National Vulnerability Database • Synced Real-Time from NIST NVD & MITRE

Universal Security Vulnerabilities & CVE Catalog

Fast, deterministic intelligence across 391,734 official Common Vulnerabilities and Exposures (CVEs) with CVSS v3.1 vector breakdowns, threat severity scores, and verified remediation links.

Quick Filters: Critical (9.0+) High (7.0+) 2026 Advisories 2025 Advisories 2024 Advisories Remote Exploits (AV:N)

Found 391,734 matching advisories

Page 30 of 16,323

CVE-2026-62054 CRITICAL 9.8

Unauthenticated PHP Object Injection in Yacht Rental <= 2.6 versions....

📅 2026-10-10 Inspect Dossier →

CVE-2026-62053 CRITICAL 9.8

Unauthenticated PHP Object Injection in Wine House <= 3.20 versions....

📅 2026-10-10 Inspect Dossier →

CVE-2026-62052 CRITICAL 9.8

Unauthenticated PHP Object Injection in Tipsy <= 1.6 versions....

📅 2026-10-10 Inspect Dossier →

CVE-2026-62051 CRITICAL 9.8

Unauthenticated PHP Object Injection in Stargaze <= 1.10 versions....

📅 2026-10-10 Inspect Dossier →

CVE-2026-62050 CRITICAL 9.8

Unauthenticated PHP Object Injection in Splendour <= 1.23 versions....

📅 2026-10-10 Inspect Dossier →

CVE-2026-62043 HIGH 7.5

Unauthenticated Sensitive Data Exposure in Contact Form 7 – Dynamic Text Extension <= 5.0.7 versions....

📅 2026-10-10 Inspect Dossier →

CVE-2026-62038 HIGH 7.3

Unauthenticated Broken Authentication in eRoom <= 1.7.1 versions....

📅 2026-10-10 Inspect Dossier →

CVE-2026-62037 HIGH 7.1

Unauthenticated Cross Site Scripting (XSS) in Document Embedder <= 2.4.0 versions....

📅 2026-10-10 Inspect Dossier →

CVE-2026-62035 MEDIUM 6.3

Subscriber Broken Access Control in AWS S3 for WordPress Plugin – Upcasted <= 3.1.0 versions....

📅 2026-10-10 Inspect Dossier →

CVE-2026-62034 HIGH 7.1

Unauthenticated Cross Site Scripting (XSS) in Before After Image Comparison – Image comparison for WP <= 1.1.21 versions....

📅 2026-10-10 Inspect Dossier →

CVE-2026-62033 HIGH 7.6

Subscriber Settings Change in uListing <= 2.2.0 versions....

📅 2026-10-10 Inspect Dossier →

CVE-2026-62032 CRITICAL 9.8

Unauthenticated Local File Inclusion in DirectoryPress <= 3.6.27 versions....

📅 2026-10-10 Inspect Dossier →

CVE-2026-62031 CRITICAL 9.3

Unauthenticated SQL Injection in uListing <= 2.2.0 versions....

📅 2026-10-10 Inspect Dossier →

CVE-2026-62030 HIGH 7.2

Unauthenticated Server Side Request Forgery (SSRF) in StreamCast <= 2.4.5 versions....

📅 2026-10-10 Inspect Dossier →

CVE-2026-62027 HIGH 7.1

Unauthenticated Cross Site Scripting (XSS) in Team Section Block <= 2.0.4 versions....

📅 2026-10-10 Inspect Dossier →

CVE-2026-62025 CRITICAL 9.0

Unauthenticated Arbitrary File Upload in Tailored Tools <= 3.0.3 versions....

📅 2026-10-10 Inspect Dossier →

CVE-2026-62024 CRITICAL 9.9

Subscriber Arbitrary File Upload in CodeBard Help Desk <= 1.1.2 versions....

📅 2026-10-10 Inspect Dossier →

CVE-2026-62022 CRITICAL 9.8

Unauthenticated Privilege Escalation in Tonda Membership <= 1.0.1 versions....

📅 2026-10-10 Inspect Dossier →

CVE-2026-62021 HIGH 8.8

Subscriber PHP Object Injection in Angio <= 1.1.1 versions....

📅 2026-10-10 Inspect Dossier →

CVE-2026-62020 HIGH 8.1

Unauthenticated Local File Inclusion in TouchUp < 1.4 versions....

📅 2026-10-10 Inspect Dossier →

CVE-2026-57742 HIGH 7.1

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in ThemeREX Group Kids Planet allows Reflected XSS. This issue affects Kids Planet: from n/a through...

📅 2026-10-10 Inspect Dossier →

CVE-2026-48194 HIGH 8.1

Unauthenticated Local File Inclusion in DukaMarket <= 1.3.0 versions....

📅 2026-10-10 Inspect Dossier →

CVE-2026-48193 HIGH 8.1

Unauthenticated Local File Inclusion in Uminex <= 1.0.9 versions....

📅 2026-10-10 Inspect Dossier →

CVE-2026-45440 HIGH 7.6

Administrator SQL Injection in WP Ultimate CSV Importer <= 9.2 versions....

📅 2026-10-10 Inspect Dossier →

Showing Page 30 of 16,323 • 391,734 matching CVEs (out of 391,734 NIST advisories)

← Previous Next →