Export limit exceeded: 107024 CVEs match your query. Please refine your search to export 10,000 CVEs or fewer.

Search

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Search Examples

CVEs in KEV CVEs with EPSS >= 80% Crit. Microsoft High Apache SQL Injection (CWE-89) Linux Kernel High (CVSS 3.1) Apache Struts RCE (Remote Code Execution) XSS (CWE-79) Critical (CVSS 4.0) CVEs to check

Search Results (107024 CVEs found)

Export CSV
CVE Vendors Products Updated CVSS v3.1
CVE-2026-84259 2026-10-11 8.8 High
The click5 CRM add-on to WPForms WordPress plugin through 1.0.3 does not sanitise and escape content submitted through an unauthenticated endpoint before outputting it back in an admin page, leading to Stored XSS which could be used against high privilege users such as admin.
CVE-2026-84258 2026-10-11 8.8 High
The click5 CRM add-on to Ninja Forms WordPress plugin through 1.0.1 does not sanitise and escape content submitted through an unauthenticated endpoint before outputting it back in an admin page, leading to Stored XSS which could be used against high privilege users such as admin.
CVE-2026-81420 2026-10-11 8.6 High
The Tcard WP WordPress plugin through 1.8.0 does not sanitise and escape a parameter before using it in a SQL statement in one of its unauthenticated AJAX actions, allowing unauthenticated users to perform SQL injection attacks.
CVE-2026-78534 2026-10-11 7.1 High
Unauthenticated Cross Site Scripting (XSS) in Educavo <= 3.4.2 versions.
CVE-2026-78532 2026-10-11 7.1 High
Unauthenticated Cross Site Scripting (XSS) in LMS <= 8.3 versions.
CVE-2026-66566 2026-10-11 8.1 High
Unauthenticated Local File Inclusion in Ambient <= 1.7 versions.
CVE-2026-62117 2026-10-11 8.5 High
Subscriber SQL Injection in Barcode Scanner with Inventory & Order Manager <= 1.13.1 versions.
CVE-2026-62116 2026-10-11 7.1 High
Unauthenticated Cross Site Scripting (XSS) in Barcode Scanner with Inventory & Order Manager <= 1.13.1 versions.
CVE-2026-62115 2026-10-11 8.1 High
Unauthenticated Local File Inclusion in KuteShop <= 4.2.9 versions.
CVE-2026-62100 2026-10-11 7.1 High
Unauthenticated Cross Site Scripting (XSS) in KuteShop <= 4.2.9 versions.
CVE-2026-62099 2026-10-11 8.1 High
Unauthenticated Local File Inclusion in Boutique <= 2.3.3 versions.
CVE-2026-62096 2026-10-11 8.1 High
Unauthenticated Local File Inclusion in Biolife <= 3.2.3 versions.
CVE-2026-62095 2026-10-11 7.1 High
Unauthenticated Cross Site Scripting (XSS) in Biolife <= 3.2.3 versions.
CVE-2026-62094 2026-10-11 8.1 High
Unauthenticated Local File Inclusion in TechOne <= 3.0.3 versions.
CVE-2026-62093 2026-10-11 7.1 High
Unauthenticated Cross Site Scripting (XSS) in TechOne <= 3.0.3 versions.
CVE-2026-62092 2026-10-11 8.1 High
Unauthenticated Local File Inclusion in Armania <= 1.4.8 versions.
CVE-2026-62091 2026-10-11 7.1 High
Unauthenticated Cross Site Scripting (XSS) in Armania <= 1.4.8 versions.
CVE-2026-62082 2026-10-11 7.1 High
Unauthenticated Cross Site Scripting (XSS) in Pin WP <= 7.0 versions.
CVE-2026-62075 2026-10-11 8.1 High
Unauthenticated Local File Inclusion in Backhoe <= 2.0 versions.
CVE-2026-62074 2026-10-11 8.1 High
Unauthenticated Local File Inclusion in Ozeum <= 1.3.0 versions.