National Vulnerability Database • Synced Real-Time from NIST NVD & MITRE

Universal Security Vulnerabilities & CVE Catalog

Fast, deterministic intelligence across 391,734 official Common Vulnerabilities and Exposures (CVEs) with CVSS v3.1 vector breakdowns, threat severity scores, and verified remediation links.

Reset All
Found 260,414 matching advisories
Page 4 of 10,851
CVE-2026-65561 MEDIUM 6.5
CWE-79 Remote (AV:N)

Contributor Cross Site Scripting (XSS) in WordPress Social Login and Register <= 7.8.0 versions....

๐Ÿ“… 2026-07-27 Inspect Dossier →
CVE-2026-65557 MEDIUM 5.9
CWE-79 Remote (AV:N)

Shop manager Cross Site Scripting (XSS) in Abandoned Cart Lite for WooCommerce <= 6.8.0 versions....

๐Ÿ“… 2026-07-27 Inspect Dossier →
CVE-2026-65434 MEDIUM 6.5
CWE-201 Remote (AV:N)

Subscriber Sensitive Data Exposure in ะฎKassa ะดะปั WooCommerce <= 2.16.1 versions....

๐Ÿ“… 2026-07-27 Inspect Dossier →
CVE-2026-65433 MEDIUM 6.5
CWE-862 Remote (AV:N)

Subscriber Broken Access Control in RT Mega Menu โ€“ Mega Menu Builder for Elementor &amp; Gutenberg <= 1.5.1 versions....

๐Ÿ“… 2026-07-27 Inspect Dossier →
CVE-2026-59559 MEDIUM 6.5
CWE-79 Remote (AV:N)

Subscriber Cross Site Scripting (XSS) in RT Mega Menu โ€“ Mega Menu Builder for Elementor &amp; Gutenberg <= 1.5.1 versions....

๐Ÿ“… 2026-07-27 Inspect Dossier →
CWE-79 Remote (AV:N)

Unauthenticated Cross Site Scripting (XSS) in Dynamic Pricing With Discount Rules for WooCommerce <= 4.5.11 versions....

๐Ÿ“… 2026-07-27 Inspect Dossier →
CWE-918 Remote (AV:N)

Unauthenticated Server Side Request Forgery (SSRF) in 3D Flipbook PDF Viewer &amp; Embedder <= 1.4.2 versions....

๐Ÿ“… 2026-07-27 Inspect Dossier →
CVE-2026-59549 CRITICAL 9.3
CWE-89 Remote (AV:N)

Unauthenticated SQL Injection in rtMedia for WordPress, BuddyPress and bbPress <= 4.7.10 versions....

๐Ÿ“… 2026-07-27 Inspect Dossier →
CWE-497 Remote (AV:N)

Unauthenticated Sensitive Data Exposure in Byteflows Travel &amp; Hotel Booking <= 1.0.0 versions....

๐Ÿ“… 2026-07-27 Inspect Dossier →
CWE-639 Remote (AV:N)

Subscriber Insecure Direct Object References (IDOR) in Paid Member Subscriptions <= 3.0.7 versions....

๐Ÿ“… 2026-07-27 Inspect Dossier →
CWE-89 Remote (AV:N)

Administrator SQL Injection in Sender โ€“ Newsletter, SMS and Email Marketing Automation for WooCommerce <= 2.10.22 versions....

๐Ÿ“… 2026-07-27 Inspect Dossier →
CWE-862 Remote (AV:N)

Unauthenticated Broken Access Control in CoCart โ€“ Headless ecommerce <= 4.8.4 versions....

๐Ÿ“… 2026-07-27 Inspect Dossier →
Showing Page 4 of 10,851 • 260,414 matching CVEs (out of 391,734 NIST advisories)