CVE-database
128.783 CVEs in database. Zoek op product (bv. fortinet, exchange) of CVE-ID.
- CVE-2026-41560 HIGH · 7.5 Unauthenticated Broken Access Control in WXD Backup Lite
- CVE-2026-41559 HIGH · 7.5 Unauthenticated Sensitive Data Exposure in SafeSnap – Verified WordPress Backup & Restore
- CVE-2026-41555 CRITICAL · 9.3 Unauthenticated SQL Injection in Newsletter Subscription Form – User Subscriptions Form, Capture Email
- CVE-2026-40807 HIGH · 7.1 Unauthenticated Cross Site Scripting (XSS) in CF7 Views – Complete Entry Management for Contact Form 7
- CVE-2026-40806 HIGH · 7.1 Unauthenticated Cross Site Scripting (XSS) in Blog, Posts and Category Filter for Elementor
- CVE-2026-39798 MEDIUM · 6.5 Unauthenticated Settings Change in TrueBooker
- CVE-2026-39797 CRITICAL · 9.8 Unauthenticated PHP Object Injection in GDPR Framework By Data443
- CVE-2026-39796 HIGH · 7.5 Unauthenticated Broken Access Control in Advanced Posts Listing – Show Post List Easily
- CVE-2026-39795 CRITICAL · 9.3 Unauthenticated SQL Injection in SendPress Newsletters
- CVE-2026-39794 HIGH · 7.5 Unauthenticated Broken Access Control in WooCommerce Multivendor Marketplace – REST API
- CVE-2026-39793 HIGH · 8.8 Subscriber Broken Authentication in Simple JWT Login 4.0.0 versions.
- CVE-2026-39792 HIGH · 8.6 Unauthenticated Arbitrary File Deletion in Simple File List
- CVE-2026-39791 MEDIUM · 5.3 Unauthenticated Sensitive Data Exposure in Mailjet Email Marketing
- CVE-2026-39790 HIGH · 7.1 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in e4jvikwp VikRentCar vikrentcar allows Reflected XSS.This issue affects VikRentCar: from n/a through 1.4.7.
- CVE-2026-39788 MEDIUM · 6.5 Subscriber Cross Site Scripting (XSS) in Front End PM
- CVE-2026-39787 MEDIUM · 6.5 Unauthenticated Broken Access Control in 10Web Social Photo Feed
- CVE-2026-39785 CRITICAL · 9.3 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Serhii Pasyuk Gmedia Photo Gallery grand-media allows Blind SQL Injection.This issue…
- CVE-2026-39784 HIGH · 7.1 Unauthenticated Cross Site Scripting (XSS) in Hotel Booking
- CVE-2026-39781 HIGH · 7.1 Unauthenticated Cross Site Scripting (XSS) in Document Gallery
- CVE-2026-39780 HIGH · 7.1 Unauthenticated Cross Site Scripting (XSS) in Youzify
- CVE-2026-39778 HIGH · 7.1 Unauthenticated Cross Site Scripting (XSS) in Ansar Import – One Click Starter Sites – for Elementor & Themes
- CVE-2026-39776 HIGH · 8.0 Editor Remote Code Execution (RCE) in Tabs
- CVE-2026-39775 HIGH · 8.8 Subscriber Privilege Escalation in JobZilla - Job Board WordPress Theme
- CVE-2026-39774 HIGH · 8.8 Unauthenticated Privilege Escalation in Tourfic Pro
- CVE-2026-39773 CRITICAL · 10.0 Unauthenticated Privilege Escalation in Doctreat Core
- CVE-2026-39772 MEDIUM · 5.3 Unauthenticated Bypass Vulnerability in Captcha by BestWebSoft
- CVE-2026-39771 HIGH · 8.5 Subscriber SQL Injection in Buddyboss Platform
- CVE-2026-39770 CRITICAL · 10.0 Unauthenticated Arbitrary File Upload in Doctreat
- CVE-2026-39769 HIGH · 7.5 Authentication Bypass Using an Alternate Path or Channel vulnerability in Iqonic Designs Graphina – Charts and Graphs For Elementor graphina-elementor-charts-and-graphs allows Password Recovery Exploitation.This issue…
- CVE-2026-39768 NONE Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. False positive.
- CVE-2026-39767 MEDIUM · 6.5 Subscriber Denial of Service Attack in WPBase Cache
- CVE-2026-39766 HIGH · 7.1 Unauthenticated Cross Site Scripting (XSS) in ARForms
- CVE-2026-39765 HIGH · 7.2 Shop Manager Privilege Escalation in Challan
- CVE-2026-39764 CRITICAL · 9.3 Unauthenticated SQL Injection in Radius Booking — Booking Calendar for Appointments & Services
- CVE-2026-39762 MEDIUM · 6.5 Missing Authorization vulnerability in Patterns In The Cloud Autoship Cloud for WooCommerce Subscription Products autoship-cloud allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects…
- CVE-2026-39761 CRITICAL · 9.8 Unauthenticated Privilege Escalation in Meta Box AIO
- CVE-2026-39759 CRITICAL · 9.9 Employer / Sales Representative Arbitrary File Upload in Workreap Core
- CVE-2026-39758 HIGH · 7.1 Unauthenticated Cross Site Scripting (XSS) in Midtrans-WooCommerce
- CVE-2026-39757 CRITICAL · 9.9 Subscriber Arbitrary File Upload in Taskbot
- CVE-2026-39756 MEDIUM · 6.5 Unauthenticated Insecure Direct Object References (IDOR) in Wappointment
- CVE-2026-39755 CRITICAL · 9.9 Subscriber Arbitrary File Upload in WP Duplicate
- CVE-2026-39754 MEDIUM · 6.5 Contributor Arbitrary File Download in Piotnet Addons For Elementor
- CVE-2026-39753 CRITICAL · 9.8 Unauthenticated Privilege Escalation in Taskbot
- CVE-2026-39752 HIGH · 7.7 Contributor Arbitrary File Deletion in Jobs for WordPress
- CVE-2026-39751 HIGH · 7.5 Unauthenticated Broken Access Control in PayPlug for WooCommerce (Official)
- CVE-2026-39750 HIGH · 7.1 Unauthenticated Cross Site Scripting (XSS) in StoreGrowth: Smart Sales Booster for WooCommerce | BOGO, Upsells, Direct Checkout, Quick View, Side Cart
- CVE-2026-39749 MEDIUM · 6.5 Subscriber Broken Access Control in App for Cloudflare®
- CVE-2026-39748 HIGH · 7.1 Unauthenticated Cross Site Scripting (XSS) in EduMall
- CVE-2026-39747 HIGH · 8.5 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in WofficeIO Woffice woffice allows SQL Injection.This issue affects Woffice: from n/a…
- CVE-2026-39746 CRITICAL · 9.3 Unauthenticated SQL Injection in Booknetic