Search

Published: All 7d 30d 90d 12m
Severity: All Critical High Medium Low

3,173 CVEs

CVEs (3,173, showing first 500)

Only the first 500 CVEs (by current sort) are shown when searching without a keyword. Add a search term above to narrow the results.

Showing 176–200 of 3,173 (capped at 500)

CVE ID Severity Patch CVSS Published Description
CVE-2026-65500 HIGH 7.5 2026-07-23 Unauthenticated Broken Access Control in Manual - Documentation, Knowledge Base & Education WordPress Theme <= 7.5.4 versions.
CVE-2026-65499 MEDIUM 6.5 2026-07-23 Unauthenticated Broken Access Control in PeproDev Ultimate Invoice <= 2.2.6 versions.
CVE-2026-65498 MEDIUM 5.3 2026-07-23 Unauthenticated Sensitive Data Exposure in Complianz <= 7.5.0 versions.
CVE-2026-65497 HIGH 7.2 2026-07-23 Administrator PHP Object Injection in Complianz <= 7.5.0 versions.
CVE-2026-65496 MEDIUM 4.4 2026-07-23 Author Server Side Request Forgery (SSRF) in Complianz <= 7.5.0 versions.
CVE-2026-65495 HIGH 7.5 2026-07-23 Unauthenticated Broken Access Control in Dokan Pro <= 5.0.3 versions.
CVE-2026-65494 HIGH 7.1 2026-07-23 Subscriber SQL Injection in Dokan Pro <= 5.0.2 versions.
CVE-2026-65493 HIGH 7.5 2026-07-23 Subscriber PHP Object Injection in Dokan Pro <= 5.0.2 versions.
CVE-2026-65492 HIGH 7.1 2026-07-23 Unauthenticated Cross Site Scripting (XSS) in Dokan Pro <= 5.0.0 versions.
CVE-2026-65491 MEDIUM 4.3 2026-07-23 Subscriber Broken Access Control in Query Wrangler <= 1.5.57 versions.
CVE-2026-65490 MEDIUM 5.3 2026-07-23 Unauthenticated Sensitive Data Exposure in Create by Mediavine <= 2.5.3 versions.
CVE-2026-65489 MEDIUM 5.3 2026-07-23 Unauthenticated Broken Access Control in LA-Studio Element Kit for Elementor <= 1.6.2 versions.
CVE-2026-65488 HIGH 7.1 2026-07-23 Unauthenticated Cross Site Request Forgery (CSRF) in LA-Studio Element Kit for Elementor <= 1.6.2 versions.
CVE-2026-65487 MEDIUM 5.3 2026-07-23 Unauthenticated Broken Access Control in Photography <= 7.7.6 versions.
CVE-2026-65486 MEDIUM 5.3 2026-07-23 Unauthenticated Broken Access Control in Event post <= 6.0.1 versions.
CVE-2026-65485 MEDIUM 5.3 2026-07-23 Unauthenticated Broken Access Control in Content Control <= 2.6.5 versions.
CVE-2026-65484 MEDIUM 6.3 2026-07-23 Contributor Broken Access Control in Style Kits <= 2.6.5 versions.
CVE-2026-65483 MEDIUM 5.9 2026-07-23 Author Cross Site Scripting (XSS) in HashThemes Demo Importer <= 1.4.2 versions.
CVE-2026-65482 MEDIUM 6.5 2026-07-23 Contributor Cross Site Scripting (XSS) in LA-Studio Element Kit for Elementor <= 1.6.2 versions.
CVE-2026-65481 HIGH 7.5 2026-07-23 Contributor Local File Inclusion in Vino <= 1.9 versions.
CVE-2026-65480 MEDIUM 6.5 2026-07-23 Contributor Cross Site Scripting (XSS) in TheGem <= 5.11.1 versions.
CVE-2026-65479 MEDIUM 5.4 2026-07-23 Subscriber Broken Access Control in Reviewer <= 3.14.2 versions.
CVE-2026-65478 MEDIUM 5.4 2026-07-23 Subscriber Broken Access Control in ListingPro <= 2.9.10 versions.
CVE-2026-65477 HIGH 7.5 2026-07-23 Contributor Local File Inclusion in Tonda Core <= 2.1.2 versions.
CVE-2026-65476 MEDIUM 5.3 2026-07-23 Unauthenticated Broken Access Control in Civi <= 2.2.4 versions.