CVEs
Every CVE and security advisory cve.now tracks, newest first. Search narrows them by severity, exploitation, vendor, technology and package ecosystem.
- CVE-2026-112835WordPress VikRentCar plugin <= 1.4.8 - Cross Site Scripting (XSS) vulnerabilitye4jvikwp VikRentCar
- CVE-2026-112837WordPress GamiPress plugin <= 8.0.7 - SQL Injection vulnerabilityRuben Garcia GamiPress
- CVE-2026-112359WordPress WPMobile.App plugin <= 11.86 - Broken Access Control vulnerabilityAmauri.IO WPMobile.App
- CVE-2026-112838WordPress VikRentCar plugin <= 1.4.8 - Cross Site Scripting (XSS) vulnerabilitye4jvikwp VikRentCar
- CVE-2026-112821WordPress Knit Pay plugin <= 9.6.3.0 - Broken Access Control vulnerabilityKnit Pay
- CVE-2026-112825WordPress Car Rental Manager plugin <= 1.5.3 - Broken Access Control vulnerabilityMagepeople Car Rental Manager
- CVE-2026-4952Stored Cross-Site Scripting in OrderAdministration Portal (AuftragsManager) via Business Reference in VertiGIS WebOrderSystemVertiGIS WebOrderSystem
- CVE-2026-4951Reflected Cross-Site Scripting in CustomerAdministration Portal (KundenManager)in VertiGIS WebOrderSystemVertiGIS WebOrderSystem
- CVE-2026-4950Stored Cross-Site Scripting in CustomerAdministration Portal (KundenManager) in VertiGIS WebOrderSystemVertiGIS WebOrderSystem
- CVE-2026-63244Authentication Bypass VulnerabilityWizLearn Technologies Pte. Learning Management System
- CVE-2026-75775Improper Neutralization of Special Elements used in an OS Command in certain ASUS routers allows remote user to execute arbitrary commands with root privileges via crafted parameters sent to the…ASUS Router
- CVE-2026-93489Improper Authentication in ASUS router modules allows an unauthenticated nearby user to send an HTTP request and forge an access ticket, subsequently enabling the user to perform administrator…ASUS Router
- CVE-2026-75779Improper Neutralization of Special Elements used in an OS Command (“OS Command Injection”) and Cross-Site Request Forgery (CSRF) in an ASUS router model allow an attacker to trick a logged-in…ASUS Router
- CVE-2026-63243Firmware verification vulnerabilityCreative Labs Creative Sound Blaster Katana V2, V2X, SE
- CVE-2026-55981Firmware verification vulnerabilityCreative Labs Creative Sound Blaster Katana V2, V2X, SE
- CVE-2026-94268Advanced Custom Fields: Extended 0.9.2.7 - Unauthenticated Administrator Account Takeover via Front-End User Update ActionAdvanced Custom Fields: Extended
- CVE-2026-94267Advanced Custom Fields: Extended < 0.9.2.8 - Unauthenticated RCE via Front-End Post Update ActionAdvanced Custom Fields: Extended
- CVE-2026-94264Advanced Custom Fields: Extended 0.8.9.4 - 0.9.2.7 - Contributor+ XSS via Form Shortcode AttributesAdvanced Custom Fields: Extended
- CVE-2026-94262Advanced Custom Fields: Extended 0.9.2.7 - Unauthenticated Non-Administrator Account Takeover via Front-End User Update ActionAdvanced Custom Fields: Extended
- CVE-2026-113501LiteSpeed Cache < 7.9.2 - Subscriber+ Pinned Administrative Notice DismissalLiteSpeed Cache
- CVE-2026-113500LiteSpeed Cache < 7.9.2 - Unauthenticated Stored XSS via Font Display OptimizationLiteSpeed Cache
- CVE-2026-113499LiteSpeed Cache < 7.9.2 - Unauthenticated Stored XSS via CDN Inline CSS RewritingLiteSpeed Cache
- CVE-2026-113472Depicter 4.0.5 - 4.8.1 - Editor+ Arbitrary File Upload via Media UploadDepicter — Popup & Slider Builder
- CVE-2026-112230Popup Builder < 4.4.6 - Unauthenticated Popup Trashing via post_type ParameterPopup Builder
- CVE-2026-112219Download Monitor < 5.3.5 - Multisite Subsite Admin+ Incorrect Authorization via Approved Download Paths REST RouteDownload Monitor
- CVE-2026-111982Profile Builder < 4.0.5 - Multisite Subsite Admin+ Network Super Admin Account Takeover via Edit Profile Email ChangeUser Profile Builder
- CVE-2026-111966Profile Builder < 4.0.5 - Contributor+ Stored XSS via redirect_url Shortcode AttributeUser Profile Builder
- CVE-2026-111738Speed Optimizer < 7.8.5 - Admin+ Network Option Update via enable-option/disable-optionSpeed Optimizer
- CVE-2026-111737Speed Optimizer < 7.8.5 - Admin+ Stored XSS via DNS Prefetch and Font Preload URL ListsSpeed Optimizer
- CVE-2026-110537Essential Addons for Elementor < 6.8.7 - Admin+ Cross-Site User Approval State Change via Bulk ActionEssential Addons for Elementor