Search

Expected end of text, found ',' (at char 36), (line:1, col:37)
Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Search Examples

CVEs in KEV CVEs with EPSS >= 80% Crit. Microsoft High Apache SQL Injection (CWE-89) Linux Kernel High (CVSS 3.1) Apache Struts RCE (Remote Code Execution) XSS (CWE-79) Critical (CVSS 4.0) CVEs to check

Search Results (370624 CVEs found)

Export CSV
CVE Vendors Products Updated CVSS v3.1
CVE-2026-66438 2026-07-27 5.3 Medium
Unauthenticated Sensitive Data Exposure in Exclusive Addons Elementor <= 2.8.0 versions.
CVE-2026-66437 2026-07-27 4.9 Medium
Contributor Server Side Request Forgery (SSRF) in Feedzy <= 5.2.4 versions.
CVE-2026-66434 2026-07-27 6.5 Medium
Contributor Cross Site Scripting (XSS) in Photonic Gallery & Lightbox for Flickr, SmugMug & Others <= 3.33 versions.
CVE-2026-66428 2026-07-27 4.3 Medium
Unauthenticated Cross Site Request Forgery (CSRF) in WP Google Review Slider <= 18.4 versions.
CVE-2026-66427 2026-07-27 7.6 High
Administrator SQL Injection in WP Google Review Slider <= 18.4 versions.
CVE-2026-65568 2026-07-27 5 Medium
Contributor Broken Access Control in Visual Composer Website Builder <= 45.15.0 versions.
CVE-2026-65567 2026-07-27 5.3 Medium
Unauthenticated Broken Access Control in Event Tickets <= 5.29.0.1 versions.
CVE-2026-65564 2026-07-27 5.3 Medium
Unauthenticated Sensitive Data Exposure in MapPress Maps for WordPress <= 2.97.6 versions.
CVE-2026-65562 2026-07-27 6.5 Medium
Contributor Cross Site Scripting (XSS) in BetterDocs <= 4.6.2 versions.
CVE-2026-65561 2026-07-27 6.5 Medium
Contributor Cross Site Scripting (XSS) in WordPress Social Login and Register <= 7.8.0 versions.
CVE-2026-65558 2026-07-27 5.4 Medium
Unauthenticated Server Side Request Forgery (SSRF) in AffiliateX <= 2.3.5 versions.
CVE-2026-65557 2026-07-27 5.9 Medium
Shop manager Cross Site Scripting (XSS) in Abandoned Cart Lite for WooCommerce <= 6.8.0 versions.
CVE-2026-65436 2026-07-27 6.8 Medium
Editor Arbitrary File Deletion in Kirki <= 6.0.13 versions.
CVE-2026-65433 2026-07-27 6.5 Medium
Subscriber Broken Access Control in RT Mega Menu – Mega Menu Builder for Elementor &amp; Gutenberg <= 1.5.1 versions.
CVE-2026-59560 2026-07-27 6.5 Medium
Subscriber Broken Access Control in FundEngine <= 1.7.8 versions.
CVE-2026-59559 2026-07-27 6.5 Medium
Subscriber Cross Site Scripting (XSS) in RT Mega Menu – Mega Menu Builder for Elementor &amp; Gutenberg <= 1.5.1 versions.
CVE-2026-59558 2026-07-27 7.1 High
Unauthenticated Cross Site Scripting (XSS) in Booking Calendar <= 11.4.2 versions.
CVE-2026-59553 2026-07-27 7.1 High
Unauthenticated Cross Site Scripting (XSS) in Product Feed Manager <= 7.6.1 versions.
CVE-2026-59552 2026-07-27 7.2 High
Unauthenticated Server Side Request Forgery (SSRF) in 3D Flipbook PDF Viewer &amp; Embedder <= 1.4.2 versions.
CVE-2026-59551 2026-07-27 8.5 High
Subscriber SQL Injection in rtMedia for WordPress, BuddyPress and bbPress <= 4.7.10 versions.