Riskcovery

Vulnerabilities

Every vulnerability the CVE Program has published, newest first. Search by CVE ID, product, or words from the description.

402,131 vulnerabilities match.

CVESeveritySummary
CVE-2026-1054298.9 HighNetBird client SSH config Match line injection via peer FQDN or hostname allows local command execution
CVE-2026-1019266.5 MediumHyyan WooCommerce Polylang Integration <= 1.5.0 - Authenticated (Subscriber+) SQL Injection via 'variation_ids' Parameter
CVE-2026-1033696.4 MediumSocial Share Buttons & Analytics Plugin <= 4.5 - Authenticated (Subscriber+) Stored Cross-Site Scripting via 'response' Parameter via gs_update_with_values AJAX
CVE-2026-1019247.2 HighNewStatPress <= 1.4.5 - Unauthenticated Stored Cross-Site Scripting via 'urlrequested' Attribute via Query String
CVE-2026-1104534.3 MediumNix before 2.35.3, when unsandboxed on macOS or FreeBSD, incorrectly allows connections made by build users from daemon clients.
CVE-2026-1104524.0 MediumThe multi-user installer in Nix before 2.35.3 sets the ownership of store contents to the user (who invoked the installer) even though it should be root ownership.
CVE-2026-1104514.3 MediumNix before 2.35.3 and Lix before 2.95.4 on macOS allow a Seatbelt sandbox escape (for an unconfined build) because a certain size threshold is mishandled.
CVE-2026-1104508.0 HighNix before 2.35.3 and Lix before 2.95.4 allow privilege escalation via a repair operation because it could destroy and then replace a store path before content verification.
CVE-2026-1104497.5 HighNix before 2.35.3 and Lix before 2.95.4 have an integer overflow and resultant out-of-bounds write when evaluating untrusted expressions because list allocation is mishandled.
CVE-2026-1001537.2 HighNewStatPress <= 1.4.5 - Unauthenticated Stored Cross-Site Scripting via URL Request Tracking (urlrequested field)
CVE-2026-878559.8 CriticalJTL-Connector for WooCommerce <= 2.4.3 - Unauthenticated Arbitrary File Upload via 'image.push' Method
CVE-2026-974715.3 MediumAvada (Fusion) Builder <= 3.16.1 - Unauthenticated Sensitive Information Exposure in 'args[link_target]' Parameter via {user_meta} Dynamic Data Token
CVE-2026-973987.2 HighFV Flowplayer Video Player <= 7.5.54.7212 - Unauthenticated Stored Cross-Site Scripting via 'synopsis' Shortcode Attribute
CVE-2026-958087.5 HighForm Maker by 10Web <= 1.15.48 - Unauthenticated SQL Injection via 'inputs' Parameter
CVE-2026-1001856.4 MediumDirectorist: AI-Powered Business Directory, Listings & Classified Ads <= 8.10.2.1 - Authenticated (Subscriber+) Stored Cross-Site Scripting via 'phone' Listing Field
CVE-2026-835927.2 HighContact Form DB for Enfold <= 2.0.2 - Unauthenticated Stored Cross-Site Scripting via Contact Form Field Values
CVE-2026-958167.2 HighSmart Forms <= 2.6.104 - Unauthenticated Stored Cross-Site Scripting via 'formString' Parameter
CVE-2026-781937.5 HighJTL-Connector for WooCommerce <= 2.4.3 - Unauthenticated SQL Injection
CVE-2026-943777.2 HighVerified Reviews (Avis Vérifiés) <= 2.4.6 - Unauthenticated Stored Cross-Site Scripting via 'moderation' Parameter (discussion.commentaire)
CVE-2026-970206.4 MediumPO/MO Editor <= 1.4.2 - Authenticated (Subscriber+) Stored Cross-Site Scripting via 'podata' Parameter
CVE-2026-938857.2 HighCryptocurrency Donation Box <= 2.2.13 - Unauthenticated Stored Cross-Site Scripting via data_object Parameter
CVE-2026-771147.2 HighDocument Gallery <= 5.1.1 - Unauthenticated Stored Cross-Site Scripting
CVE-2026-164956.4 MediumCountdown Timer – Widget Countdown <= 3.0.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'redirect_url' Shortcode Attribute
CVE-2026-1001934.7 MediumTutor LMS <= 4.1.0 - Reflected Cross-Site Scripting via 'tab' Parameter
CVE-2026-958076.4 MediumFV Player 8 <= 8.1.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'synopsis' Shortcode Attribute
CVE-2026-1048009.8 CriticalAGE-GATE <= 1.0 - Unauthenticated Remote Code Execution via PHP Code Injection via 'width'/'height' Parameters to Standalone admin.php
CVE-2026-966617.5 HighGmedia Photo Gallery <= 1.25.1 - Unauthenticated SQL Injection via 'gmedia__in' Parameter
CVE-2026-1104458.6 HighTEAMPLUS TECHNOLOGY｜TeamPlus Messenger - Code Injection
CVE-2026-1104448.6 HighTEAMPLUS TECHNOLOGY｜TeamPlus Messenger - Code Injection
CVE-2026-147657.7 HighEpic Games Unreal Engine Insecure Default URL Scheme Allowance in LaunchURL
CVE-2026-1104479.2 CriticalCollabora Online Built-in CODE Server before 26.4.303 (richdocumentscode), a Nextcloud app, allows remote code execution, as exploited in the wild in September and October 2026, a different vulnerability than CVE-2025-66208. This is an OS…
CVE-2026-1034227.2 HighAnyComment <= 0.3.6 - Unauthenticated Stored Cross-Site Scripting via 'email' Parameter
CVE-2026-976579.8 CriticalAbandoned Cart Pro for WooCommerce <= 10.8.0 - Unauthenticated Authentication Bypass via Malleable Encryption and Bypassable HMAC via Recovery Link 'validate' Parameter
CVE-2026-1022517.5 HighAbandoned Cart Pro for WooCommerce <= 10.8.0 - Unauthenticated SQL Injection via AES-CTR Ciphertext Forgery in 'validate' Parameter
CVE-2026-976689.8 CriticalAbandoned Cart Pro for WooCommerce <= 10.8.0 - Unauthenticated SQL Injection via Guest Persistent Cart meta_value
CVE-2026-1100029.8 CriticalSnazzy Social Media Feed <= 2.5 - Unauthenticated Arbitrary File Upload via 'pluginURL' Parameter
CVE-2026-827157.9 HighInsecure Temporary File Vulnerability in Hitachi Disk Array Driver for AIX, Hitachi Disk Array Driver for Virtual I/O Server
CVE-2026-865735.1 MediumOut-of-bounds Write Vulnerability in Hitachi Disk Array Driver for AIX, Hitachi Disk Array Driver for Virtual I/O Server
CVE-2026-866074.3 MediumInternal Application Information Exposure Vulnerability in Hitachi Ops Center Administrator
CVE-2026-1103929.8 CriticalSamsung QA-Board — Unauthenticated OS command injection via output redo/tuning
CVE-2026-920979.1 CriticalClick to Chat <= 4.44 - Unauthenticated Arbitrary Shortcode Execution via REQUEST_URI via {url} Placeholder
CVE-2026-170928.1 HighDirectorist: AI-Powered Business Directory, Listings & Classified Ads <= 8.10.2.1 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Listing Deletion via 'listing_id' Parameter
CVE-2026-1049958.1 HighBP Profile Search <= 5.9 - Unauthenticated Local File Inclusion to Remote Code Execution via 'bps_directory' Cookie 'ajax_template' Value
CVE-2026-1047677.5 HighMembership & User Roles for WooCommerce (Automatic Role Changer) <= 20260828 - Authenticated (Subscriber+) Privilege Escalation to Stale Foreign Role Cache
CVE-2026-1076525.3 MediumDatabase Addon for Contact Form 7 <= 1.4.1 - Unauthenticated Limited File Deletion via Injected 'attackcfdb7_file' Submission Field
CVE-2026-933889.8 CriticalPrintcart Store - Web to Print Product Designer for WooCommerce (PCDesigner) <= 2.9.1 - Unauthenticated Arbitrary File Upload to Remote Code Execution via nbdesigner_copy_image_from_url
CVE-2026-1047497.5 HighBit integrations <= 2.10.6 - Unauthenticated Privilege Escalation via Identity-Confused Log Re-execution to Account Takeover via Log Re-execution of Anonymous-Captured Field Data
CVE-2026-1034256.4 MediumBooking Package <= 1.7.29 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'id' Shortcode Attribute
CVE-2026-1034237.5 HighBooking Package <= 1.7.29 - Missing Authorization to Unauthenticated Sensitive Information Disclosure via 'mode=sendBooking' with nonexistent 'timeKey' and 'public=0'
CVE-2026-1103858.7 HighA remote code execution vulnerability in ONLYOFFICE Document Server versions before10.0.0 allows an authenticated attacker with a valid Inbox-compatible JWT to execute arbitrary operating system commands as the ds service account. The…

Every record here comes from the CVE Program's CVE List. © 1999-2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.