Filter and search through 392,315 vulnerabilities
| CVE ID | Description | CVSS | Priority | Trend | Exploit | Patch |
|---|---|---|---|---|---|---|
| CVE-2026-24390 | Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in QantumThemes Kentha Elementor... | 7.5 | 386 | Neutral | No |
| Yes |
| CVE-2026-24389 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WP Chill Gallery PhotoBlocks photoblocks-grid-ga... | 6.5 | 311 | Neutral | No | Yes |
| CVE-2026-24388 | Missing Authorization vulnerability in Ludwig You WPMasterToolKit wpmastertoolkit allows Exploiting Incorrectly Configured Access Control Security Lev... | 4.3 | 163 | Neutral | No | Yes |
| CVE-2026-24387 | Missing Authorization vulnerability in Arul Prasad J WP Quick Post Duplicator wp-quick-post-duplicator allows Exploiting Incorrectly Configured Access... | 4.3 | 163 | Neutral | No | Yes |
| CVE-2026-24386 | Missing Authorization vulnerability in Element Invader Element Invader – Template Kits for Elementor elementinvader allows Exploiting Incorrectl... | 4.3 | 163 | Neutral | No | Yes |
| CVE-2026-24384 | Cross-Site Request Forgery (CSRF) vulnerability in launchinteractive Merge + Minify + Refresh merge-minify-refresh allows Cross Site Request Forgery.T... | 5.4 | 185 | Neutral | No | Yes |
| CVE-2026-24383 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in bPlugins B Slider b-slider allows DOM-Based XSS.... | 0.0 | 0 | Neutral | No | Yes |
| CVE-2026-24381 | Server-Side Request Forgery (SSRF) vulnerability in ThemeGoods PhotoMe photome allows Server Side Request Forgery.This issue affects PhotoMe: from n/a... | 5.4 | 250 | Neutral | No | Yes |
| CVE-2026-24380 | Missing Authorization vulnerability in Metagauss EventPrime eventprime-event-calendar-management allows Exploiting Incorrectly Configured Access Contr... | 8.8 | 609 | Neutral | No | Yes |
| CVE-2026-24379 | Authorization Bypass Through User-Controlled Key vulnerability in wpjobportal WP Job Portal wp-job-portal allows Exploiting Incorrectly Configured Acc... | 9.1 | 589 | Neutral | No | Yes |
| CVE-2026-24377 | Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in POSIMYTH Nexter Blocks the-plus-addons-for-block-editor al... | 7.5 | 386 | Neutral | No | Yes |
| CVE-2026-24374 | Cross-Site Request Forgery (CSRF) vulnerability in Metagauss RegistrationMagic custom-registration-form-builder-with-submission-manager allows Cross S... | 5.4 | 185 | Neutral | No | Yes |
| CVE-2026-24371 | Missing Authorization vulnerability in bookingalgorithms BA Book Everything ba-book-everything allows Exploiting Incorrectly Configured Access Control... | 9.8 | 653 | Neutral | No | Yes |
| CVE-2026-24368 | Missing Authorization vulnerability in Theme-one The Grid the-grid allows Exploiting Incorrectly Configured Access Control Security Levels.This issue ... | 8.8 | 609 | Neutral | No | Yes |
| CVE-2026-24367 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in shinetheme Traveler traveler allows Blind SQL In... | 8.8 | 673 | Neutral | No | Yes |
| CVE-2026-24366 | Missing Authorization vulnerability in YITHEMES YITH WooCommerce Request A Quote yith-woocommerce-request-a-quote allows Exploiting Incorrectly Config... | 5.3 | 188 | Neutral | No | Yes |
| CVE-2026-24365 | Cross-Site Request Forgery (CSRF) vulnerability in storeapps Stock Manager for WooCommerce woocommerce-stock-manager allows Cross Site Request Forgery... | 5.4 | 185 | Neutral | No | Yes |
| CVE-2026-24361 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in ThimPress LearnPress – Course Review learn... | 6.5 | 311 | Neutral | No | Yes |
| CVE-2026-24360 | Server-Side Request Forgery (SSRF) vulnerability in Craig Hewitt Seriously Simple Podcasting seriously-simple-podcasting allows Server Side Request Fo... | 4.6 | 224 | Neutral | No | Yes |
| CVE-2026-24358 | Missing Authorization vulnerability in ExpressTech Systems Quiz And Survey Master quiz-master-next allows Exploiting Incorrectly Configured Access Con... | 8.8 | 609 | Neutral | No | Yes |