CVE search

369,580 results
CVE-2026-56037HIGHWordPress Themify Popup plugin <= 1.4.3 - PHP Object Injection vulnerabilityEPSS 0.3%CVE-2026-57766HIGHWordPress WPIDE – File Manager & Code Editor plugin <= 3.5.6 - Cross Site Request Forgery (CSRF) vulnerabilityEPSS 0.1%CVE-2026-57765HIGHWordPress WP EasyCart plugin <= 5.9.0 - SQL Injection vulnerabilityEPSS 0.2%CVE-2026-57764MEDIUMWordPress Surbma | Yoast SEO Breadcrumb Shortcode plugin <= 1.2 - Cross Site Scripting (XSS) vulnerabilityEPSS 0.1%CVE-2026-57763MEDIUMWordPress Structured Content plugin <= 1.7.0 - Cross Site Scripting (XSS) vulnerabilityEPSS 0.1%CVE-2026-57762MEDIUMWordPress Simple URLs plugin <= 151 - Cross Site Scripting (XSS) vulnerabilityEPSS 0.1%CVE-2026-57761HIGHWordPress SEOWP theme <= 3.12.2 - CSRF to Stored XSS vulnerabilityEPSS 0.1%CVE-2026-57759HIGHWordPress ProfileGrid plugin <= 5.9.9.7 - CSRF to Account Takeover vulnerabilityEPSS 0.1%CVE-2026-57758HIGHWordPress Permalink Manager for WooCommerce plugin <= 1.0.8.2 - CSRF to Stored XSS vulnerabilityEPSS 0.1%CVE-2026-57757HIGHWordPress pCloud WP Backup plugin <= 2.0.2 - Cross Site Request Forgery (CSRF) vulnerabilityEPSS 0.1%CVE-2026-57756HIGHWordPress nicen-localize-image plugin <= 1.4.9 - SQL Injection vulnerabilityEPSS 0.2%CVE-2026-57755MEDIUMWordPress Mosaic Gallery &#8211; Advanced Gallery plugin <= 1.2.0 - Cross Site Scripting (XSS) vulnerabilityEPSS 0.1%CVE-2026-57754MEDIUMWordPress Livemesh Addons for WPBakery Page Builder plugin <= 3.9.4 - Cross Site Scripting (XSS) vulnerabilityEPSS 0.1%CVE-2026-57753MEDIUMWordPress Kit (formerly ConvertKit) for WooCommerce plugin <= 2.1.5 - Sensitive Data Exposure vulnerabilityEPSS 0.2%CVE-2026-57752HIGHWordPress iNET Webkit plugin 1.2.4 - SQL Injection vulnerabilityEPSS 0.3%CVE-2026-57751HIGHWordPress Heateor Social Login plugin <= 1.1.39 - Cross Site Request Forgery (CSRF) vulnerabilityEPSS 0.1%CVE-2026-57750MEDIUMWordPress ez Form Calculator Premium plugin <= 2.14.1.2 - Broken Access Control vulnerabilityEPSS 0.2%CVE-2026-57749HIGHWordPress SportsPress Pro plugin <= 2.7.29 - Local File Inclusion vulnerabilityEPSS 0.3%CVE-2026-57748HIGHWordPress Shopify plugin <= 1.0.0 - Local File Inclusion vulnerabilityEPSS 0.3%CVE-2026-57747MEDIUMWordPress Booked plugin <= 3.0.0 - Cross Site Request Forgery (CSRF) vulnerabilityEPSS 0.1%