National Vulnerability Database • Synced Real-Time from NIST NVD & MITRE

Universal Security Vulnerabilities & CVE Catalog

Fast, deterministic intelligence across 396,747 official Common Vulnerabilities and Exposures (CVEs) with CVSS v3.1 vector breakdowns, threat severity scores, and verified remediation links.

Reset All
Found 45,350 matching advisories
Page 98 of 1,890
CWE-79 Remote (AV:N)

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in harman79 ID Arrays id-arrays allows DOM-Based XSS.This issue affects ID Arrays: from n/a through <...

📅 2026-02-20 Inspect Dossier →
CWE-502 Remote (AV:N)

Deserialization of Untrusted Data vulnerability in Kleor Contact Manager contact-manager allows Object Injection.This issue affects Contact Manager: from n/a through <= 9.1.1....

📅 2026-02-20 Inspect Dossier →
CWE-79 Remote (AV:N)

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in webmuehle Court Reservation court-reservation allows Reflected XSS.This issue affects Court Reserv...

📅 2026-02-20 Inspect Dossier →
CWE-79 Remote (AV:N)

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in anmari amr cron manager amr-cron-manager allows Reflected XSS.This issue affects amr cron manager:...

📅 2026-02-20 Inspect Dossier →
CWE-79 Remote (AV:N)

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in itex iSape isape allows Reflected XSS.This issue affects iSape: from n/a through <= 0.72....

📅 2026-02-20 Inspect Dossier →
CWE-79 Remote (AV:N)

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Paris Holley Asynchronous Javascript asynchronous-javascript allows Reflected XSS.This issue affec...

📅 2026-02-20 Inspect Dossier →
CWE-79 Remote (AV:N)

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in aThemeArt Translations eDS Responsive Menu eds-responsive-menu allows Reflected XSS.This issue aff...

📅 2026-02-20 Inspect Dossier →
CWE-79 Remote (AV:N)

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in DaleAB Membee Login membees-member-login-widget allows Reflected XSS.This issue affects Membee Log...

📅 2026-02-20 Inspect Dossier →
CWE-79 Remote (AV:N)

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Bas Schuiling FeedWordPress Advanced Filters faf allows Reflected XSS.This issue affects FeedWordP...

📅 2026-02-20 Inspect Dossier →
CWE-79 Remote (AV:N)

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in totalbounty Widget Logic Visual widget-logic-visual allows Reflected XSS.This issue affects Widget...

📅 2026-02-20 Inspect Dossier →
CWE-98 Remote (AV:N)

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Themepul TopperPack – Complete Elementor Addons, Theme & CPT Builder topper-pac...

📅 2026-02-20 Inspect Dossier →
CVE-2025-68837 MEDIUM 6.5
CWE-862 Remote (AV:N)

Missing Authorization vulnerability in ELEXtensions ELEX WordPress HelpDesk & Customer Ticketing System elex-helpdesk-customer-support-ticket-system allows Exploiting Incorrectly Configured Access Con...

📅 2026-02-20 Inspect Dossier →
CWE-862 Remote (AV:N)

Missing Authorization vulnerability in Saiful Islam Sync Master Sheet – Product Sync with Google Sheet for WooCommerce product-sync-master-sheet allows Exploiting Incorrectly Configured Access Control...

📅 2026-02-20 Inspect Dossier →
CVE-2025-68564 MEDIUM 6.5
CWE-862 Remote (AV:N)

Missing Authorization vulnerability in sendy Sendy sendy allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Sendy: from n/a through <= 3.4.2....

📅 2026-02-20 Inspect Dossier →
CWE-98 Remote (AV:N)

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in WebCodingPlace WooCommerce Coming Soon Product with Countdown woo-coming-soon-p...

📅 2026-02-20 Inspect Dossier →
CVE-2025-68549 CRITICAL 9.9
CWE-434 Remote (AV:N)

Unrestricted Upload of File with Dangerous Type vulnerability in zozothemes Wiguard wiguard allows Upload a Web Shell to a Web Server.This issue affects Wiguard: from n/a through < 2.0.1....

📅 2026-02-20 Inspect Dossier →
CWE-98 Remote (AV:N)

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in thembay Nika nika allows PHP Local File Inclusion.This issue affects Nika: from...

📅 2026-02-20 Inspect Dossier →
CWE-98 Remote (AV:N)

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in thembay Diza diza allows PHP Local File Inclusion.This issue affects Diza: from...

📅 2026-02-20 Inspect Dossier →
CVE-2025-68542 MEDIUM 6.5
CWE-862 Remote (AV:N)

Missing Authorization vulnerability in vgdevsolutions Checkout Gateway for IRIS checkout-gateway-iris allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Checkou...

📅 2026-02-20 Inspect Dossier →
CVE-2025-68541 CRITICAL 9.8
CWE-502 Remote (AV:N)

Deserialization of Untrusted Data vulnerability in BoldThemes Ippsum ippsum allows Object Injection.This issue affects Ippsum: from n/a through <= 1.2.0....

📅 2026-02-20 Inspect Dossier →
CWE-98 Remote (AV:N)

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in thembay Fana fana allows PHP Local File Inclusion.This issue affects Fana: from...

📅 2026-02-20 Inspect Dossier →
CWE-98 Remote (AV:N)

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in thembay Zota zota allows PHP Local File Inclusion.This issue affects Zota: from...

📅 2026-02-20 Inspect Dossier →
CVE-2025-68534 MEDIUM 6.5
CWE-862 Remote (AV:N)

Missing Authorization vulnerability in add-ons.org PDF for WPForms pdf-for-wpforms allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects PDF for WPForms: from n/a ...

📅 2026-02-20 Inspect Dossier →
CWE-502 Remote (AV:N)

Deserialization of Untrusted Data vulnerability in modeltheme ModelTheme Addons for WPBakery and Elementor modeltheme-addons-for-wpbakery allows Object Injection.This issue affects ModelTheme Addons f...

📅 2026-02-20 Inspect Dossier →
Showing Page 98 of 1,890 • 45,350 matching CVEs (out of 396,747 NIST advisories)