CVE search

369,587 results
CVE-2026-57753MEDIUMWordPress Kit (formerly ConvertKit) for WooCommerce plugin <= 2.1.5 - Sensitive Data Exposure vulnerabilityEPSS 0.2%CVE-2026-57752HIGHWordPress iNET Webkit plugin 1.2.4 - SQL Injection vulnerabilityEPSS 0.3%CVE-2026-57751HIGHWordPress Heateor Social Login plugin <= 1.1.39 - Cross Site Request Forgery (CSRF) vulnerabilityEPSS 0.1%CVE-2026-57750MEDIUMWordPress ez Form Calculator Premium plugin <= 2.14.1.2 - Broken Access Control vulnerabilityEPSS 0.2%CVE-2026-57749HIGHWordPress SportsPress Pro plugin <= 2.7.29 - Local File Inclusion vulnerabilityEPSS 0.3%CVE-2026-57748HIGHWordPress Shopify plugin <= 1.0.0 - Local File Inclusion vulnerabilityEPSS 0.3%CVE-2026-57747MEDIUMWordPress Booked plugin <= 3.0.0 - Cross Site Request Forgery (CSRF) vulnerabilityEPSS 0.1%CVE-2026-57746HIGHWordPress Booked plugin <= 3.0.0 - Broken Access Control vulnerabilityEPSS 0.2%CVE-2026-57731MEDIUMWordPress Flatsome theme <= 3.20.5 - Broken Access Control vulnerabilityEPSS 0.2%CVE-2026-57730MEDIUMWordPress Flatsome theme <= 3.20.5 - Broken Access Control vulnerabilityEPSS 0.2%CVE-2026-57690MEDIUMWordPress Werkstatt theme <= 4.7.2 - Cross Site Request Forgery (CSRF) vulnerabilityEPSS 0.1%CVE-2026-57689MEDIUMWordPress Werkstatt theme <= 4.7.2 - Broken Access Control vulnerabilityEPSS 0.2%CVE-2026-57688HIGHWordPress POS Entegratör plugin <= 3.7.103 - Broken Access Control vulnerabilityEPSS 0.2%CVE-2026-57687HIGHWordPress Custom Field Template plugin <= 2.7.8 - SQL Injection vulnerabilityEPSS 0.2%CVE-2026-57686HIGHWordPress WowAddons plugin <= 1.6.14 - Cross Site Scripting (XSS) vulnerabilityEPSS 0.2%CVE-2026-57685MEDIUMWordPress Martfury - WooCommerce Marketplace WordPress theme theme <= 3.2.8 - Broken Access Control vulnerabilityEPSS 0.3%CVE-2026-57684MEDIUMWordPress TheFox theme <= 3.9.70 - Cross Site Scripting (XSS) vulnerabilityEPSS 0.2%CVE-2026-57683CRITICALWordPress WP Fast Total Search plugin <= 1.80.280 - SQL Injection vulnerabilityEPSS 0.2%CVE-2026-57682HIGHWordPress Simple Link Directory plugin <= 15.0.5 - Cross Site Scripting (XSS) vulnerabilityEPSS 0.2%CVE-2026-57681MEDIUMWordPress GeoDirectory plugin <= 2.8.161 - Server Side Request Forgery (SSRF) vulnerabilityEPSS 0.2%