CVEs
Every CVE and security advisory cve.now tracks, newest first. Search narrows them by severity, exploitation, vendor, technology and package ecosystem.
- CVE-2026-109891WordPress Happy Addons for Elementor plugin <= 3.50.1 - Broken Access Control vulnerabilityweDevs Happy Addons for Elementor
- CVE-2026-25448WordPress WP ERP plugin <= 1.17.10 - Broken Access Control vulnerabilityweDevs WP ERP
- CVE-2026-42691WordPress EventPrime plugin <= 4.3.6.0 - Broken Access Control vulnerabilityEventPrime
- CVE-2026-54852WordPress Page Restriction WordPress (WP) plugin <= 1.6.1 - Broken Access Control vulnerabilityminiOrange Page Restriction WordPress
- CVE-2026-97073WordPress myCred plugin <= 4.0.2 - Broken Access Control vulnerabilitymyCred
- CVE-2026-118097WordPress Flash & HTML5 Video plugin <= 2.14.0 - Cross Site Scripting (XSS) vulnerabilitybPlugins Flash & HTML5 Video
- CVE-2026-27062WordPress WPFunnels plugin <= 3.13.5 - Cross Site Request Forgery (CSRF) vulnerabilityWPFunnels Team WPFunnels
- CVE-2026-54853WordPress Profile Builder plugin <= 4.0.5 - Broken Access Control vulnerabilityCozmoslabs Profile Builder
- CVE-2026-114706WordPress Strong Testimonials plugin <= 3.3.15 - Cross Site Scripting (XSS) vulnerabilityWP Chill Strong Testimonials
- CVE-2026-27063WordPress Kit (formerly ConvertKit) plugin <= 3.4.7 - Broken Access Control vulnerabilityKit
- CVE-2026-115601WordPress Custom Price for WooCommerce plugin <= 1.1.29 - Broken Access Control vulnerabilityWP Desk Custom Price for WooCommerce
- CVE-2026-115605WordPress SureDash plugin <= 1.12.3 - Broken Access Control vulnerabilityBrainstorm Force SureDash
- CVE-2026-118095WordPress Media LIbrary Assistant plugin <= 3.42 - Cross Site Scripting (XSS) vulnerabilityDavid Lingren Media LIbrary Assistant
- CVE-2026-54871WordPress ShopBuilder – Elementor WooCommerce Builder Addons plugin <= 3.4.2 - Broken Access Control vulnerabilityMamunur Rashid ShopBuilder – Elementor WooCommerce Builder…
- CVE-2026-25450WordPress User Registration plugin <= 5.3.0 - Broken Access Control vulnerabilityThemeGrill User Registration
- CVE-2026-116850WordPress Happy Addons for Elementor plugin <= 3.50.1 - Cross Site Scripting (XSS) vulnerabilityweDevs Happy Addons for Elementor
- CVE-2026-114181WordPress Taxi Booking Manager for WooCommerce plugin <= 2.1.6 - Broken Access Control vulnerabilityMagepeople Taxi Booking Manager for WooCommerce
- CVE-2026-118088WordPress WPFunnels plugin <= 3.13.5 - Broken Access Control vulnerabilityWPFunnels Team WPFunnels
- CVE-2026-116849WordPress StreamCast plugin <= 2.4.6 - Cross Site Scripting (XSS) vulnerabilitybPlugins StreamCast
- CVE-2026-110881WordPress SureDash plugin <= 1.12.3 - Cross Site Scripting (XSS) vulnerabilityBrainstorm Force SureDash
- CVE-2026-116856WordPress Flexible Quantity – Measurement Price Calculator for WooCommerce plugin <= 2.3.24 - Broken Access Control vulnerabilityWP Desk Flexible Quantity – Measurement Price Calculator fo…
- CVE-2026-39737WordPress JetElements For Elementor plugin <= 2.9.2.6 - Cross Site Scripting (XSS) vulnerabilityCrocoblock JetElements For Elementor
- CVE-2026-118091WordPress WPFunnels plugin <= 3.13.5 - Broken Access Control vulnerabilityWPFunnels Team WPFunnels
- CVE-2026-116387WordPress SureForms plugin <= 2.12.9 - Broken Access Control vulnerabilityBrainstorm Force SureForms
- CVE-2026-39742WordPress Gutenberg Blocks by Kadence Blocks plugin <= 3.8.0.2 - Cross Site Scripting (XSS) vulnerabilityLiquid Web / StellarWP Gutenberg Blocks by Kadence Blocks
- CVE-2026-115610WordPress PublishPress Authors plugin <= 4.17.0 - Cross Site Scripting (XSS) vulnerabilityPublishPress Authors
- CVE-2026-118092WordPress MasterStudy LMS plugin <= 3.7.55 - Broken Access Control vulnerabilityStylemixThemes MasterStudy LMS
- CVE-2026-116406WordPress Webba Booking plugin <= 6.5.4 - Broken Access Control vulnerabilityWebba Plugins Webba Booking
- CVE-2026-52708WordPress WP User Frontend plugin <= 4.3.13 - Broken Access Control vulnerabilityweDevs WP User Frontend
- CVE-2026-116846WordPress WP User Manager plugin <= 2.9.26 - Broken Access Control vulnerabilityWP User Manager