Total
420746 CVE
| CVE | Vendors | Products | Updated | CVSS v2 | CVSS v3 |
|---|---|---|---|---|---|
| CVE-2026-95586 | 2026-09-23 | N/A | 6.5 MEDIUM | ||
| Contributor Cross Site Scripting (XSS) in Ultimate Addons for Contact Form 7 <= 3.5.50 versions. | |||||
| CVE-2026-95515 | 2026-09-23 | N/A | 7.1 HIGH | ||
| Unauthenticated Cross Site Scripting (XSS) in Ninja Forms <= 3.15.3 versions. | |||||
| CVE-2026-94487 | 2026-09-23 | N/A | 8.1 HIGH | ||
| Unauthenticated Cross Site Request Forgery (CSRF) in PublishPress Capabilities <= 2.50.1 versions. | |||||
| CVE-2026-93623 | 2026-09-23 | N/A | 5.3 MEDIUM | ||
| Unauthenticated Insecure Direct Object References (IDOR) in AI Engine <= 3.7.8 versions. | |||||
| CVE-2026-94500 | 2026-09-23 | N/A | 6.5 MEDIUM | ||
| Contributor Cross Site Scripting (XSS) in ElementsKit Elementor addons Lite <= 4.0.5 versions. | |||||
| CVE-2026-94174 | 2026-09-23 | N/A | 7.6 HIGH | ||
| Administrator SQL Injection in Email Log <= 2.63 versions. | |||||
| CVE-2026-94391 | 2026-09-23 | N/A | 6.5 MEDIUM | ||
| Contributor Cross Site Scripting (XSS) in Ultimate FAQ <= 2.4.14 versions. | |||||
| CVE-2026-94176 | 2026-09-23 | N/A | 7.1 HIGH | ||
| Unauthenticated Cross Site Scripting (XSS) in Mang Board WP <= 2.4.1 versions. | |||||
| CVE-2026-94124 | 2026-09-23 | N/A | 8.5 HIGH | ||
| Contributor SQL Injection in WP EasyCart <= 5.9.4 versions. | |||||
| CVE-2026-95525 | 2026-09-23 | N/A | 6.5 MEDIUM | ||
| Subscriber Arbitrary File Deletion in WP User Frontend <= 4.3.11 versions. | |||||
| CVE-2026-95529 | 2026-09-23 | N/A | 7.1 HIGH | ||
| Unauthenticated Cross Site Scripting (XSS) in Calculated Fields Form <= 5.5.1.1 versions. | |||||
| CVE-2026-95593 | 2026-09-23 | N/A | 7.6 HIGH | ||
| Editor SQL Injection in Ultimeter <= 3.0.8 versions. | |||||
| CVE-2026-94680 | 2026-09-23 | N/A | 6.5 MEDIUM | ||
| Contributor Cross Site Scripting (XSS) in The Post Grid <= 7.9.5 versions. | |||||
| CVE-2026-95604 | 2026-09-23 | N/A | 7.5 HIGH | ||
| Unauthenticated Broken Access Control in Loops & Logic <= 4.2.4 versions. | |||||
| CVE-2026-93618 | 2026-09-23 | N/A | 6.5 MEDIUM | ||
| Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Crocoblock. Jetimpex Inc. JetTricks allows Stored XSS. This issue affects JetTricks: from n/a through 2.0.1. | |||||
| CVE-2026-94679 | 2026-09-23 | N/A | 5.4 MEDIUM | ||
| Subscriber Broken Access Control in Fluent Support <= 2.3.2 versions. | |||||
| CVE-2026-93527 | 2026-09-23 | N/A | 8.5 HIGH | ||
| Contributor SQL Injection in Live Copy Paste for Elementor <= 1.5.10 versions. | |||||
| CVE-2026-93773 | 2026-09-23 | N/A | 8.5 HIGH | ||
| Contributor SQL Injection in Mollie Forms <= 2.11.0 versions. | |||||
| CVE-2026-95514 | 2026-09-23 | N/A | 5.3 MEDIUM | ||
| Unauthenticated Bypass Vulnerability in Netgsm <= 2.10.0 versions. | |||||
| CVE-2026-94079 | 2026-09-23 | N/A | 5.3 MEDIUM | ||
| Unauthenticated Broken Access Control in WP User Manager <= 2.9.19 versions. | |||||