Search
151,644 CVEs · High severity
CVEs (151,644, showing first 500)
Only the first 500 CVEs (by current sort) are shown when searching without a keyword. Add a search term above to narrow the results.
Showing 401–425 of 151,644 (capped at 500)
| CVE ID ↓ | Severity | Patch | CVSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2026-97297 | HIGH | 7.6 | 2026-10-01 | Subscriber Broken Access Control in Gratisfaction <= 4.6.3 versions. | |
| CVE-2026-97296 | HIGH | Patched | 8.1 | 2026-10-16 | Deserialization of Untrusted Data vulnerability in Rocketgenius, Inc Gravity Forms gravityforms allows Object Injection.This issue affects Gravity Forms: from n/a before 3.1.1. |
| CVE-2026-97293 | HIGH | 8.5 | 2026-09-30 | Contributor SQL Injection in Media LIbrary Assistant <= 3.41 versions. | |
| CVE-2026-97291 | HIGH | 8.8 | 2026-09-30 | Contributor PHP Object Injection in Schema & Structured Data for WP & AMP <= 1.66 versions. | |
| CVE-2026-97290 | HIGH | 7.1 | 2026-09-30 | Unauthenticated Cross Site Scripting (XSS) in Photonic Gallery & Lightbox for Flickr, SmugMug & Others <= 3.36 versions. | |
| CVE-2026-97289 | HIGH | 7.1 | 2026-09-30 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in ExpressTech Quiz And Survey Master quiz-master-next allows DOM-Based X… | |
| CVE-2026-97287 | HIGH | 8.5 | 2026-09-30 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Liquid Web / StellarWP Event Tickets event-tickets allows Blind SQL In… | |
| CVE-2026-97284 | HIGH | 8.8 | 2026-10-01 | Contributor PHP Object Injection in Icegram <= 3.1.31 versions. | |
| CVE-2026-97278 | HIGH | 7.2 | 2026-10-14 | Deserialization of Untrusted Data vulnerability in WP SYNTEX Polylang polylang allows Object Injection.This issue affects Polylang: from n/a through 3.8.9. | |
| CVE-2026-97277 | HIGH | 7.6 | 2026-10-01 | Subscriber Broken Access Control in Social Boost <= 3.6.2 versions. | |
| CVE-2026-97276 | HIGH | 7.1 | 2026-10-04 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in VeronaLabs WP Statistics wp-statistics allows Reflected XSS.This issue… | |
| CVE-2026-97273 | HIGH | 7.1 | 2026-10-01 | Unauthenticated Cross Site Scripting (XSS) in Premmerce Wishlist for WooCommerce <= 1.1.13 versions. | |
| CVE-2026-97272 | HIGH | 7.1 | 2026-09-30 | Unauthenticated Cross Site Scripting (XSS) in Premmerce Permalink Manager for WooCommerce <= 2.3.13 versions. | |
| CVE-2026-97271 | HIGH | 7.1 | 2026-09-30 | Unauthenticated Cross Site Scripting (XSS) in WPFunnels <= 3.13.1 versions. | |
| CVE-2026-97268 | HIGH | 7.1 | 2026-10-01 | Unauthenticated Cross Site Scripting (XSS) in Premmerce Wishlist for WooCommerce <= 1.1.13 versions. | |
| CVE-2026-97264 | HIGH | 7.1 | 2026-10-10 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Greg Winiarski WPAdverts wpadverts allows Reflected XSS.This issue aff… | |
| CVE-2026-97263 | HIGH | 7.1 | 2026-10-10 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Greg Winiarski WPAdverts wpadverts allows Stored XSS.This issue affect… | |
| CVE-2026-97260 | HIGH | 7.1 | 2026-10-01 | Unauthenticated Cross Site Scripting (XSS) in MaxGalleria <= 6.5.3 versions. | |
| CVE-2026-97257 | HIGH | 8.8 | 2026-10-05 | Deserialization of Untrusted Data vulnerability in PressTigers Simple Event Planner simple-event-planner allows Object Injection.This issue affects Simple Event Planner: fr… | |
| CVE-2026-97256 | HIGH | 7.2 | 2026-09-30 | Editor PHP Object Injection in Page Builder by SiteOrigin <= 2.36.0 versions. | |
| CVE-2026-97253 | HIGH | 7.1 | 2026-09-30 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Kreatura LayerSlider allows Reflected XSS. This issue affects LayerSl… | |
| CVE-2026-97250 | HIGH | 7.1 | 2026-09-30 | Unauthenticated Cross Site Scripting (XSS) in Geo Mashup <= 1.13.21 versions. | |
| CVE-2026-97245 | HIGH | 7.2 | 2026-09-30 | Shop Worker Privilege Escalation in SureCart <= 4.7.2 versions. | |
| CVE-2026-97244 | HIGH | 7.5 | 2026-09-30 | Contributor Path Traversal in Creator LMS <= 1.2.19 versions. | |
| CVE-2026-97241 | HIGH | 7.5 | 2026-09-30 | Unauthenticated Sensitive Data Exposure in BackupEase <= 2.2.2 versions. |