Search

Expected end of text, found '/' (at char 34), (line:1, col:35)
Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Search Examples

CVEs in KEV CVEs with EPSS >= 80% Crit. Microsoft High Apache SQL Injection (CWE-89) Linux Kernel High (CVSS 3.1) Apache Struts RCE (Remote Code Execution) XSS (CWE-79) Critical (CVSS 4.0) CVEs to check

Search Results (425979 CVEs found)

Export CSV
CVE Vendors Products Updated CVSS v3.1
CVE-2026-125824 2 Wordpress-extensions, Wp Go Maps 2 Wp Go Maps, Wp Go Maps 2026-11-14 6.5 Medium
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WP Go Maps WP Go Maps wp-google-maps allows Stored XSS.This issue affects WP Go Maps: from n/a through 10.1.10.
CVE-2026-125808 2 Htmega, Wordpress-extensions 2 Ht Mega, Ht Mega 2026-11-14 5.3 Medium
Missing Authorization vulnerability in HTMega HT Mega ht-mega-for-elementor allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects HT Mega: from n/a through 3.2.8.
CVE-2026-125807 2 Htmega, Wordpress-extensions 2 Ht Mega, Ht Mega 2026-11-14 6.5 Medium
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in HTMega HT Mega ht-mega-for-elementor allows Stored XSS.This issue affects HT Mega: from n/a through 3.2.8.
CVE-2026-125835 2 Crocoblock, Wordpress-extensions 2 Jettabs, Jettabs 2026-11-14 6.5 Medium
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Crocoblock JetTabs jet-tabs allows Stored XSS.This issue affects JetTabs: from n/a through 2.3.5.
CVE-2026-125440 2 Cristián Lávaque, Wordpress-extensions 2 S2member, S2member 2026-11-14 5.3 Medium
Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) vulnerability in Cristián Lávaque s2Member s2member allows Code Injection.This issue affects s2Member: from n/a through 261106.
CVE-2026-125834 2 Wordpress-extensions, Wp Media 2 Imagify, Imagify 2026-11-14 4.3 Medium
Missing Authorization vulnerability in WP Media Imagify imagify allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Imagify: from n/a through 2.3.4.
CVE-2026-128991 1 Stefan Schippers 1 Xschem 2026-11-14 5.3 Medium
xschem 2.9.9 through 3.4.7 contains an out-of-bounds read vulnerability in read_xschem_file() in src/save.c that mishandles embedded-symbol records lacking a preceding instance. Attackers can supply a crafted schematic beginning with a "[" record, causing xschem to read and dereference memory below the instance array and crash.
CVE-2026-128990 1 Stefan Schippers 1 Xschem 2026-11-14 7.8 High
xschem 2.9.9 through 3.4.7 contains a heap out-of-bounds write vulnerability in read_dataset() in src/rawtovcd.c due to an unchecked variable index. Attackers can supply a crafted ngspice .raw file that, when converted with rawtovcd, writes file-controlled heap pointers at chosen signed offsets, corrupting heap memory.
CVE-2026-123975 1 Grid Community Forum 2 Globus-gss-assist, Grid Community Toolkit 2026-11-14 7.5 High
Grid Community Toolkit before 6.2.20261111 (globus-gss-assist before 12.9) contains a heap out-of-bounds write in globus_gss_assist_token_get_fd() triggered by SSLv2 record lengths below 3. Remote unauthenticated clients can send a crafted GSI handshake record to services like globus-gatekeeper and myproxy to corrupt heap memory and crash the service.
CVE-2026-103769 2 Acowebs, Wordpress-extensions 2 Pdf Invoices And Packing Slips For Woocommerce, Pdf Invoices And Packing Slips For Woocommerce 2026-11-14 7.2 High
Deserialization of Untrusted Data vulnerability in Acowebs PDF Invoices and Packing Slips For WooCommerce pdf-invoices-and-packing-slips-for-woocommerce allows Object Injection.This issue affects PDF Invoices and Packing Slips For WooCommerce: from n/a through 1.4.10.
CVE-2026-125852 2 Realtyna, Wordpress-extensions 2 Realtyna Organic Idx Plugin, Realtyna Organic Idx Plugin 2026-11-14 7.7 High
Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Realtyna Realtyna Organic IDX plugin real-estate-listing-realtyna-wpl allows Path Traversal.This issue affects Realtyna Organic IDX plugin: from n/a through 5.5.0.
CVE-2026-125853 2 Everestthemes, Wordpress-extensions 2 Everest Backup, Everest Backup 2026-11-14 6.5 Medium
Missing Authorization vulnerability in Everestthemes Everest Backup everest-backup allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Everest Backup: from n/a through 2.3.15.
CVE-2026-125837 2 Thethemefoundry, Wordpress-extensions 2 Make, Make 2026-11-14 7.1 High
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in thethemefoundry Make make allows Reflected XSS.This issue affects Make: from n/a through 1.10.10.
CVE-2026-125855 2 Elextensions, Wordpress-extensions 2 Elex Wordpress Helpdesk & Customer Ticketing System, Elex Wordpress Helpdesk & Customer Ticketing System 2026-11-14 9.8 Critical
Deserialization of Untrusted Data vulnerability in Elextensions ELEX WordPress HelpDesk & Customer Ticketing System elex-helpdesk-customer-support-ticket-system allows Object Injection.This issue affects ELEX WordPress HelpDesk & Customer Ticketing System: from n/a through 3.3.9.
CVE-2026-125858 2 Cleverreach, Wordpress-extensions 2 Cleverreach® Wp, Cleverreach Wp 2026-11-14 6.3 Medium
Missing Authorization vulnerability in CleverReach CleverReach® WP cleverreach-wp allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects CleverReach® WP: from n/a through 1.5.26.
CVE-2026-124970 2 Wordpress-extensions, Wp Base 2 Wp Base Booking, Wp Base Booking 2026-11-14 9.3 Critical
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in WP BASE WP BASE Booking wp-base-booking-of-appointments-services-and-events allows Blind SQL Injection.This issue affects WP BASE Booking: from n/a through 6.5.2.
CVE-2026-124420 2 Themeisle, Wordpress-extensions 2 Woody Ad Snippets, Woody Ad Snippets 2026-11-14 7.1 High
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Themeisle Woody ad snippets insert-php allows Reflected XSS.This issue affects Woody ad snippets: from n/a through 2.7.10.
CVE-2026-124267 2 Noor Alam, Wordpress-extensions 2 Gmail Smtp, Gmail Smtp 2026-11-14 7.5 High
Missing Authorization vulnerability in Noor Alam Gmail SMTP gmail-smtp allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Gmail SMTP: from n/a through 1.2.3.23.
CVE-2026-124415 2 Alejandro, Wordpress-extensions 2 Alex Reservations, Alex Reservations 2026-11-14 9.3 Critical
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Alejandro Alex Reservations alex-reservations allows SQL Injection.This issue affects Alex Reservations: from n/a through 2.4.8.
CVE-2026-125432 2 Relywp, Wordpress-extensions 2 Recaptcha For Woocommerce, Recaptcha For Woocommerce 2026-11-14 5.3 Medium
Weak Password Recovery Mechanism for Forgotten Password vulnerability in RelyWP reCAPTCHA for WooCommerce recaptcha-woo allows Password Recovery Exploitation.This issue affects reCAPTCHA for WooCommerce: from n/a through 1.4.7.