CVE-2026-39720
HIGH 7.1
Unauthenticated Cross Site Scripting (XSS) in Mapster WP Maps <= 2.0.4 versions....
📅 2026-10-06
Inspect Dossier →
National Vulnerability Database • Synced Real-Time from NIST NVD & MITRE
Universal Security Vulnerabilities & CVE Catalog
Fast, deterministic intelligence across 396,747 official Common Vulnerabilities and Exposures (CVEs) with CVSS v3.1 vector breakdowns, threat severity scores, and verified remediation links.
Found 63,872 matching advisories
Page 156 of 2,662
CVE-2026-39719
HIGH 7.2
Unauthenticated Server Side Request Forgery (SSRF) in PDF Smart Viewer for Elementor <= 1.0.4 versions....
📅 2026-10-06
Inspect Dossier →
📅 2026-10-06
Inspect Dossier →
📅 2026-10-06
Inspect Dossier →
CVE-2026-32579
CRITICAL 10.0
Unauthenticated Arbitrary File Upload in Kognetiks Chatbot for WordPress <= 2.4.9 versions....
📅 2026-10-06
Inspect Dossier →
CVE-2026-32578
HIGH 7.1
Subscriber Broken Access Control in ECPay Ecommerce for WooCommerce <= 1.1.2606090 versions....
📅 2026-10-06
Inspect Dossier →
CVE-2026-32577
HIGH 7.1
Unauthenticated Cross Site Scripting (XSS) in Frontend File Manager <= 23.6 versions....
📅 2026-10-06
Inspect Dossier →
CVE-2026-32575
HIGH 7.1
Unauthenticated Cross Site Scripting (XSS) in SUMO Affiliates Pro <= 11.7.0 versions....
📅 2026-10-06
Inspect Dossier →
CVE-2026-32574
HIGH 7.1
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in EDGARROJAS Smart Forms smart-forms allows DOM-Based XSS.This issue affects Smart Forms: from n/a t...
📅 2026-10-06
Inspect Dossier →
CVE-2026-32572
HIGH 7.1
Unauthenticated Cross Site Scripting (XSS) in WP User Frontend Pro <= 4.2.13 versions....
📅 2026-10-06
Inspect Dossier →
📅 2026-10-06
Inspect Dossier →
CVE-2026-32570
HIGH 7.1
Unauthenticated Cross Site Scripting (XSS) in Progressify - Progressive Web App (PWA) <= 1.6.0 versions....
📅 2026-10-06
Inspect Dossier →
CVE-2026-32569
HIGH 7.1
Unauthenticated Cross Site Scripting (XSS) in WP Media folder <= 6.2.2 versions....
📅 2026-10-06
Inspect Dossier →
CVE-2026-32568
CRITICAL 9.9
Subscriber Remote Code Execution (RCE) in WooCommerce Designer Pro <= 1.9.33 versions....
📅 2026-10-06
Inspect Dossier →
CVE-2026-32557
CRITICAL 9.3
Unauthenticated SQL Injection in WooCommerce Appointments <= 5.3.2 versions....
📅 2026-10-06
Inspect Dossier →
📅 2026-10-06
Inspect Dossier →
📅 2026-10-06
Inspect Dossier →
CVE-2026-105879
MEDIUM 6.5
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Crocoblock JetElements For Elementor jet-elements allows Stored XSS.This issue affects JetElements...
📅 2026-10-06
Inspect Dossier →
CVE-2026-105809
MEDIUM 4.3
A vulnerability was identified in SourceCodester Simple Student Information System 1.0. This issue affects some unknown processing of the file /register.php of the component Profile Field Handler. The...
📅 2026-10-06
Inspect Dossier →
CVE-2026-105808
LOW 3.5
A vulnerability was determined in SourceCodester Simple Student Information System 1.0. This vulnerability affects the function clean of the file searchresults.php. Executing a manipulation of the arg...
📅 2026-10-06
Inspect Dossier →
CVE-2026-105317
HIGH 8.5
Subscriber SQL Injection in Paid Member Subscriptions <= 3.1.1 versions....
📅 2026-10-06
Inspect Dossier →
CVE-2026-105071
HIGH 7.5
Unauthenticated Sensitive Data Exposure in SiteVault – Backup, Restore, Migration & Cloning <= 1.5.17 versions....
📅 2026-10-06
Inspect Dossier →
CVE-2026-105070
HIGH 8.8
Unauthenticated Privilege Escalation in Salon booking system <= 10.31.7 versions....
📅 2026-10-06
Inspect Dossier →
CVE-2026-105061
HIGH 7.1
Unauthenticated Cross Site Scripting (XSS) in WP Mailster <= 1.9.0.0 versions....
📅 2026-10-06
Inspect Dossier →
Showing Page 156 of 2,662
• 63,872 matching CVEs (out of 396,747 NIST advisories)