Filter and search through 392,438 vulnerabilities
| CVE ID | Description | CVSS | Priority | Trend | Exploit | Patch |
|---|---|---|---|---|---|---|
| CVE-2026-22518 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in pencilwp X Addons for Elementor allows DOM-Based... | 6.5 | 311 | Neutral | No |
| Yes |
| CVE-2026-22517 | Missing Authorization vulnerability in Passionate Brains GA4WP: Google Analytics for WordPress allows Exploiting Incorrectly Configured Access Control... | 5.4 | 185 | Neutral | No | Yes |
| CVE-2026-22492 | Missing Authorization vulnerability in Nawawi Jamili Docket Cache allows Exploiting Incorrectly Configured Access Control Security Levels.This issue a... | 4.3 | 163 | Neutral | No | Yes |
| CVE-2026-22490 | Missing Authorization vulnerability in niklaslindemann Bulk Landing Page Creator for WordPress LPagery allows Exploiting Incorrectly Configured Access... | 5.4 | 185 | Neutral | No | Yes |
| CVE-2026-22489 | Authorization Bypass Through User-Controlled Key vulnerability in Wptexture Image Slider Slideshow allows Exploiting Incorrectly Configured Access Con... | 4.3 | 120 | Neutral | No | Yes |
| CVE-2026-22488 | Missing Authorization vulnerability in IdeaBox Creations Dashboard Welcome for Beaver Builder allows Exploiting Incorrectly Configured Access Control ... | 5.3 | 188 | Neutral | No | Yes |
| CVE-2026-22487 | Missing Authorization vulnerability in baqend Speed Kit allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Spe... | 4.3 | 163 | Neutral | No | Yes |
| CVE-2026-22486 | Missing Authorization vulnerability in Hakob Re Gallery & Responsive Photo Gallery Plugin allows Exploiting Incorrectly Configured Access Control Secu... | 5.3 | 188 | Neutral | No | Yes |
| CVE-2026-22483 | Cross-Site Request Forgery (CSRF) vulnerability in winkm89 teachPress teachpress allows Cross Site Request Forgery.This issue affects teachPress: from... | 5.4 | 185 | Neutral | No | Yes |
| CVE-2026-22482 | Server-Side Request Forgery (SSRF) vulnerability in wbolt.com IMGspider imgspider allows Server Side Request Forgery.This issue affects IMGspider: fro... | 9.1 | 696 | Neutral | No | Yes |
| CVE-2026-22481 | Missing Authorization vulnerability in Rasedul Haque Rumi BD Courier Order Ratio Checker bd-courier-order-ratio-checker allows Exploiting Incorrectly ... | 8.8 | 609 | Neutral | No | Yes |
| CVE-2026-22472 | Missing Authorization vulnerability in hassantafreshi Easy Form Builder easy-form-builder allows Exploiting Incorrectly Configured Access Control Secu... | 8.8 | 609 | Neutral | No | Yes |
| CVE-2026-22470 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in FireStorm Plugins FireStorm Professional Real Es... | 7.6 | 522 | Neutral | No | Yes |
| CVE-2026-22469 | Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) vulnerability in mwtemplates DeepDigital deepdigital allows Code Injecti... | 5.3 | 124 | Neutral | No | Yes |
| CVE-2026-22468 | Missing Authorization vulnerability in AbsolutePlugins Absolute Addons For Elementor absolute-addons allows Exploiting Incorrectly Configured Access C... | 4.3 | 163 | Neutral | No | Yes |
| CVE-2026-22466 | Missing Authorization vulnerability in Chandni Patel WP MapIt wp-mapit allows Exploiting Incorrectly Configured Access Control Security Levels.This is... | 4.3 | 163 | Neutral | No | Yes |
| CVE-2026-22464 | Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in wphocus My auctions allegro m... | 7.5 | 386 | Neutral | No | Yes |
| CVE-2026-22463 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Micro.company Form to Chat App form-to-chat allo... | 6.5 | 311 | Neutral | No | Yes |
| CVE-2026-22462 | Cross-Site Request Forgery (CSRF) vulnerability in richardevcom Add Polylang support for Customizer add-polylang-support-for-customizer allows Cross S... | 4.3 | 163 | Neutral | No | Yes |
| CVE-2026-22461 | Missing Authorization vulnerability in WebAppick CTX Feed webappick-product-feed-for-woocommerce allows Exploiting Incorrectly Configured Access Contr... | 0.0 | 0 | Neutral | No | Yes |