CVEs
Browse the synced catalog, newest first.
- CVE-2026-119524WordPress WP Customer Area plugin <= 8.4.3 - Cross Site Scripting (XSS) vulnerabilityAguila Technologies WP Customer Area
- CVE-2026-123476WordPress Featured Image from URL plugin <= 6.1.4 - Cross Site Scripting (XSS) vulnerabilityfifu.app Featured Image from URL
- CVE-2026-120855WordPress TI WooCommerce Wishlist plugin <= 2.14.0 - Cross Site Scripting (XSS) vulnerabilityTemplateInvaders TI WooCommerce Wishlist
- CVE-2026-121570WordPress RSVP and Event Management plugin <= 2.7.17 - Cross Site Scripting (XSS) vulnerabilityWP Chill RSVP and Event Management
- CVE-2026-123475WordPress MapSVG plugin <= 8.16.3 - Broken Access Control vulnerabilityPT Norther Lights Production MapSVG
- CVE-2026-121782WordPress If-So Dynamic Content Personalization plugin <= 1.10.3 - Cross Site Scripting (XSS) vulnerabilityIf-So Dynamic Content Personalization
- CVE-2026-120838WordPress All-in-One Video Gallery plugin <= 5.0.0 - Cross Site Scripting (XSS) vulnerabilityPlugins360 Labs All-in-One Video Gallery
- CVE-2026-113702iomad PDF Certificate lib.php local_iomad_pluginfile authorizationiomad
- CVE-2026-120367Apache Axis2/Java: unbounded JSON request body bufferingApache Software Foundation org.apache.axis2:axis2-json
- CVE-2026-124591Bahleel CsvExporter.php fputcsv csv injectionBahleel
- CVE-2026-123779Apache Axis2/Java: exposeServiceMetadata not enforced on all metadata routesApache Software Foundation org.apache.axis2:axis2-transport…
- CVE-2026-123753Apache Axis2/Java: SSRF via WS-Addressing ReplyTo and FaultTo endpointsApache Software Foundation org.apache.axis2:axis2-kernel
- CVE-2026-123766Apache Axis2/Java: Cross-site scripting in the OpenAPI module's Swagger UI pageApache Software Foundation org.apache.axis2:axis2-openapi
- CVE-2026-123770Apache Axis2/Java: Unbounded multipart and form-encoded request bodiesApache Software Foundation org.apache.axis2:axis2-kernel
- CVE-2026-106008FraudLabs Pro SMS Verification 1.11.2 - 1.12.1 - Unauthenticated SMS Verification Bypass via wc_sms_action_verifiedFraudLabs Pro SMS Verification
- CVE-2026-115252Confection 0.4.0 - 0.4.7 - Unauthenticated RCE via Write Key OptionConfection WordPress Cable
- CVE-2026-106466JWT Auth <= 3.0.2 - Unauthenticated Account Access Persistence via Insufficient Refresh Token RevocationJWT Auth
- CVE-2026-120761Apache Axis2/Java: XML External Entity (XXE) injection via imported WSDL/XSD documentsApache Software Foundation org.apache.axis2:axis2-kernel
- CVE-2026-120832Apache Axis2/Java: SSRF via WSDL/XSD schema import resolutionApache Software Foundation org.apache.axis2:axis2-kernel
- CVE-2026-118196Apache Allura: OAuth1 rebindingApache Software Foundation Apache Allura
- CVE-2026-124590zhangbw409 library_manager_system UserController.java BookController.addBook improper authorizationzhangbw409 library_manager_system
- CVE-2026-82436Apache Storm Client: Deserialization of Untrusted Data from the State StoreApache Software Foundation org.apache.storm:storm-client
- CVE-2026-82440Apache Storm Nimbus: Submitter-Controlled Class Instantiation in Nimbus via a Fail-Open Scheduler Strategy AllowlistApache Software Foundation org.apache.storm:storm-client
- CVE-2026-124589lxtGH OMG-Seg MoE Shard Checkpoint Loader handle_moe_load_and_save.py load_state_dict_into_model path traversallxtGH OMG-Seg
- CVE-2026-119483WordPress Form Maker by 10Web plugin <= 1.15.50 - Cross Site Scripting (XSS) vulnerabilityForm Maker by 10Web
- CVE-2026-119497WordPress Directorist plugin <= 8.10.6 - Cross Site Scripting (XSS) vulnerabilitywpWax Directorist
- CVE-2026-119505WordPress Welcart e-Commerce plugin <= 2.12.6 - Cross Site Scripting (XSS) vulnerabilityWelcart e-Commerce
- CVE-2026-123463WordPress Checkout Files Upload for WooCommerce plugin <= 2.4.0 - Cross Site Scripting (XSS) vulnerabilityWP Wham Checkout Files Upload for WooCommerce
- CVE-2026-121763WordPress Hummingbird plugin <= 3.21.2 - Cross Site Scripting (XSS) vulnerabilityWPMU DEV Hummingbird
- CVE-2026-66675WordPress Motors plugin <= 1.4.128 - Cross Site Scripting (XSS) vulnerabilityStylemixThemes Motors