National Vulnerability Database • Synced Real-Time from NIST NVD & MITRE

Universal Security Vulnerabilities & CVE Catalog

Fast, deterministic intelligence across 391,734 official Common Vulnerabilities and Exposures (CVEs) with CVSS v3.1 vector breakdowns, threat severity scores, and verified remediation links.

Quick Filters: Critical (9.0+) High (7.0+) 2026 Advisories 2025 Advisories 2024 Advisories Remote Exploits (AV:N)

Found 35,262 matching advisories

Page 3 of 1,470

CVE-2026-62125 CRITICAL 9.8

Unauthenticated PHP Object Injection in Asia Garden <= 1.3.1 versions....

📅 2026-10-10 Inspect Dossier →

CVE-2026-62124 CRITICAL 9.8

Unauthenticated PHP Object Injection in N7 | Golf Club Sports & Events <= 2.21 versions....

📅 2026-10-10 Inspect Dossier →

CVE-2026-62123 CRITICAL 9.8

Unauthenticated PHP Object Injection in Invetex <= 2.18 versions....

📅 2026-10-10 Inspect Dossier →

CVE-2026-62120 CRITICAL 9.8

Unauthenticated PHP Object Injection in Law Office <= 3.20 versions....

📅 2026-10-10 Inspect Dossier →

CVE-2026-62090 CRITICAL 9.8

Unauthenticated PHP Object Injection in WineShop <= 3.20 versions....

📅 2026-10-10 Inspect Dossier →

CVE-2026-62087 CRITICAL 9.8

Unauthenticated PHP Object Injection in Equadio <= 1.1.4 versions....

📅 2026-10-10 Inspect Dossier →

CVE-2026-62086 CRITICAL 9.8

Unauthenticated PHP Object Injection in Juno <= 2.25 versions....

📅 2026-10-10 Inspect Dossier →

CVE-2026-62077 CRITICAL 9.8

Unauthenticated PHP Object Injection in Avala <= 1.1.4 versions....

📅 2026-10-10 Inspect Dossier →

CVE-2026-62076 CRITICAL 9.8

Unauthenticated PHP Object Injection in Kalles <= 1.1.7.1 versions....

📅 2026-10-10 Inspect Dossier →

CVE-2026-62054 CRITICAL 9.8

Unauthenticated PHP Object Injection in Yacht Rental <= 2.6 versions....

📅 2026-10-10 Inspect Dossier →

CVE-2026-62053 CRITICAL 9.8

Unauthenticated PHP Object Injection in Wine House <= 3.20 versions....

📅 2026-10-10 Inspect Dossier →

CVE-2026-62052 CRITICAL 9.8

Unauthenticated PHP Object Injection in Tipsy <= 1.6 versions....

📅 2026-10-10 Inspect Dossier →

CVE-2026-62051 CRITICAL 9.8

Unauthenticated PHP Object Injection in Stargaze <= 1.10 versions....

📅 2026-10-10 Inspect Dossier →

CVE-2026-62050 CRITICAL 9.8

Unauthenticated PHP Object Injection in Splendour <= 1.23 versions....

📅 2026-10-10 Inspect Dossier →

CVE-2026-62032 CRITICAL 9.8

Unauthenticated Local File Inclusion in DirectoryPress <= 3.6.27 versions....

📅 2026-10-10 Inspect Dossier →

CVE-2026-62031 CRITICAL 9.3

Unauthenticated SQL Injection in uListing <= 2.2.0 versions....

📅 2026-10-10 Inspect Dossier →

CVE-2026-62025 CRITICAL 9.0

Unauthenticated Arbitrary File Upload in Tailored Tools <= 3.0.3 versions....

📅 2026-10-10 Inspect Dossier →

CVE-2026-62024 CRITICAL 9.9

Subscriber Arbitrary File Upload in CodeBard Help Desk <= 1.1.2 versions....

📅 2026-10-10 Inspect Dossier →

CVE-2026-62022 CRITICAL 9.8

Unauthenticated Privilege Escalation in Tonda Membership <= 1.0.1 versions....

📅 2026-10-10 Inspect Dossier →

CVE-2026-42723 CRITICAL 9.8

Unauthenticated PHP Object Injection in CleanSkin <= 1.5.0 versions....

📅 2026-10-10 Inspect Dossier →

CVE-2026-42719 CRITICAL 9.8

Subscriber PHP Object Injection in Dynamic User Directory <= 2.4 versions....

📅 2026-10-10 Inspect Dossier →

CVE-2026-42718 CRITICAL 9.8

Unauthenticated PHP Object Injection in Booster for WooCommerce <= 8.4.0 versions....

📅 2026-10-10 Inspect Dossier →

CVE-2026-42716 CRITICAL 9.8

Unauthenticated PHP Object Injection in Payever - WooCommerce Gateway <= 4.8.2 versions....

📅 2026-10-10 Inspect Dossier →

CVE-2026-42696 CRITICAL 10.0

Improper Control of Generation of Code ('Code Injection') vulnerability in Royal Plugins SiteVault – Backup, Restore, Migration & Cloning sitevault-backup-restore-migration allows Remote Code Incl...

📅 2026-10-10 Inspect Dossier →

Showing Page 3 of 1,470 • 35,262 matching CVEs (out of 391,734 NIST advisories)

← Previous Next →