Vulnerability index

Browse CVEs

10,000+ matching
Filters 1 Clear all
Severity

Filters apply as you choose them.

Unclassified MEDIUM 6.5
CVE-2026-57731

Contributor Broken Access Control in Flatsome <= 3.20.5 versions.

Mitigation only
Fix from $1,600 2026-07-02
Unclassified HIGH 8.2
CVE-2026-57688

Unauthenticated Broken Access Control in POS Entegratör <= 3.7.103 versions.

Mitigation only
Fix from $1,950 2026-07-02
Unclassified HIGH 8.5
CVE-2026-57687

Contributor SQL Injection in Custom Field Template <= 2.7.8 versions.

Mitigation only
Fix from $1,950 2026-07-02
Unclassified HIGH 7.1
CVE-2026-57686

Unauthenticated Cross Site Scripting (XSS) in WowAddons <= 1.6.14 versions.

Mitigation only
Fix from $1,950 2026-07-02
Unclassified MEDIUM 6.5
CVE-2026-57684

Contributor Cross Site Scripting (XSS) in TheFox <= 3.9.70 versions.

No fix yet
Fix from $1,600 2026-07-02
Unclassified CRITICAL 9.3
CVE-2026-57683

Unauthenticated SQL Injection in WP Fast Total Search <= 1.80.280 versions.

Mitigation only
Fix from $2,300 2026-07-02
Unclassified HIGH 7.1
CVE-2026-57682

Unauthenticated Cross Site Scripting (XSS) in Simple Link Directory <= 15.0.5 versions.

Mitigation only
Fix from $1,950 2026-07-02
Unclassified MEDIUM 6.4
CVE-2026-57681

Subscriber Server Side Request Forgery (SSRF) in GeoDirectory <= 2.8.161 versions.

Mitigation only
Fix from $1,600 2026-07-02
Unclassified MEDIUM 6.5
CVE-2026-57680

Unauthenticated Insecure Direct Object References (IDOR) in Kirki <= 6.0.11 versions.

Mitigation only
Fix from $1,600 2026-07-02
Unclassified CRITICAL 9.3
CVE-2026-57679

Unauthenticated SQL Injection in GeekyBot <= 1.2.5 versions.

No fix yet
Fix from $2,300 2026-07-02
Unclassified HIGH 7.1
CVE-2026-57678

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in ThemePunch Slider Revolution allows Reflected X…

Mitigation only
Fix from $1,950 2026-07-02
Unclassified CRITICAL 9.8
CVE-2026-57677

Unauthenticated PHP Object Injection in Novalnet Payment Gateway for WooCommerce <= 12.10.3 versions.

Mitigation only
Fix from $2,300 2026-07-02
Unclassified HIGH 7.1
CVE-2026-57675

Unauthenticated Cross Site Scripting (XSS) in WP Photo Album Plus <= 9.2.02.004 versions.

Mitigation only
Fix from $1,950 2026-07-02
Unclassified HIGH 7.1
CVE-2026-57674

Unauthenticated Cross Site Scripting (XSS) in Timetics <= 1.0.58 versions.

Mitigation only
Fix from $1,950 2026-07-02
Unclassified HIGH 7.1
CVE-2026-57673

Unauthenticated Cross Site Scripting (XSS) in Optimole <= 4.2.7 versions.

Mitigation only
Fix from $1,950 2026-07-02
Unclassified HIGH 7.1
CVE-2026-57672

Unauthenticated Cross Site Scripting (XSS) in wpDataTables <= 6.5.1.1 versions.

Mitigation only
Fix from $1,950 2026-07-02
Unclassified HIGH 7.1
CVE-2026-57671

Unauthenticated Cross Site Scripting (XSS) in perfmatters <= 2.6.4 versions.

Mitigation only
Fix from $1,950 2026-07-02
Unclassified HIGH 7.1
CVE-2026-57670

Unauthenticated Cross Site Scripting (XSS) in Google Maps CP <= 1.2.5 versions.

No fix yet
Fix from $1,950 2026-07-02
Unclassified MEDIUM 6.5
CVE-2026-57669

Subscriber Broken Access Control in Advanced Contact form 7 DB <= 2.0.9 versions.

Mitigation only
Fix from $1,600 2026-07-02
Unclassified CRITICAL 9.6
CVE-2026-57625

Unauthenticated Cross Site Scripting (XSS) in Admin and Site Enhancements (ASE) Pro <= 8.8.5 versions.

Mitigation only
Fix from $2,300 2026-07-02
Unclassified CRITICAL 10.0
CVE-2026-57624

Unauthenticated Remote Code Execution (RCE) in Blocksy Companion Pro <= 2.1.46 versions.

Mitigation only
Fix from $2,300 2026-07-02
Unclassified CRITICAL 9.0
CVE-2026-57623

Unauthenticated Arbitrary Code Execution in W3 Total Cache <= 2.9.4 versions.

Mitigation only
Fix from $2,300 2026-07-02
Unclassified CRITICAL 9.8
CVE-2026-57621

Unauthenticated PHP Object Injection in Booktics <= 1.0.21 versions.

Mitigation only
Fix from $2,300 2026-07-02
Unclassified HIGH 7.1
CVE-2026-57426

Unauthenticated Cross Site Scripting (XSS) in Modula - PRO <= 2.10.8 versions.

Mitigation only
Fix from $1,950 2026-07-02
Unclassified HIGH 7.1
CVE-2026-57366

Unauthenticated Cross Site Scripting (XSS) in WPAdverts <= 2.3.1 versions.

Mitigation only
Fix from $1,950 2026-07-02
Unclassified HIGH 7.1
CVE-2026-57362

Unauthenticated Cross Site Scripting (XSS) in ChatBot <= 8.3.2 versions.

Mitigation only
Fix from $1,950 2026-07-02
Unclassified HIGH 7.1
CVE-2026-57361

Unauthenticated Cross Site Scripting (XSS) in Survey Maker <= 5.2.2.5 versions.

Mitigation only
Fix from $1,950 2026-07-02
Unclassified HIGH 7.1
CVE-2026-57360

Unauthenticated Cross Site Scripting (XSS) in eCommerce Product Catalog <= 3.5.4 versions.

Mitigation only
Fix from $1,950 2026-07-02
Unclassified HIGH 7.1
CVE-2026-57359

Unauthenticated Cross Site Scripting (XSS) in ReviewX <= 2.3.10 versions.

Mitigation only
Fix from $1,950 2026-07-02
Unclassified HIGH 7.1
CVE-2026-57358

Unauthenticated Cross Site Scripting (XSS) in Customize My Account for WooCommerce <= 4.3.9 versions.

Mitigation only
Fix from $1,950 2026-07-02