Search

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Search Examples

CVEs in KEV CVEs with EPSS >= 80% Crit. Microsoft High Apache SQL Injection (CWE-89) Linux Kernel High (CVSS 3.1) Apache Struts RCE (Remote Code Execution) XSS (CWE-79) Critical (CVSS 4.0) CVEs to check

Search Results (50389 CVEs found)

Export CSV
CVE Vendors Products Updated CVSS v3.1
CVE-2026-81155 2026-10-11 6.8 Medium
The Robo Gallery WordPress plugin before 5.2.6 does not sanitise and escape a gallery setting before outputting it on a frontend page, allowing users with the Author role and above to perform Stored Cross-Site Scripting attacks that execute in the browser of any visitor viewing a gallery, including administrators.
CVE-2026-81154 2026-10-11 6.8 Medium
The Robo Gallery WordPress plugin before 5.2.6 does not sanitise and escape image alt text before outputting it in one of its gallery layouts, allowing users with the Author role and above to perform Stored Cross-Site Scripting attacks that execute in the browser of any user viewing the affected gallery, including administrators.
CVE-2026-81153 2026-10-11 6.8 Medium
The Robo Gallery WordPress plugin before 5.2.6 does not sanitise and escape some of its image settings before outputting them in a gallery page, allowing users with the Author role and above to perform Stored Cross-Site Scripting attacks that execute in the browser of any visitor viewing the gallery, including administrators, even where the unfiltered_html capability is disallowed such as on multisite.
CVE-2026-78534 2026-10-11 7.1 High
Unauthenticated Cross Site Scripting (XSS) in Educavo <= 3.4.2 versions.
CVE-2026-78532 2026-10-11 7.1 High
Unauthenticated Cross Site Scripting (XSS) in LMS <= 8.3 versions.
CVE-2026-62116 2026-10-11 7.1 High
Unauthenticated Cross Site Scripting (XSS) in Barcode Scanner with Inventory & Order Manager <= 1.13.1 versions.
CVE-2026-62100 2026-10-11 7.1 High
Unauthenticated Cross Site Scripting (XSS) in KuteShop <= 4.2.9 versions.
CVE-2026-62095 2026-10-11 7.1 High
Unauthenticated Cross Site Scripting (XSS) in Biolife <= 3.2.3 versions.
CVE-2026-62093 2026-10-11 7.1 High
Unauthenticated Cross Site Scripting (XSS) in TechOne <= 3.0.3 versions.
CVE-2026-62091 2026-10-11 7.1 High
Unauthenticated Cross Site Scripting (XSS) in Armania <= 1.4.8 versions.
CVE-2026-62082 2026-10-11 7.1 High
Unauthenticated Cross Site Scripting (XSS) in Pin WP <= 7.0 versions.
CVE-2026-62064 2026-10-11 7.1 High
Unauthenticated Cross Site Scripting (XSS) in Ambed <= 1.0.0 versions.
CVE-2026-62039 2026-10-11 6.5 Medium
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in bPlugins Html5 Audio Player html5-audio-player allows Stored XSS.This issue affects Html5 Audio Player: from n/a through 2.8.8.
CVE-2026-62037 2026-10-11 7.1 High
Unauthenticated Cross Site Scripting (XSS) in Document Embedder <= 2.4.0 versions.
CVE-2026-62034 2026-10-11 7.1 High
Unauthenticated Cross Site Scripting (XSS) in Before After Image Comparison – Image comparison for WP <= 1.1.21 versions.
CVE-2026-62027 2026-10-11 7.1 High
Unauthenticated Cross Site Scripting (XSS) in Team Section Block <= 2.0.4 versions.
CVE-2026-57806 2026-10-11 7.1 High
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in drfuri Martfury - WooCommerce Marketplace WordPress Theme martfury allows Reflected XSS.This issue affects Martfury - WooCommerce Marketplace WordPress Theme: from n/a through 3.3.9.
CVE-2026-57742 1 Themerex Group 1 Kids Planet 2026-10-11 7.1 High
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in ThemeREX Group Kids Planet allows Reflected XSS. This issue affects Kids Planet: from n/a through 2.2.14.2.
CVE-2026-42715 2026-10-11 7.1 High
Unauthenticated Cross Site Scripting (XSS) in Photo Gallery by 10Web <= 1.8.47 versions.
CVE-2026-42711 2026-10-11 7.1 High
Unauthenticated Cross Site Scripting (XSS) in Slider by 10Web <= 1.2.63 versions.