CVE-2026-95528
7.1 HIGH 7.1Unauthenticated Cross Site Scripting (XSS) in Core Web Vitals & PageSpeed Booster <= 1.0.31 versions.
CVE Vulnerability Database
Complete database of CVE vulnerabilities. Track critical security threats, exploits and patches. Updated daily from NVD NIST.
CVE-2026-95527
6.5 MEDIUM 6.5Unauthenticated Broken Access Control in Conekta Payment Gateway <= 6.2.4 versions.
CVE-2026-95525
6.5 MEDIUM 6.5Subscriber Arbitrary File Deletion in WP User Frontend <= 4.3.11 versions.
Subscriber
Details
CVE-2026-95524
5.3 MEDIUM 5.3Unauthenticated Bypass Vulnerability in WP User Frontend <= 4.3.11 versions.
CVE-2026-95523
6.5 MEDIUM 6.5Subscriber Bypass Vulnerability in WP User Frontend <= 4.3.11 versions.
Subscriber
Details
CVE-2026-95522
7.6 HIGH 7.6Shop manager SQL Injection in Easy Digital Downloads <= 3.7.0 versions.
Shop
Details
CVE-2026-95515
7.1 HIGH 7.1Unauthenticated Cross Site Scripting (XSS) in Ninja Forms <= 3.15.3 versions.
CVE-2026-95514
5.3 MEDIUM 5.3Unauthenticated Bypass Vulnerability in Netgsm <= 2.10.0 versions.
CVE-2026-95513
7.5 HIGH 7.5Unauthenticated Broken Access Control in Online Booking & Scheduling Calendar for WordPress by vcita <= 4.6.0 versions.
WordPress
Details
CVE-2026-94684
6.5 MEDIUM 6.5Contributor Cross Site Scripting (XSS) in Ocean Extra <= 2.6.1 versions.
Contributor
Details
Statistics
Total
98088
Critical
10324
High
38189