National Vulnerability Database • Synced Real-Time from NIST NVD & MITRE

Universal Security Vulnerabilities & CVE Catalog

Fast, deterministic intelligence across 391,734 official Common Vulnerabilities and Exposures (CVEs) with CVSS v3.1 vector breakdowns, threat severity scores, and verified remediation links.

Quick Filters: Critical (9.0+) High (7.0+) 2026 Advisories 2025 Advisories 2024 Advisories Remote Exploits (AV:N)

Found 115,880 matching advisories

Page 31 of 4,829

CVE-2026-32577 HIGH 7.1

Unauthenticated Cross Site Scripting (XSS) in Frontend File Manager <= 23.6 versions....

📅 2026-10-06 Inspect Dossier →

CVE-2026-32575 HIGH 7.1

Unauthenticated Cross Site Scripting (XSS) in SUMO Affiliates Pro <= 11.7.0 versions....

📅 2026-10-06 Inspect Dossier →

CVE-2026-32574 HIGH 7.1

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in EDGARROJAS Smart Forms smart-forms allows DOM-Based XSS.This issue affects Smart Forms: from n/a t...

📅 2026-10-06 Inspect Dossier →

CVE-2026-32572 HIGH 7.1

Unauthenticated Cross Site Scripting (XSS) in WP User Frontend Pro <= 4.2.13 versions....

📅 2026-10-06 Inspect Dossier →

CVE-2026-32570 HIGH 7.1

Unauthenticated Cross Site Scripting (XSS) in Progressify - Progressive Web App (PWA) <= 1.6.0 versions....

📅 2026-10-06 Inspect Dossier →

CVE-2026-32569 HIGH 7.1

Unauthenticated Cross Site Scripting (XSS) in WP Media folder <= 6.2.2 versions....

📅 2026-10-06 Inspect Dossier →

CVE-2026-25434 HIGH 8.5

Subscriber SQL Injection in WP2LEADS <= 3.5.7 versions....

📅 2026-10-06 Inspect Dossier →

CVE-2026-25433 HIGH 7.1

Subscriber Broken Access Control in WP2LEADS <= 3.5.7 versions....

📅 2026-10-06 Inspect Dossier →

CVE-2026-105317 HIGH 8.5

Subscriber SQL Injection in Paid Member Subscriptions <= 3.1.1 versions....

📅 2026-10-06 Inspect Dossier →

CVE-2026-105071 HIGH 7.5

Unauthenticated Sensitive Data Exposure in SiteVault – Backup, Restore, Migration & Cloning <= 1.5.17 versions....

📅 2026-10-06 Inspect Dossier →

CVE-2026-105070 HIGH 8.8

Unauthenticated Privilege Escalation in Salon booking system <= 10.31.7 versions....

📅 2026-10-06 Inspect Dossier →

CVE-2026-105061 HIGH 7.1

Unauthenticated Cross Site Scripting (XSS) in WP Mailster <= 1.9.0.0 versions....

📅 2026-10-06 Inspect Dossier →

CVE-2026-105058 HIGH 8.8

Subscriber Privilege Escalation in WP User Profiles <= 2.7.3 versions....

📅 2026-10-06 Inspect Dossier →

CVE-2026-104814 HIGH 7.1

Unauthenticated Cross Site Scripting (XSS) in Form Block <= 1.8.1 versions....

📅 2026-10-06 Inspect Dossier →

CVE-2026-104757 HIGH 7.2

Editor Privilege Escalation in Import and export users and customers <= 2.5.5 versions....

📅 2026-10-06 Inspect Dossier →

CVE-2026-104747 HIGH 8.1

Unauthenticated PHP Object Injection in Haaken <= 1.5 versions....

📅 2026-10-06 Inspect Dossier →

CVE-2026-104672 HIGH 7.1

Unauthenticated Cross Site Scripting (XSS) in GiveWP <= 4.17.0 versions....

📅 2026-10-06 Inspect Dossier →

CVE-2026-104670 HIGH 7.1

Unauthenticated Cross Site Scripting (XSS) in LearnPress <= 4.4.9 versions....

📅 2026-10-06 Inspect Dossier →

CVE-2026-104406 HIGH 7.3

Unauthenticated Broken Access Control in picu <= 3.10.1 versions....

📅 2026-10-06 Inspect Dossier →

CVE-2026-104405 HIGH 8.1

Unauthenticated Privilege Escalation in GiveWP <= 4.17.0 versions....

📅 2026-10-06 Inspect Dossier →

CVE-2026-104395 HIGH 7.1

Unauthenticated Cross Site Scripting (XSS) in picu <= 3.10.1 versions....

📅 2026-10-06 Inspect Dossier →

CVE-2026-104394 HIGH 7.1

Unauthenticated Cross Site Scripting (XSS) in Charitable <= 1.8.12.3 versions....

📅 2026-10-06 Inspect Dossier →

CVE-2026-104387 HIGH 7.2

Unauthenticated Broken Access Control in PowerPress Podcasting <= 11.17.9 versions....

📅 2026-10-06 Inspect Dossier →

CVE-2026-104385 HIGH 7.5

Unauthenticated Sensitive Data Exposure in Groundhogg <= 4.8.3 versions....

📅 2026-10-06 Inspect Dossier →

Showing Page 31 of 4,829 • 115,880 matching CVEs (out of 391,734 NIST advisories)

← Previous Next →