RouterCVE

Search

Published: All 7d 30d 90d 12m
Severity: All Critical High Medium Low

172,839 CVEs · Medium severity

Hide EOL products

CVEs (172,839, showing first 500)

Only the first 500 CVEs (by current sort) are shown when searching without a keyword. Add a search term above to narrow the results.

Showing 226–250 of 172,839 (capped at 500)

CVE ID ↓ Severity Patch CVSS Published Description
CVE-2026-9729 MEDIUM 6.4 2026-07-23 The Webpushr Push Notifications plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'webpushr_notification_title' and 'webpushr_notification_body' par…
CVE-2026-97288 MEDIUM 6.5 2026-09-30 Contributor Cross Site Scripting (XSS) in OAuth Server <= 4.5.1 versions.
CVE-2026-97286 MEDIUM 6.5 2026-09-30 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WP Chill Strong Testimonials strong-testimonials allows Stored XSS.Thi&hellip;
CVE-2026-97285 MEDIUM 5.4 2026-09-30 Contributor Broken Access Control in The Events Calendar <= 6.17.5 versions.
CVE-2026-97282 MEDIUM 5.3 2026-09-30 Unauthenticated Insecure Direct Object References (IDOR) in Review Schema <= 3.1.0 versions.
CVE-2026-97281 MEDIUM 6.3 2026-10-01 Subscriber Broken Access Control in WP Project Manager <= 4.0.7 versions.
CVE-2026-97280 MEDIUM 6.5 2026-10-01 Missing Authorization vulnerability in Mamunur Rashid Review Schema review-schema allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affec&hellip;
CVE-2026-9728 MEDIUM 6.4 2026-08-24 The userspace syscall verifier z_vrfy_mbox_send() in drivers/mbox/mbox_handlers.c validated the nested msg->data/msg->size fields by reading them directly out of live users&hellip;
CVE-2026-97279 MEDIUM 6.5 2026-09-30 Contributor Cross Site Scripting (XSS) in Polylang <= 3.8.9 versions.
CVE-2026-97275 MEDIUM 5.3 2026-10-05 Improper Validation of Specified Quantity in Input vulnerability in VillaTheme BuildKit – Product Builder for WooCommerce – Custom PC Builder woo-product-builder allows Inp&hellip;
CVE-2026-97270 MEDIUM 6.5 2026-09-30 Subscriber Cross Site Scripting (XSS) in CMB2 <= 2.13.0 versions.
CVE-2026-97269 MEDIUM 6.5 2026-10-01 Unauthenticated Insecure Direct Object References (IDOR) in WPFunnels <= 3.13.1 versions.
CVE-2026-97267 MEDIUM 4.3 2026-09-30 Subscriber Broken Access Control in Prevent files / folders access <= 2.6.7 versions.
CVE-2026-97266 MEDIUM 6.5 2026-09-30 Contributor Cross Site Scripting (XSS) in Virtue/Ascend/Pinnacle Toolkit <= 4.9.12.1 versions.
CVE-2026-97265 MEDIUM 6.5 2026-09-30 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Crocoblock. Jetimpex Inc. JetEngine allows Stored XSS. This issue aff&hellip;
CVE-2026-97262 MEDIUM 6.5 2026-09-30 Contributor Cross Site Scripting (XSS) in Visual Composer Website Builder <= 45.16.2 versions.
CVE-2026-97261 MEDIUM 5.3 2026-09-30 Unauthenticated Sensitive Data Exposure in Notivo <= 1.4.2 versions.
CVE-2026-97258 MEDIUM 6.5 2026-10-01 Subscriber Broken Access Control in Aruba Migration Tool <= 1.0.4 versions.
CVE-2026-97251 MEDIUM 6.5 2026-10-01 Unauthenticated Insecure Direct Object References (IDOR) in Bus Ticket Booking with Seat Reservation <= 5.9.3 versions.
CVE-2026-97249 MEDIUM 5.3 2026-09-30 Unauthenticated Bypass Vulnerability in Paid Member Subscriptions <= 3.0.9 versions.
CVE-2026-97247 MEDIUM 6.5 2026-09-30 Unauthenticated Broken Access Control in Blocksy Companion <= 2.1.55 versions.
CVE-2026-97246 MEDIUM 4.9 2026-09-30 Deserialization of Untrusted Data vulnerability in ShortPixel ShortPixel Image Optimizer shortpixel-image-optimiser allows Object Injection.This issue affects ShortPixel Im&hellip;
CVE-2026-97243 MEDIUM 5.4 2026-09-30 Subscriber Broken Access Control in AllAble Connector <= 0.13.4 versions.
CVE-2026-97242 MEDIUM 6.8 2026-09-30 Author Arbitrary File Deletion in WEBO MCP <= 3.0.18 versions.
CVE-2026-9724 MEDIUM 4.3 2026-06-24 The MotorDesk plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.1.2. This is due to missing or incorrect nonce valida&hellip;