CVE-database
128.783 CVEs in database. Zoek op product (bv. fortinet, exchange) of CVE-ID.
- CVE-2026-39745 HIGH · 7.1 Unauthenticated Cross Site Scripting (XSS) in Contact Form to DB by BestWebSoft
- CVE-2026-39731 HIGH · 7.1 Unauthenticated Cross Site Scripting (XSS) in Database for CF7
- CVE-2026-39730 HIGH · 7.1 Missing Authorization vulnerability in Marcin Wise Chat wise-chat allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Wise Chat: from n/a through 3.4.3.
- CVE-2026-39729 HIGH · 7.2 Unauthenticated Sensitive Data Exposure in Edwiser Bridge
- CVE-2026-39728 HIGH · 7.2 Unauthenticated Server Side Request Forgery (SSRF) in Instapage Plugin
- CVE-2026-39727 MEDIUM · 6.5 Subscriber Cross Site Scripting (XSS) in WC Fields Factory
- CVE-2026-39726 HIGH · 7.1 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Lumise Lumise Product Designer lumise allows Reflected XSS.This issue affects Lumise Product Designer:…
- CVE-2026-39725 NONE Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. Duplicate to CVE-2026-1829.
- CVE-2026-39724 HIGH · 7.1 Unauthenticated Cross Site Scripting (XSS) in HTTP Requests Manager
- CVE-2026-39722 HIGH · 7.1 Unauthenticated Cross Site Scripting (XSS) in WPLMS
- CVE-2026-39720 HIGH · 7.1 Unauthenticated Cross Site Scripting (XSS) in Mapster WP Maps
- CVE-2026-39719 HIGH · 7.2 Unauthenticated Server Side Request Forgery (SSRF) in PDF Smart Viewer for Elementor
- CVE-2026-32581 HIGH · 7.1 Subscriber SQL Injection in Mooberry Book Manager 4.16.2 versions.
- CVE-2026-32580 HIGH · 7.5 Unauthenticated SQL Injection in WooCommerce Lottery
- CVE-2026-32579 CRITICAL · 10.0 Unauthenticated Arbitrary File Upload in Kognetiks Chatbot for WordPress
- CVE-2026-32578 HIGH · 7.1 Subscriber Broken Access Control in ECPay Ecommerce for WooCommerce
- CVE-2026-32577 HIGH · 7.1 Unauthenticated Cross Site Scripting (XSS) in Frontend File Manager
- CVE-2026-32575 HIGH · 7.1 Unauthenticated Cross Site Scripting (XSS) in SUMO Affiliates Pro
- CVE-2026-32574 HIGH · 7.1 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in EDGARROJAS Smart Forms smart-forms allows DOM-Based XSS.This issue affects Smart Forms: from n/a…
- CVE-2026-32572 HIGH · 7.1 Unauthenticated Cross Site Scripting (XSS) in WP User Frontend Pro
- CVE-2026-32571 MEDIUM · 6.5 Subscriber Cross Site Scripting (XSS) in Ohio Extra
- CVE-2026-32570 HIGH · 7.1 Unauthenticated Cross Site Scripting (XSS) in Progressify - Progressive Web App (PWA)
- CVE-2026-32569 HIGH · 7.1 Unauthenticated Cross Site Scripting (XSS) in WP Media folder
- CVE-2026-32568 CRITICAL · 9.9 Subscriber Remote Code Execution (RCE) in WooCommerce Designer Pro
- CVE-2026-32557 CRITICAL · 9.3 Unauthenticated SQL Injection in WooCommerce Appointments
- CVE-2026-25434 HIGH · 8.5 Subscriber SQL Injection in WP2LEADS
- CVE-2026-25433 HIGH · 7.1 Subscriber Broken Access Control in WP2LEADS
- CVE-2026-105879 MEDIUM · 6.5 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Crocoblock JetElements For Elementor jet-elements allows Stored XSS.This issue affects JetElements For Elementor:…
- CVE-2026-105809 MEDIUM · 4.3 A vulnerability was identified in SourceCodester Simple Student Information System 1.0. This issue affects some unknown processing of the file /register.php of the component Profile…
- CVE-2026-105808 LOW · 3.5 A vulnerability was determined in SourceCodester Simple Student Information System 1.0. This vulnerability affects the function clean of the file searchresults.php. Executing a manipulation of…
- CVE-2026-105317 HIGH · 8.5 Subscriber SQL Injection in Paid Member Subscriptions
- CVE-2026-105071 HIGH · 7.5 Unauthenticated Sensitive Data Exposure in SiteVault – Backup, Restore, Migration & Cloning
- CVE-2026-105070 HIGH · 8.8 Unauthenticated Privilege Escalation in Salon booking system
- CVE-2026-105061 HIGH · 7.1 Unauthenticated Cross Site Scripting (XSS) in WP Mailster
- CVE-2026-105059 MEDIUM · 6.5 Missing Authorization vulnerability in royalnavneet Delete All Comments of wordpress delete-all-comments-of-website allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Delete All Comments of…
- CVE-2026-105058 HIGH · 8.8 Subscriber Privilege Escalation in WP User Profiles
- CVE-2026-105057 MEDIUM · 5.3 Unauthenticated Bypass Vulnerability in Zero Spam
- CVE-2026-104814 HIGH · 7.1 Unauthenticated Cross Site Scripting (XSS) in Form Block
- CVE-2026-104757 HIGH · 7.2 Editor Privilege Escalation in Import and export users and customers
- CVE-2026-104747 HIGH · 8.1 Unauthenticated PHP Object Injection in Haaken
- CVE-2026-104672 HIGH · 7.1 Unauthenticated Cross Site Scripting (XSS) in GiveWP
- CVE-2026-104670 HIGH · 7.1 Unauthenticated Cross Site Scripting (XSS) in LearnPress
- CVE-2026-104406 HIGH · 7.3 Unauthenticated Broken Access Control in picu
- CVE-2026-104405 HIGH · 8.1 Unauthenticated Privilege Escalation in GiveWP
- CVE-2026-104399 NONE Insertion of Sensitive Information Into Sent Data vulnerability in StylemixThemes Motors allows Retrieve Embedded Sensitive Data. This issue affects Motors: from n/a through 1.4.124.
- CVE-2026-104395 HIGH · 7.1 Unauthenticated Cross Site Scripting (XSS) in picu
- CVE-2026-104394 HIGH · 7.1 Unauthenticated Cross Site Scripting (XSS) in Charitable
- CVE-2026-104387 HIGH · 7.2 Unauthenticated Broken Access Control in PowerPress Podcasting
- CVE-2026-104385 HIGH · 7.5 Unauthenticated Sensitive Data Exposure in Groundhogg
- CVE-2026-103346 HIGH · 7.1 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Tomlister Payflex Payment Gateway payflex-payment-gateway allows Reflected XSS.This issue affects Payflex Payment Gateway:…