Export limit exceeded: 107334 CVEs match your query. Please refine your search to export 10,000 CVEs or fewer.
Search
Search Results (107334 CVEs found)
| CVE | Vendors | Products | Updated | CVSS v3.1 |
|---|---|---|---|---|
| CVE-2026-96819 | 2026-09-30 | 7.1 High | ||
| Subscriber Cross Site Scripting (XSS) in oik <= 4.15.4 versions. | ||||
| CVE-2026-96818 | 2026-09-30 | 7.5 High | ||
| Unauthenticated Broken Access Control in WP Express Checkout (Accept PayPal Payments) <= 2.4.9 versions. | ||||
| CVE-2026-96817 | 2026-09-30 | 8.2 High | ||
| Subscriber Broken Access Control in MakeCommerce for WooCommerce <= 4.1.0 versions. | ||||
| CVE-2026-96816 | 2026-09-30 | 7.1 High | ||
| Unauthenticated Cross Site Scripting (XSS) in Trusted Shops Easy Integration for WooCommerce <= 2.0.6 versions. | ||||
| CVE-2026-96815 | 2026-09-30 | 7.2 High | ||
| Custom role Privilege Escalation in Vitepos <= 3.5.0 versions. | ||||
| CVE-2026-96814 | 2026-09-30 | 7.1 High | ||
| Unauthenticated Cross Site Scripting (XSS) in WooCommerce Product Table Lite <= 5.6.7 versions. | ||||
| CVE-2026-96352 | 2026-09-30 | 7.1 High | ||
| Unauthenticated Cross Site Scripting (XSS) in YITH WooCommerce Ajax Search <= 2.28.0 versions. | ||||
| CVE-2026-96351 | 2026-09-30 | 7.1 High | ||
| Unauthenticated Cross Site Scripting (XSS) in Classified Listing <= 6.1.3 versions. | ||||
| CVE-2026-96348 | 2026-09-30 | 7.5 High | ||
| Unauthenticated Broken Access Control in Bookly <= 28.2 versions. | ||||
| CVE-2026-96346 | 2026-09-30 | 7.6 High | ||
| Author SQL Injection in WP ERP <= 1.17.9 versions. | ||||
| CVE-2026-96345 | 2026-09-30 | 7.6 High | ||
| Administrator SQL Injection in Estatik <= 4.3.5 versions. | ||||
| CVE-2026-96344 | 2026-09-30 | 7.2 High | ||
| Custom role PHP Object Injection in eCommerce Product Catalog <= 3.6.0 versions. | ||||
| CVE-2026-96343 | 2026-09-30 | 7.2 High | ||
| Custom role PHP Object Injection in WP ERP <= 1.17.9 versions. | ||||
| CVE-2026-95587 | 2026-09-30 | 7.5 High | ||
| Unauthenticated Broken Access Control in Hostinger Migrator <= 1.0 versions. | ||||
| CVE-2026-95531 | 2026-09-30 | 8.8 High | ||
| Subscriber PHP Object Injection in Conversational Forms for ChatBot <= 1.5.0 versions. | ||||
| CVE-2026-94683 | 2026-09-30 | 8.8 High | ||
| Contributor PHP Object Injection in DesignSetGo <= 2.8.0 versions. | ||||
| CVE-2026-94678 | 2026-09-30 | 8.8 High | ||
| Contributor PHP Object Injection in Go Live Update Urls <= 7.0.8 versions. | ||||
| CVE-2026-94677 | 2026-09-30 | 7.2 High | ||
| Shop manager PHP Object Injection in Kadence WooCommerce Email Designer <= 1.5.19.1 versions. | ||||
| CVE-2026-94499 | 2026-09-30 | 7.1 High | ||
| Subscriber Broken Access Control in FormGent <= 1.12.2 versions. | ||||
| CVE-2026-94178 | 2026-09-30 | 7.5 High | ||
| Subscriber Privilege Escalation in Import and export users and customers <= 2.5.2 versions. | ||||