advanced Posts Listing – Show Post List Easily
- CVE-2026-39795 CRITICAL · 9.3 Unauthenticated SQL Injection in SendPress Newsletters
- CVE-2026-39794 HIGH · 7.5 Unauthenticated Broken Access Control in WooCommerce Multivendor Marketplace – REST API
- CVE-2026-39793 HIGH · 8.8 Subscriber Broken Authentication in Simple JWT Login 4.0.0 versions.
- CVE-2026-39792 HIGH · 8.6 Unauthenticated Arbitrary File Deletion in Simple File List
- CVE-2026-39791 MEDIUM · 5.3 Unauthenticated Sensitive Data Exposure in Mailjet Email Marketing
- CVE-2026-39790 HIGH · 7.1 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in e4jvikwp VikRentCar vikrentcar allows Reflected XSS.This issue affects VikRentCar: from n/a through 1.4.7.
- CVE-2026-39788 MEDIUM · 6.5 Subscriber Cross Site Scripting (XSS) in Front End PM
- CVE-2026-39787 MEDIUM · 6.5 Unauthenticated Broken Access Control in 10Web Social Photo Feed
- CVE-2026-39785 CRITICAL · 9.3 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Serhii Pasyuk Gmedia Photo Gallery grand-media allows Blind SQL Injection.This issue…
- CVE-2026-39784 HIGH · 7.1 Unauthenticated Cross Site Scripting (XSS) in Hotel Booking
- CVE-2026-39781 HIGH · 7.1 Unauthenticated Cross Site Scripting (XSS) in Document Gallery
- CVE-2026-39780 HIGH · 7.1 Unauthenticated Cross Site Scripting (XSS) in Youzify
- CVE-2026-39778 HIGH · 7.1 Unauthenticated Cross Site Scripting (XSS) in Ansar Import – One Click Starter Sites – for Elementor & Themes
- CVE-2026-39776 HIGH · 8.0 Editor Remote Code Execution (RCE) in Tabs
- CVE-2026-39775 HIGH · 8.8 Subscriber Privilege Escalation in JobZilla - Job Board WordPress Theme
- CVE-2026-39774 HIGH · 8.8 Unauthenticated Privilege Escalation in Tourfic Pro
- CVE-2026-39773 CRITICAL · 10.0 Unauthenticated Privilege Escalation in Doctreat Core
- CVE-2026-39772 MEDIUM · 5.3 Unauthenticated Bypass Vulnerability in Captcha by BestWebSoft
- CVE-2026-39771 HIGH · 8.5 Subscriber SQL Injection in Buddyboss Platform
- CVE-2026-39770 CRITICAL · 10.0 Unauthenticated Arbitrary File Upload in Doctreat
- CVE-2026-39769 HIGH · 7.5 Authentication Bypass Using an Alternate Path or Channel vulnerability in Iqonic Designs Graphina – Charts and Graphs For Elementor graphina-elementor-charts-and-graphs allows Password Recovery Exploitation.This issue…
- CVE-2026-39768 NONE Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. False positive.