CVE-database
126.581 CVEs in database. Zoek op product (bv. fortinet, exchange) of CVE-ID.
- CVE-2026-39767 MEDIUM · 6.5 Subscriber Denial of Service Attack in WPBase Cache
- CVE-2026-39766 HIGH · 7.1 Unauthenticated Cross Site Scripting (XSS) in ARForms
- CVE-2026-39765 HIGH · 7.2 Shop Manager Privilege Escalation in Challan
- CVE-2026-39764 CRITICAL · 9.3 Unauthenticated SQL Injection in Radius Booking — Booking Calendar for Appointments & Services
- CVE-2026-39762 MEDIUM · 6.5 Missing Authorization vulnerability in Patterns In The Cloud Autoship Cloud for WooCommerce Subscription Products autoship-cloud allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects…
- CVE-2026-39761 CRITICAL · 9.8 Unauthenticated Privilege Escalation in Meta Box AIO
- CVE-2026-39759 CRITICAL · 9.9 Employer / Sales Representative Arbitrary File Upload in Workreap Core
- CVE-2026-39758 HIGH · 7.1 Unauthenticated Cross Site Scripting (XSS) in Midtrans-WooCommerce
- CVE-2026-39757 CRITICAL · 9.9 Subscriber Arbitrary File Upload in Taskbot
- CVE-2026-39756 MEDIUM · 6.5 Unauthenticated Insecure Direct Object References (IDOR) in Wappointment
- CVE-2026-39755 CRITICAL · 9.9 Subscriber Arbitrary File Upload in WP Duplicate
- CVE-2026-39754 MEDIUM · 6.5 Contributor Arbitrary File Download in Piotnet Addons For Elementor
- CVE-2026-39753 CRITICAL · 9.8 Unauthenticated Privilege Escalation in Taskbot
- CVE-2026-39752 HIGH · 7.7 Contributor Arbitrary File Deletion in Jobs for WordPress
- CVE-2026-39751 HIGH · 7.5 Unauthenticated Broken Access Control in PayPlug for WooCommerce (Official)
- CVE-2026-39750 HIGH · 7.1 Unauthenticated Cross Site Scripting (XSS) in StoreGrowth: Smart Sales Booster for WooCommerce | BOGO, Upsells, Direct Checkout, Quick View, Side Cart
- CVE-2026-39749 MEDIUM · 6.5 Subscriber Broken Access Control in App for Cloudflare®
- CVE-2026-39748 HIGH · 7.1 Unauthenticated Cross Site Scripting (XSS) in EduMall
- CVE-2026-39747 HIGH · 8.5 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in WofficeIO Woffice woffice allows SQL Injection.This issue affects Woffice: from n/a…
- CVE-2026-39746 CRITICAL · 9.3 Unauthenticated SQL Injection in Booknetic
- CVE-2026-39745 HIGH · 7.1 Unauthenticated Cross Site Scripting (XSS) in Contact Form to DB by BestWebSoft
- CVE-2026-39731 HIGH · 7.1 Unauthenticated Cross Site Scripting (XSS) in Database for CF7
- CVE-2026-39730 HIGH · 7.1 Missing Authorization vulnerability in Marcin Wise Chat wise-chat allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Wise Chat: from n/a through 3.4.3.
- CVE-2026-39729 HIGH · 7.2 Unauthenticated Sensitive Data Exposure in Edwiser Bridge
- CVE-2026-39728 HIGH · 7.2 Unauthenticated Server Side Request Forgery (SSRF) in Instapage Plugin
- CVE-2026-39727 MEDIUM · 6.5 Subscriber Cross Site Scripting (XSS) in WC Fields Factory
- CVE-2026-39726 HIGH · 7.1 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Lumise Lumise Product Designer lumise allows Reflected XSS.This issue affects Lumise Product Designer:…
- CVE-2026-39725 NONE Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. Duplicate to CVE-2026-1829.
- CVE-2026-39724 HIGH · 7.1 Unauthenticated Cross Site Scripting (XSS) in HTTP Requests Manager
- CVE-2026-39722 HIGH · 7.1 Unauthenticated Cross Site Scripting (XSS) in WPLMS
- CVE-2026-39720 HIGH · 7.1 Unauthenticated Cross Site Scripting (XSS) in Mapster WP Maps
- CVE-2026-39719 HIGH · 7.2 Unauthenticated Server Side Request Forgery (SSRF) in PDF Smart Viewer for Elementor
- CVE-2026-32581 HIGH · 7.1 Subscriber SQL Injection in Mooberry Book Manager 4.16.2 versions.
- CVE-2026-32580 HIGH · 7.5 Unauthenticated SQL Injection in WooCommerce Lottery
- CVE-2026-32579 CRITICAL · 10.0 Unauthenticated Arbitrary File Upload in Kognetiks Chatbot for WordPress
- CVE-2026-32578 HIGH · 7.1 Subscriber Broken Access Control in ECPay Ecommerce for WooCommerce
- CVE-2026-32577 HIGH · 7.1 Unauthenticated Cross Site Scripting (XSS) in Frontend File Manager
- CVE-2026-32575 HIGH · 7.1 Unauthenticated Cross Site Scripting (XSS) in SUMO Affiliates Pro
- CVE-2026-32574 HIGH · 7.1 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in EDGARROJAS Smart Forms smart-forms allows DOM-Based XSS.This issue affects Smart Forms: from n/a…
- CVE-2026-32572 HIGH · 7.1 Unauthenticated Cross Site Scripting (XSS) in WP User Frontend Pro
- CVE-2026-32571 MEDIUM · 6.5 Subscriber Cross Site Scripting (XSS) in Ohio Extra
- CVE-2026-32570 HIGH · 7.1 Unauthenticated Cross Site Scripting (XSS) in Progressify - Progressive Web App (PWA)
- CVE-2026-32569 HIGH · 7.1 Unauthenticated Cross Site Scripting (XSS) in WP Media folder
- CVE-2026-32568 CRITICAL · 9.9 Subscriber Remote Code Execution (RCE) in WooCommerce Designer Pro
- CVE-2026-32557 CRITICAL · 9.3 Unauthenticated SQL Injection in WooCommerce Appointments
- CVE-2026-25434 HIGH · 8.5 Subscriber SQL Injection in WP2LEADS
- CVE-2026-25433 HIGH · 7.1 Subscriber Broken Access Control in WP2LEADS
- CVE-2026-105879 MEDIUM · 6.5 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Crocoblock JetElements For Elementor jet-elements allows Stored XSS.This issue affects JetElements For Elementor:…
- CVE-2026-105809 MEDIUM · 4.3 A vulnerability was identified in SourceCodester Simple Student Information System 1.0. This issue affects some unknown processing of the file /register.php of the component Profile…
- CVE-2026-105808 LOW · 3.5 A vulnerability was determined in SourceCodester Simple Student Information System 1.0. This vulnerability affects the function clean of the file searchresults.php. Executing a manipulation of…