National Vulnerability Database • Synced Real-Time from NIST NVD & MITRE

Universal Security Vulnerabilities & CVE Catalog

Fast, deterministic intelligence across 396,747 official Common Vulnerabilities and Exposures (CVEs) with CVSS v3.1 vector breakdowns, threat severity scores, and verified remediation links.

Reset All
Found 45,350 matching advisories
Page 154 of 1,890
CWE-79 Remote (AV:N)

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in ThemeGoods Grand Magazine grandmagazine allows Reflected XSS.This issue affects Grand Magazine: fr...

📅 2026-01-22 Inspect Dossier →
CWE-94 Remote (AV:N)

Improper Control of Generation of Code ('Code Injection') vulnerability in Beaver Builder Beaver Builder beaver-builder-lite-version allows Code Injection.This issue affects Beaver Builder: from n/a t...

📅 2026-01-22 Inspect Dossier →
CWE-79 Remote (AV:N)

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Hossni Mubarak JobWP jobwp allows Stored XSS.This issue affects JobWP: from n/a through <= 2.4.5....

📅 2026-01-22 Inspect Dossier →
CWE-79 Remote (AV:N)

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in scriptsbundle CarSpot carspot allows Reflected XSS.This issue affects CarSpot: from n/a through < ...

📅 2026-01-22 Inspect Dossier →
CWE-79 Remote (AV:N)

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in RealMag777 TableOn posts-table-filterable allows Reflected XSS.This issue affects TableOn: from n/...

📅 2026-01-22 Inspect Dossier →
CVE-2025-69315 MEDIUM 6.5
CWE-862 Remote (AV:N)

Missing Authorization vulnerability in NSquared Simply Schedule Appointments simply-schedule-appointments allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Sim...

📅 2026-01-22 Inspect Dossier →
CWE-98 Remote (AV:N)

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in fuelthemes Werkstatt werkstatt allows PHP Local File Inclusion.This issue affec...

📅 2026-01-22 Inspect Dossier →
CWE-862 Remote (AV:N)

Missing Authorization vulnerability in WPXPO PostX ultimate-post allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects PostX: from n/a through <= 5.0.3....

📅 2026-01-22 Inspect Dossier →
CVE-2025-69312 CRITICAL 9.1
CWE-434 Remote (AV:N)

Unrestricted Upload of File with Dangerous Type vulnerability in Xpro Xpro Elementor Addons xpro-elementor-addons allows Upload a Web Shell to a Web Server.This issue affects Xpro Elementor Addons: fr...

📅 2026-01-22 Inspect Dossier →
CWE-862 Remote (AV:N)

Missing Authorization vulnerability in Broadstreet Broadstreet Ads broadstreet allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Broadstreet Ads: from n/a thro...

📅 2026-01-22 Inspect Dossier →
CVE-2025-69300 MEDIUM 5.4
CWE-862 Remote (AV:N)

Missing Authorization vulnerability in Leap13 Premium Addons for Elementor premium-addons-for-elementor allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Premi...

📅 2026-01-22 Inspect Dossier →
CWE-266 Remote (AV:N)

Incorrect Privilege Assignment vulnerability in e-plugins Final User final-user allows Privilege Escalation.This issue affects Final User: from n/a through <= 1.2.5....

📅 2026-01-22 Inspect Dossier →
CWE-266 Remote (AV:N)

Incorrect Privilege Assignment vulnerability in e-plugins WP Membership wp-membership allows Privilege Escalation.This issue affects WP Membership: from n/a through <= 1.6.4....

📅 2026-01-22 Inspect Dossier →
CWE-862 Remote (AV:N)

Missing Authorization vulnerability in e-plugins WP Membership wp-membership allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP Membership: from n/a through ...

📅 2026-01-22 Inspect Dossier →
CWE-862 Remote (AV:N)

Missing Authorization vulnerability in e-plugins Real Estate Pro real-estate-pro allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Real Estate Pro: from n/a th...

📅 2026-01-22 Inspect Dossier →
CWE-862 Remote (AV:N)

Missing Authorization vulnerability in e-plugins ListingHub listinghub allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects ListingHub: from n/a through <= 1.2.7....

📅 2026-01-22 Inspect Dossier →
CWE-862 Remote (AV:N)

Missing Authorization vulnerability in e-plugins Listihub listihub allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Listihub: from n/a through <= 1.0.6....

📅 2026-01-22 Inspect Dossier →
CWE-862 Remote (AV:N)

Missing Authorization vulnerability in e-plugins fitness-trainer fitness-trainer allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects fitness-trainer: from n/a th...

📅 2026-01-22 Inspect Dossier →
CWE-862 Remote (AV:N)

Missing Authorization vulnerability in e-plugins Final User final-user allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Final User: from n/a through <= 1.2.5....

📅 2026-01-22 Inspect Dossier →
CWE-862 Remote (AV:N)

Missing Authorization vulnerability in e-plugins Hospital Doctor Directory hospital-doctor-directory allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Hospital...

📅 2026-01-22 Inspect Dossier →
CWE-862 Remote (AV:N)

Missing Authorization vulnerability in e-plugins Hotel Listing hotel-listing allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Hotel Listing: from n/a through ...

📅 2026-01-22 Inspect Dossier →
CWE-862 Remote (AV:N)

Missing Authorization vulnerability in e-plugins Institutions Directory institutions-directory allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Institutions D...

📅 2026-01-22 Inspect Dossier →
CWE-266 Remote (AV:N)

Incorrect Privilege Assignment vulnerability in e-plugins Hospital Doctor Directory hospital-doctor-directory allows Privilege Escalation.This issue affects Hospital Doctor Directory: from n/a through...

📅 2026-01-22 Inspect Dossier →
CWE-266 Remote (AV:N)

Incorrect Privilege Assignment vulnerability in e-plugins Institutions Directory institutions-directory allows Privilege Escalation.This issue affects Institutions Directory: from n/a through <= 1.3.4...

📅 2026-01-22 Inspect Dossier →
Showing Page 154 of 1,890 • 45,350 matching CVEs (out of 396,747 NIST advisories)