Browse CVEs

CRITICAL 9.0 CVE-2026-33749 n8n is an open source workflow automation platform. Prior to versions 1.123.27, 2.13.3, and 2.14.1, an authenticated user with permission to create o… N8n 1.123.27 / 2.13.3+ Fix from $2,3002026-03-25 HIGH 8.7 CVE-2026-30587 Multiple Stored XSS vulnerabilities exist in Seafile Server version 13.0.15,13.0.16-pro,12.0.14 and prior and fixed in 13.0.17, 13.0.17-pro, and 12.0… Seafile Server 12.0.20+ Fix from $1,9502026-03-25 HIGH 7.1 CVE-2026-32542 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in ThemeFusion Fusion Builder fusion-builder allow… Mitigation only Fix from $1,9502026-03-25 HIGH 7.1 CVE-2026-32544 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in OOPSpam Team OOPSpam Anti-Spam oopspam-anti-spa… Mitigation only Fix from $1,9502026-03-25 HIGH 7.1 CVE-2026-32545 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Taboola Taboola Pixel taboola-pixel allows Refl… Mitigation only Fix from $1,9502026-03-25 HIGH 7.1 CVE-2026-32540 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Bookly Bookly bookly-responsive-appointment-boo… Mitigation only Fix from $1,9502026-03-25 HIGH 7.1 CVE-2026-32528 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in don-themes Riode riode allows Reflected XSS.Thi… Mitigation only Fix from $1,9502026-03-25 HIGH 7.1 CVE-2026-32529 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in don-themes Molla molla allows Reflected XSS.Thi… Mitigation only Fix from $1,9502026-03-25 HIGH 7.1 CVE-2026-32532 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in ThemeHunk Contact Form & Lead Form Elementor Bu… Mitigation only Fix from $1,9502026-03-25 HIGH 7.1 CVE-2026-32526 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in VillaTheme Abandoned Cart Recovery for WooComme… Mitigation only Fix from $1,9502026-03-25 HIGH 7.1 CVE-2026-32517 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Kleor Contact Manager contact-manager allows Re… Mitigation only Fix from $1,9502026-03-25 HIGH 7.1 CVE-2026-32518 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in imithemes Gaea gaea allows Reflected XSS.This i… Mitigation only Fix from $1,9502026-03-25 MEDIUM 6.5 CVE-2026-32521 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Northern Beaches Websites WP Custom Admin Inter… Mitigation only Fix from $1,6002026-03-25 HIGH 7.1 CVE-2026-32494 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Ays Pro Image Slider by Ays ays-slider allows E… Mitigation only Fix from $1,9502026-03-25 MEDIUM 6.5 CVE-2026-32490 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in jgwhite33 WP TripAdvisor Review Slider wp-tripa… Mitigation only Fix from $1,6002026-03-25 MEDIUM 6.5 CVE-2026-32491 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in jgwhite33 WP Review Slider wp-facebook-reviews … Mitigation only Fix from $1,6002026-03-25 HIGH 7.1 CVE-2026-32493 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in eyecix JobSearch wp-jobsearch allows Reflected … Mitigation only Fix from $1,9502026-03-25 MEDIUM 5.4 CVE-2026-2973 GitLab has remediated an issue in GitLab CE/EE affecting all versions from 17.7 before 18.8.7, 18.9 before 18.9.3, and 18.10 before 18.10.1 that coul… GitLab 18.8.7 / 18.9.3+ Fix from $1,6002026-03-25 MEDIUM 5.4 CVE-2026-2995 GitLab has remediated an issue in GitLab EE affecting all versions from 15.4 before 18.8.7, 18.9 before 18.9.3, and 18.10 before 18.10.1 that could h… GitLab 18.8.7 / 18.9.3+ Fix from $1,6002026-03-25 MEDIUM 6.5 CVE-2026-31914 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in hookandhook WP Courses LMS wp-courses allows DO… Mitigation only Fix from $1,6002026-03-25 HIGH 7.1 CVE-2026-27087 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in G5Theme Wolverine Framework wolverine-framework… Mitigation only Fix from $1,9502026-03-25 HIGH 7.1 CVE-2026-27088 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in G5Theme Darna Framework darna-framework allows … Mitigation only Fix from $1,9502026-03-25 HIGH 7.1 CVE-2026-27054 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in PenciDesign Penci Soledad Data Migrator penci-d… Mitigation only Fix from $1,9502026-03-25 HIGH 7.1 CVE-2026-25461 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in purethemes Listeo Core listeo-core allows Refle… No fix yet Fix from $1,9502026-03-25 MEDIUM 6.5 CVE-2026-25465 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in codepeople CP Multi View Event Calendar cp-mul… Mitigation only Fix from $1,6002026-03-25 HIGH 7.1 CVE-2026-25452 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WPDO Remoji remoji allows Stored XSS.This issue… Mitigation only Fix from $1,9502026-03-25 MEDIUM 6.5 CVE-2026-25417 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Metagauss ProfileGrid profilegrid-user-profile… Mitigation only Fix from $1,6002026-03-25 HIGH 7.1 CVE-2026-25435 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in wpdevart Booking calendar, Appointment Booking … Mitigation only Fix from $1,9502026-03-25 HIGH 7.1 CVE-2026-25383 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Iqonic Design KiviCare kivicare-clinic-manageme… Mitigation only Fix from $1,9502026-03-25 HIGH 7.1 CVE-2026-25361 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in magepeopleteam WpEvently mage-eventpress allows… Mitigation only Fix from $1,9502026-03-25