CVE Vulnerability Database

Complete database of CVE vulnerabilities. Track critical security threats, exploits and patches. Updated daily from NVD NIST.

CVE-2026-66625

7.6

Administrator SQL Injection in WC Vendors Marketplace <= 2.7.2.1 versions.

Administrator
Details

CVE-2026-66624

7.6

Administrator SQL Injection in WPMasterToolKit <= 2.22.0 versions.

Administrator
Details

CVE-2026-66617

6.5

Contributor Cross Site Scripting (XSS) in PublishPress Series <= 3.1.3 versions.

Contributor
Details

CVE-2026-66608

6.4

Contributor Server Side Request Forgery (SSRF) in Unlimited Elements For Elementor (Free Widgets, Addons, Templates) <= 2.0.19 versions.

Contributor
Details

CVE-2026-66580

8.5

Contributor SQL Injection in Product Feed Manager <= 7.12.0 versions.

Contributor
Details

CVE-2026-66579

6.5

Contributor Cross Site Scripting (XSS) in JetElements For Elementor <= 2.9.2.1 versions.

Contributor
Details

CVE-2026-66578

6.5

Contributor Cross Site Scripting (XSS) in PropertyHive <= 2.2.6 versions.

Contributor
Details
143/9174