Search

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Search Examples

CVEs in KEV CVEs with EPSS >= 80% Crit. Microsoft High Apache SQL Injection (CWE-89) Linux Kernel High (CVSS 3.1) Apache Struts RCE (Remote Code Execution) XSS (CWE-79) Critical (CVSS 4.0) CVEs to check

Search Results (13606 CVEs found)

Export CSV
CVE Vendors Products Updated CVSS v3.1
CVE-2025-10268 2 Printcart, Wordpress 2 Web To Print Product Designer, Wordpress 2026-06-29 5.3 Medium
The Printcart Web to Print Product Designer for WooCommerce WordPress plugin through 2.4.8 is vulnerable to path traversal which makes it possible for the attacker to retrieve the directory listing for arbitrary directories on the server.
CVE-2026-10823 2 Wordpress, Ymc Filter 2 Wordpress, Ymc Filter 2026-06-29 7.5 High
The YMC Filter WordPress plugin before 3.11.3 does not properly authorize access to one of its REST API endpoints and does not validate a user-supplied query parameter, allowing unauthenticated attackers to retrieve the titles and content of private, draft, and other non-public posts.
CVE-2026-10835 2 Salesmanago, Wordpress 2 Salesmanago, Wordpress 2026-06-29 7.7 High
The SALESmanago & Leadoo WordPress plugin before 3.11.3 does not properly sanitise and escape a parameter passed to one of its AJAX actions before using it in a SQL statement, and fails to enforce authorisation on that action, allowing authenticated users with minimal permissions, such as subscribers, to perform SQL injection attacks.
CVE-2025-63041 2 Codeamp, Wordpress 2 Forget About Shortcode Buttons, Wordpress 2026-06-29 5.4 Medium
Contributor Broken Access Control in Forget About Shortcode Buttons <= 2.1.3 versions.
CVE-2025-63078 2 Jetmonsters, Wordpress 2 Restaurant Menu By Motopress, Wordpress 2026-06-29 4.3 Medium
Subscriber Broken Access Control in Restaurant Menu by MotoPress <= 2.4.11 versions.
CVE-2025-63079 2 Bdthemes, Wordpress 2 Live Copy Paste For Elementor, Wordpress 2026-06-29 4.3 Medium
Contributor Broken Access Control in Live Copy Paste for Elementor <= 1.5.3 versions.
CVE-2025-64636 2 Rhewlif, Wordpress 2 Donation Thermometer, Wordpress 2026-06-29 5.3 Medium
Unauthenticated Broken Access Control in Donation Thermometer <= 2.2.7 versions.
CVE-2025-64637 2 Opal Wp, Wordpress 2 Auros Core, Wordpress 2026-06-29 5.3 Medium
Unauthenticated Content Injection in Auros Core <= 5.3.1 versions.
CVE-2025-66123 2 About Envato, Wordpress 2 Bookpro, Wordpress 2026-06-29 5.3 Medium
Unauthenticated Insecure Direct Object References (IDOR) in BookPro <= 1.1.0 versions.
CVE-2025-68063 2 Stylemixthemes, Wordpress 2 Splash - Sport Club Wordpress Theme For Basketball, Football, Hockey, Wordpress 2026-06-29 7.5 High
Contributor Local File Inclusion in Splash - Sport Club WordPress Theme for Basketball, Football, Hockey <= 4.4.3 versions.
CVE-2025-68064 2 Everthemess, Wordpress 2 Goya Core, Wordpress 2026-06-29 7.5 High
Contributor Local File Inclusion in Goya Core < 1.0.9.4 versions.
CVE-2025-68074 2 Ghozylab, Wordpress 2 Image Carousel, Wordpress 2026-06-29 6.5 Medium
Contributor Cross Site Scripting (XSS) in Image Carousel <= 1.0.0.41 versions.
CVE-2025-68075 2 Kerry, Wordpress 2 Bne Testimonials, Wordpress 2026-06-29 6.5 Medium
Contributor Cross Site Scripting (XSS) in BNE Testimonials <= 2.0.8 versions.
CVE-2026-54833 2 Dev Kabir, Wordpress 2 Enable Cors, Wordpress 2026-06-29 7.4 High
Unauthenticated Backdoor in Enable CORS <= 2.0.3 versions.
CVE-2026-54834 2 Fpuenteonline, Wordpress 2 Object Cache 4 Everyone, Wordpress 2026-06-29 7.5 High
Unauthenticated Sensitive Data Exposure in Object Cache 4 everyone <= 2.3.2 versions.
CVE-2026-54835 2 Rustaurius, Wordpress 2 Five Star Restaurant Menu, Wordpress 2026-06-29 7.5 High
Unauthenticated Broken Access Control in Five Star Restaurant Menu <= 2.5.2 versions.
CVE-2026-54837 2 Syed Balkhi, Wordpress 2 Intranet & Private Site – All-in-one Intranet, Wordpress 2026-06-29 7.5 High
Unauthenticated Broken Access Control in Intranet &amp; Private Site &#8211; All-In-One Intranet <= 1.8.1 versions.
CVE-2026-54839 2 Kingaddons, Wordpress 2 Trinity Backup – Backup, Migrate, Restore, Clone & Schedule Backups, Wordpress 2026-06-29 7.5 High
Unauthenticated Sensitive Data Exposure in Trinity Backup &#8211; Backup, Migrate, Restore, Clone &amp; Schedule Backups <= 2.0.9 versions.
CVE-2026-54846 2 Akosglys, Wordpress 2 Syncee Premium Dropshipping & Wholesale, Wordpress 2026-06-29 7.5 High
Unauthenticated Broken Access Control in Syncee Premium Dropshipping &amp; Wholesale <= 1.0.27 versions.
CVE-2026-56025 2 Paymob, Wordpress 2 Paymob For Woocommerce, Wordpress 2026-06-29 7.5 High
Unauthenticated Broken Access Control in Paymob for WooCommerce <= 4.1.2 versions.