National Vulnerability Database • Synced Real-Time from NIST NVD & MITRE

Universal Security Vulnerabilities & CVE Catalog

Fast, deterministic intelligence across 396,747 official Common Vulnerabilities and Exposures (CVEs) with CVSS v3.1 vector breakdowns, threat severity scores, and verified remediation links.

Quick Filters: Critical (9.0+) High (7.0+) 2026 Advisories 2025 Advisories 2024 Advisories Remote Exploits (AV:N)

Found 36,011 matching advisories

Page 182 of 1,501

CVE-2026-49109 CRITICAL 9.8

CWE-502 Remote (AV:N)

Unauthenticated PHP Object Injection in Integration for Salesforce and Contact Form 7, WPForms, Elementor, Formidable, Ninja Forms <= 1.4.3 versions....

📅 2026-06-15 Inspect Dossier →

CVE-2026-49106 CRITICAL 9.8

CWE-502 Remote (AV:N)

Unauthenticated PHP Object Injection in Integration for Contact Form 7 and Constant Contact <= 1.1.6 versions....

📅 2026-06-15 Inspect Dossier →

CVE-2026-49105 CRITICAL 9.8

CWE-502 Remote (AV:N)

Unauthenticated PHP Object Injection in WP Zendesk for Contact Form 7, WPForms, Elementor, Formidable and Ninja Forms <= 1.1.4 versions....

📅 2026-06-15 Inspect Dossier →

CVE-2026-49104 CRITICAL 9.8

CWE-502 Remote (AV:N)

Unauthenticated PHP Object Injection in Integration for Keap/infusionsoft and Contact Form 7, WPForms, Elementor, Formidable, Ninja Forms <= 1.2.1 versions....

📅 2026-06-15 Inspect Dossier →

CVE-2026-49085 CRITICAL 9.8

CWE-502 Remote (AV:N)

Unauthenticated PHP Object Injection in WP Insightly for Contact Form 7, WPForms, Elementor, Formidable and Ninja Forms <= 1.1.4 versions....

📅 2026-06-15 Inspect Dossier →

CVE-2026-49067 CRITICAL 9.3

CWE-89 Remote (AV:N)

Unauthenticated SQL Injection in Advanced 301 and 302 Redirect <= 1.6.9 versions....

📅 2026-06-15 Inspect Dossier →

CVE-2026-48886 CRITICAL 9.3

CWE-89 Remote (AV:N)

Unauthenticated SQL Injection in JS Help Desk <= 3.0.9 versions....

📅 2026-06-15 Inspect Dossier →

CVE-2026-48881 CRITICAL 9.1

CWE-862 Remote (AV:N)

Unauthenticated Broken Access Control in TrueBooker <= 1.1.9 versions....

📅 2026-06-15 Inspect Dossier →

CVE-2026-48836 CRITICAL 10.0

CWE-94 Remote (AV:N)

Unauthenticated Remote Code Execution (RCE) in Easy Invoice <= 2.1.19 versions....

📅 2026-06-15 Inspect Dossier →

CVE-2026-45439 CRITICAL 9.3

CWE-89 Remote (AV:N)

Unauthenticated SQL Injection in Realtyna Organic IDX plugin <= 5.1.0 versions....

📅 2026-06-15 Inspect Dossier →

CVE-2026-42665 CRITICAL 9.3

CWE-89 Remote (AV:N)

Unauthenticated SQL Injection in WP Data Access <= 5.5.70 versions....

📅 2026-06-15 Inspect Dossier →

CVE-2026-42639 CRITICAL 9.3

CWE-89 Remote (AV:N)

Unauthenticated SQL Injection in GD Rating System <= 3.6.2 versions....

📅 2026-06-15 Inspect Dossier →

CVE-2026-42386 CRITICAL 9.3

CWE-89 Remote (AV:N)

Unauthenticated SQL Injection in Order Delivery Date for WooCommerce <= 4.5.1 versions....

📅 2026-06-15 Inspect Dossier →

CVE-2026-42381 CRITICAL 9.3

CWE-89 Remote (AV:N)

Unauthenticated SQL Injection in Funnel Builder by FunnelKit <= 3.15.0.1 versions....

📅 2026-06-15 Inspect Dossier →

CVE-2026-40798 CRITICAL 9.3

CWE-89 Remote (AV:N)

Unauthenticated SQL Injection in wpForo Forum <= 3.0.4 versions....

📅 2026-06-15 Inspect Dossier →

CVE-2026-40772 CRITICAL 10.0

CWE-434 Remote (AV:N)

Unauthenticated Arbitrary File Upload in GeekyBot <= 1.2.2 versions....

📅 2026-06-15 Inspect Dossier →

CVE-2026-40771 CRITICAL 9.3

CWE-89 Remote (AV:N)

Unauthenticated SQL Injection in Contest Gallery <= 28.1.6 versions....

📅 2026-06-15 Inspect Dossier →

CVE-2026-39591 CRITICAL 9.9

CWE-434 Remote (AV:N)

Subscriber Arbitrary File Upload in WP-BusinessDirectory <= 4.0.0 versions....

📅 2026-06-15 Inspect Dossier →

CVE-2026-39583 CRITICAL 9.8

CWE-266 Remote (AV:N)

Unauthenticated Privilege Escalation in Datalogics Ecommerce Delivery <= 2.6.62 versions....

📅 2026-06-15 Inspect Dossier →

CVE-2026-39530 CRITICAL 9.3

CWE-89 Remote (AV:N)

Unauthenticated SQL Injection in SpeakOut! Email Petitions <= 4.6.5 versions....

📅 2026-06-15 Inspect Dossier →

CVE-2026-39519 CRITICAL 9.3

CWE-89 Remote (AV:N)

Unauthenticated SQL Injection in GeekyBot <= 1.2.0 versions....

📅 2026-06-15 Inspect Dossier →

CVE-2026-39512 CRITICAL 9.3

CWE-89 Remote (AV:N)

Unauthenticated SQL Injection in GeoDirectory <= 2.8.152 versions....

📅 2026-06-15 Inspect Dossier →

CVE-2026-39511 CRITICAL 9.3

CWE-89 Remote (AV:N)

Unauthenticated SQL Injection in WP Photo Album Plus <= 9.1.08.001 versions....

📅 2026-06-15 Inspect Dossier →

CVE-2026-39502 CRITICAL 9.3

CWE-89 Remote (AV:N)

Unauthenticated SQL Injection in Form Maker by 10Web <= 1.15.38 versions....

📅 2026-06-15 Inspect Dossier →

Showing Page 182 of 1,501 • 36,011 matching CVEs (out of 396,747 NIST advisories)

← Previous Next →