National Vulnerability Database • Synced Real-Time from NIST NVD & MITRE

Universal Security Vulnerabilities & CVE Catalog

Fast, deterministic intelligence across 391,734 official Common Vulnerabilities and Exposures (CVEs) with CVSS v3.1 vector breakdowns, threat severity scores, and verified remediation links.

Quick Filters: Critical (9.0+) High (7.0+) 2026 Advisories 2025 Advisories 2024 Advisories Remote Exploits (AV:N)

Found 260,414 matching advisories

Page 21 of 10,851

CVE-2026-65481 HIGH 7.5

CWE-98 Remote (AV:N)

Contributor Local File Inclusion in Vino <= 1.9 versions....

📅 2026-07-23 Inspect Dossier →

CVE-2026-65480 MEDIUM 6.5

CWE-79 Remote (AV:N)

Contributor Cross Site Scripting (XSS) in TheGem <= 5.11.1 versions....

📅 2026-07-23 Inspect Dossier →

CVE-2026-65479 MEDIUM 5.4

CWE-862 Remote (AV:N)

Subscriber Broken Access Control in Reviewer <= 3.14.2 versions....

📅 2026-07-23 Inspect Dossier →

CVE-2026-65478 MEDIUM 5.4

CWE-862 Remote (AV:N)

Subscriber Broken Access Control in ListingPro <= 2.9.10 versions....

📅 2026-07-23 Inspect Dossier →

CVE-2026-65477 HIGH 7.5

CWE-98 Remote (AV:N)

Contributor Local File Inclusion in Tonda Core <= 2.1.2 versions....

📅 2026-07-23 Inspect Dossier →

CVE-2026-65476 MEDIUM 5.3

CWE-862 Remote (AV:N)

Unauthenticated Broken Access Control in Civi <= 2.2.4 versions....

📅 2026-07-23 Inspect Dossier →

CVE-2026-65475 MEDIUM 6.5

CWE-79 Remote (AV:N)

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WP Chill Modula Image Gallery allows Stored XSS. This issue affects Modula Image Gallery: from 2....

📅 2026-07-23 Inspect Dossier →

CVE-2026-65474 MEDIUM 5.3

CWE-497 Remote (AV:N)

Unauthenticated Sensitive Data Exposure in Ninja Tables <= 5.2.10 versions....

📅 2026-07-23 Inspect Dossier →

CVE-2026-65473 MEDIUM 6.5

CWE-79 Remote (AV:N)

Contributor Cross Site Scripting (XSS) in Virtue/Ascend/Pinnacle Toolkit <= 4.9.12 versions....

📅 2026-07-23 Inspect Dossier →

CVE-2026-65472 MEDIUM 5.3

CWE-862 Remote (AV:N)

Unauthenticated Broken Access Control in Kit (formerly ConvertKit) <= 3.3.5 versions....

📅 2026-07-23 Inspect Dossier →

CVE-2026-65471 CRITICAL 9.6

CWE-352 Remote (AV:N)

Unauthenticated Cross Site Request Forgery (CSRF) in Avada Core <= 5.15.6 versions....

📅 2026-07-23 Inspect Dossier →

CVE-2026-65470 MEDIUM 6.5

CWE-79 Remote (AV:N)

Contributor Cross Site Scripting (XSS) in Fluent Support <= 2.3.0 versions....

📅 2026-07-23 Inspect Dossier →

CVE-2026-65469 MEDIUM 5.3

CWE-862 Remote (AV:N)

Unauthenticated Broken Access Control in AWP Classifieds <= 4.4.7 versions....

📅 2026-07-23 Inspect Dossier →

CVE-2026-65468 MEDIUM 5.3

CWE-862 Remote (AV:N)

Unauthenticated Broken Access Control in JetBooking <= 4.1.2 versions....

📅 2026-07-23 Inspect Dossier →

CVE-2026-65467 MEDIUM 4.9

CWE-918 Remote (AV:N)

Contributor Server Side Request Forgery (SSRF) in JetEngine <= 3.8.11 versions....

📅 2026-07-23 Inspect Dossier →

CVE-2026-65466 MEDIUM 4.9

CWE-918 Remote (AV:N)

Custom role Server Side Request Forgery (SSRF) in JetBooking <= 4.1.2 versions....

📅 2026-07-23 Inspect Dossier →

CVE-2026-65465 MEDIUM 6.5

CWE-79 Remote (AV:N)

Contributor Cross Site Scripting (XSS) in JetElements For Elementor <= 2.9.1.1 versions....

📅 2026-07-23 Inspect Dossier →

CVE-2026-65464 MEDIUM 5.4

CWE-352 Remote (AV:N)

Unauthenticated Cross Site Request Forgery (CSRF) in GiveWP <= 4.16.3 versions....

📅 2026-07-23 Inspect Dossier →

CVE-2026-65463 MEDIUM 5.4

CWE-639 Remote (AV:N)

Subscriber Insecure Direct Object References (IDOR) in Masteriyo - LMS <= 2.3.1 versions....

📅 2026-07-23 Inspect Dossier →

CVE-2026-65462 HIGH 7.6

CWE-89 Remote (AV:N)

Administrator SQL Injection in Uncanny Automator <= 7.3.2 versions....

📅 2026-07-23 Inspect Dossier →

CVE-2026-65461 CRITICAL 9.1

CWE-434 Remote (AV:N)

Administrator Arbitrary File Upload in Really Simple CSV Importer <= 1.3 versions....

📅 2026-07-23 Inspect Dossier →

CVE-2026-65460 MEDIUM 4.3

CWE-352 Remote (AV:N)

Unauthenticated Cross Site Request Forgery (CSRF) in Zarinpal Gateway <= 5.1.0 versions....

📅 2026-07-23 Inspect Dossier →

CVE-2026-65458 MEDIUM 4.3

CWE-497 Remote (AV:N)

Contributor Sensitive Data Exposure in Polylang <= 3.8.5 versions....

📅 2026-07-23 Inspect Dossier →

CVE-2026-65457 MEDIUM 4.3

CWE-862 Remote (AV:N)

Subscriber Broken Access Control in ЮKassa для WooCommerce <= 2.16.1 versions....

📅 2026-07-23 Inspect Dossier →

Showing Page 21 of 10,851 • 260,414 matching CVEs (out of 391,734 NIST advisories)

← Previous Next →