CVE Vulnerability Database

Complete database of CVE vulnerabilities. Track critical security threats, exploits and patches. Updated daily from NVD NIST.

CVE-2026-95513

7.5

Unauthenticated Broken Access Control in Online Booking & Scheduling Calendar for WordPress by vcita <= 4.6.0 versions.

WordPress
Details

CVE-2026-94684

6.5

Contributor Cross Site Scripting (XSS) in Ocean Extra <= 2.6.1 versions.

Contributor
Details

CVE-2026-94682

6.5

Contributor Cross Site Scripting (XSS) in Podcast Importer SecondLine <= 1.5.6 versions.

Contributor
Details

CVE-2026-94680

6.5

Contributor Cross Site Scripting (XSS) in The Post Grid <= 7.9.5 versions.

Contributor
Details

CVE-2026-94679

5.4

Subscriber Broken Access Control in Fluent Support <= 2.3.2 versions.

Subscriber
Details

CVE-2026-94671

6.5

Contributor Cross Site Scripting (XSS) in The Post Grid <= 7.9.5 versions.

Contributor
Details

CVE-2026-94500

6.5

Contributor Cross Site Scripting (XSS) in ElementsKit Elementor addons Lite <= 4.0.5 versions.

Contributor
Details

CVE-2026-94487

8.1

Unauthenticated Cross Site Request Forgery (CSRF) in PublishPress Capabilities <= 2.50.1 versions.

Details
← 338/9804 →