Vulnerability index

Browse CVEs

10,000+ matching
Filters 1 Clear all
Severity

Filters apply as you choose them.

Unclassified HIGH 7.1
CVE-2026-57668

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Basix NEX-Forms nex-forms-express-wp-form-build…

Mitigation only
Fix from $1,950 2026-07-13
Unclassified MEDIUM 6.5
CVE-2026-57424

Missing Authorization vulnerability in knitpay Razorpay Payment Links for WooCommerce rzp-woocommerce allows Exploiting Incorrectly Configured Access…

Mitigation only
Fix from $1,600 2026-07-13
Unclassified HIGH 7.1
CVE-2026-57423

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Kofi Mokome Message Filter for Contact Form 7 c…

Mitigation only
Fix from $1,950 2026-07-13
Unclassified HIGH 7.1
CVE-2026-57422

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in VillaTheme Bopo – WooCommerce Product Bundle Bu…

Mitigation only
Fix from $1,950 2026-07-13
Unclassified HIGH 7.1
CVE-2026-57421

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in CRM Perks CRM Perks Forms crm-perks-forms allow…

Mitigation only
Fix from $1,950 2026-07-13
Unclassified MEDIUM 6.5
CVE-2026-57420

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Netrr Author Box WP Lens author-box-for-divi al…

Mitigation only
Fix from $1,600 2026-07-13
Unclassified MEDIUM 6.5
CVE-2026-57419

Missing Authorization vulnerability in Fahad Mahmood Stock Locations for WooCommerce stock-locations-for-woocommerce allows Exploiting Incorrectly Co…

Mitigation only
Fix from $1,600 2026-07-13
Unclassified MEDIUM 6.5
CVE-2026-57418

Missing Authorization vulnerability in BoldGrid Client Invoicing by Sprout Invoices sprout-invoices allows Exploiting Incorrectly Configured Access C…

Mitigation only
Fix from $1,600 2026-07-13
Unclassified HIGH 7.1
CVE-2026-57417

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in RexTheme Cart Lift cart-lift allows Stored XSS.…

Mitigation only
Fix from $1,950 2026-07-13
Unclassified HIGH 7.1
CVE-2026-57416

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in SiteGround SiteGround Email Marketing sitegroun…

Mitigation only
Fix from $1,950 2026-07-13
Unclassified HIGH 7.1
CVE-2026-57415

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Codemenschen Gift Vouchers gift-voucher allows …

Mitigation only
Fix from $1,950 2026-07-13
Unclassified MEDIUM 6.5
CVE-2026-57414

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in QuantumCloud ChatBot for eCommerce – Woow…

Mitigation only
Fix from $1,600 2026-07-13
Unclassified MEDIUM 6.4
CVE-2026-57413

Server-Side Request Forgery (SSRF) vulnerability in bdthemes Instant Image Generator ai-image allows Server Side Request Forgery.This issue affects I…

Mitigation only
Fix from $1,600 2026-07-13
Unclassified MEDIUM 6.5
CVE-2026-57412

Missing Authorization vulnerability in Codemenschen Gift Vouchers gift-voucher allows Exploiting Incorrectly Configured Access Control Security Level…

No fix yet
Fix from $1,600 2026-07-13
Unclassified HIGH 7.1
CVE-2026-57411

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Aman CF7 Views – Complete Entry Managemen…

Mitigation only
Fix from $1,950 2026-07-13
Unclassified HIGH 8.8
CVE-2026-57410

Incorrect Privilege Assignment vulnerability in MailerPress Team MailerPress mailerpress allows Privilege Escalation.This issue affects MailerPress: …

Mitigation only
Fix from $1,950 2026-07-13
Unclassified HIGH 7.1
CVE-2026-57409

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in RealMag777 Active Products Tables for WooCommer…

Mitigation only
Fix from $1,950 2026-07-13
Unclassified MEDIUM 6.5
CVE-2026-57408

Missing Authorization vulnerability in peachpayments Peach Payments Gateway wc-peach-payments-gateway allows Exploiting Incorrectly Configured Access…

Mitigation only
Fix from $1,600 2026-07-13
Unclassified HIGH 7.2
CVE-2026-57407

Server-Side Request Forgery (SSRF) vulnerability in WP Swings PDF Generator for WordPress pdf-generator-for-wp allows Server Side Request Forgery.Thi…

Mitigation only
Fix from $1,950 2026-07-13
Unclassified MEDIUM 6.5
CVE-2026-57406

Missing Authorization vulnerability in Roxnor FundEngine wp-fundraising-donation allows Exploiting Incorrectly Configured Access Control Security Lev…

Mitigation only
Fix from $1,600 2026-07-13
Unclassified HIGH 7.1
CVE-2026-57405

Missing Authorization vulnerability in themehunk Open Shop open-shop allows Exploiting Incorrectly Configured Access Control Security Levels.This iss…

Mitigation only
Fix from $1,950 2026-07-13
Unclassified MEDIUM 6.5
CVE-2026-57404

Missing Authorization vulnerability in magepeopleteam Booking and Rental Manager booking-and-rental-manager-for-woocommerce allows Exploiting Incorre…

Mitigation only
Fix from $1,600 2026-07-13
Unclassified HIGH 7.1
CVE-2026-57403

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Milan Petrovic GD Security Headers gd-security-…

Mitigation only
Fix from $1,950 2026-07-13
Unclassified MEDIUM 6.5
CVE-2026-57402

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in wpdesk Flexible Refund and Return Order for Woo…

Mitigation only
Fix from $1,600 2026-07-13
Unclassified CRITICAL 9.9
CVE-2026-57401

Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Brainstorm Force SureDash suredash allows Path Traver…

Mitigation only
Fix from $2,300 2026-07-13
Unclassified MEDIUM 6.5
CVE-2026-57400

Missing Authorization vulnerability in WP Swings Event Tickets Manager for WooCommerce event-tickets-manager-for-woocommerce allows Exploiting Incorr…

Mitigation only
Fix from $1,600 2026-07-13
Unclassified HIGH 7.1
CVE-2026-57399

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Proxy & VPN Blocker Proxy & VPN Blocker…

Mitigation only
Fix from $1,950 2026-07-13
Unclassified HIGH 7.1
CVE-2026-57398

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WebCodingPlace Real Estate Manager Pro real-est…

Mitigation only
Fix from $1,950 2026-07-13
Unclassified HIGH 7.1
CVE-2026-57396

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Flintop Free Gifts for WooCommerce free-gifts-f…

Mitigation only
Fix from $1,950 2026-07-13
Unclassified MEDIUM 6.5
CVE-2026-57395

Missing Authorization vulnerability in Themefic Tourfic tourfic allows Exploiting Incorrectly Configured Access Control Security Levels.This issue af…

Mitigation only
Fix from $1,600 2026-07-13