VULNERABILITY INTELLIGENCE

CVE index

Use CVSS, EPSS, CISA KEV, affected-version data, and source evidence as separate signals for prioritization.

NVD data is used under its public data terms. This service is not endorsed or certified by NVD.

19,695 CVE recordsPage 465 of 1313 · EPSS data 2026.08.12

ReviewHigh

Search Atlas Group Search Atlas SEO

Unauthenticated Cross Site Scripting (XSS) in Search Atlas SEO <= 2.6.6 versions.

The CVSS severity warrants an early asset and exposure review.

ReviewHigh

Moreconvert Team MC Woocommerce Wishlist

Unauthenticated Cross Site Scripting (XSS) in MC Woocommerce Wishlist <= 1.9.19 versions.

The CVSS severity warrants an early asset and exposure review.

ReviewHigh

Haktan Suren HandL UTM Grabber

Unauthenticated Cross Site Scripting (XSS) in HandL UTM Grabber <= 2.9.2 versions.

The CVSS severity warrants an early asset and exposure review.

ReviewHigh

Andy Fragen WP Debugging

CVE-2026-57350 affects Andy Fragen WP Debugging. Review the CVSS score, exploitation signals, affected versions, remediation status, and linked source material before making a change.

The CVSS severity warrants an early asset and exposure review.

ReviewHigh

etruel WPeMatico RSS Feed Fetcher

Unauthenticated Cross Site Scripting (XSS) in WPeMatico RSS Feed Fetcher <= 2.8.17 versions.

The CVSS severity warrants an early asset and exposure review.

ReviewHigh

Cozmoslabs Paid Member Subscriptions

Unauthenticated Server Side Request Forgery (SSRF) in Paid Member Subscriptions <= 3.0.4 versions.

The CVSS severity warrants an early asset and exposure review.

ReviewHigh

Webraketen Internal Links Manager

Unauthenticated Cross Site Scripting (XSS) in Internal Links Manager <= 3.0.3 versions.

The CVSS severity warrants an early asset and exposure review.

ReviewHigh

RadiusTheme Classified Listing

CVE-2026-57344 affects RadiusTheme Classified Listing. Review the CVSS score, exploitation signals, affected versions, remediation status, and linked source material before making a change.

The CVSS severity warrants an early asset and exposure review.

ReviewHigh

Contempoinc Real Estate 7

Unauthenticated Cross Site Scripting (XSS) in Real Estate 7 <= 3.5.9 versions.

The CVSS severity warrants an early asset and exposure review.

ReviewHigh

Themify Themify Popup

Deserialization of Untrusted Data vulnerability in Themify Themify Popup allows Object Injection. This issue affects Themify Popup: from n/a through 1.4.3.

The CVSS severity warrants an early asset and exposure review.

ReviewHigh

Elated-Themes Audrey

CVE-2026-42382 affects Elated-Themes Audrey. Review the CVSS score, exploitation signals, affected versions, remediation status, and linked source material before making a change.

The CVSS severity warrants an early asset and exposure review.

ReviewHigh

CoderPress NOWPayments for WooCommerce

CVE-2026-39448 affects CoderPress NOWPayments for WooCommerce. Review the CVSS score, exploitation signals, affected versions, remediation status, and linked source material before making a change.

The CVSS severity warrants an early asset and exposure review.

ReviewCritical

Rustaurius Five Star Business Profile and Schema

Editor Arbitrary Code Execution in Five Star Business Profile and Schema <= 2.3.19 versions.

The CVSS severity warrants an early asset and exposure review.

ReviewHigh

tranmautritam TheFox

CVE-2026-27430 affects tranmautritam TheFox. Review the CVSS score, exploitation signals, affected versions, remediation status, and linked source material before making a change.

The CVSS severity warrants an early asset and exposure review.

ReviewHigh

Themesuite Automotive Car Dealership Business

Unauthenticated Cross Site Scripting (XSS) in Automotive Car Dealership Business <= 13.3.3 versions.

The CVSS severity warrants an early asset and exposure review.