VULNERABILITY INTELLIGENCE

CVE index

Use CVSS, EPSS, CISA KEV, affected-version data, and source evidence as separate signals for prioritization.

NVD data is used under its public data terms. This service is not endorsed or certified by NVD.

19,982 CVE recordsPage 534 of 1333 · EPSS data 2026.07.20

ReviewHigh

WordPress.com Quick Interest Slider

Unauthenticated Cross Site Scripting (XSS) in Quick Interest Slider <= 3.1.6 versions.

The CVSS severity warrants an early asset and exposure review.

ReviewHigh

Frisbii Frisbii Pay

CVE-2026-56038 affects Frisbii Frisbii Pay. Review the CVSS score, exploitation signals, affected versions, remediation status, and linked source material before making a change.

The CVSS severity warrants an early asset and exposure review.

ReviewCritical

codemstory

CVE-2026-56036 affects codemstory. Review the CVSS score, exploitation signals, affected versions, remediation status, and linked source material before making a change.

The CVSS severity warrants an early asset and exposure review.

ReviewHigh

Cory Marsh BitFire Security

CVE-2026-56035 affects Cory Marsh BitFire Security. Review the CVSS score, exploitation signals, affected versions, remediation status, and linked source material before making a change.

The CVSS severity warrants an early asset and exposure review.

ReviewCritical

Online Web Tutor Library Management System

CVE-2026-56034 affects Online Web Tutor Library Management System. Review the CVSS score, exploitation signals, affected versions, remediation status, and linked source material before making a change.

The CVSS severity warrants an early asset and exposure review.

ReviewCritical

Dokan Multivendor Plugin Dokan Pro

CVE-2026-56033 affects Dokan Multivendor Plugin Dokan Pro. Review the CVSS score, exploitation signals, affected versions, remediation status, and linked source material before making a change.

The CVSS severity warrants an early asset and exposure review.

ReviewCritical

BuddyBoss Buddyboss Platform

CVE-2026-56032 affects BuddyBoss Buddyboss Platform. Review the CVSS score, exploitation signals, affected versions, remediation status, and linked source material before making a change.

The CVSS severity warrants an early asset and exposure review.

ReviewHigh

Uncanny Owl Uncanny Automator

CVE-2026-56031 affects Uncanny Owl Uncanny Automator. Review the CVSS score, exploitation signals, affected versions, remediation status, and linked source material before making a change.

The CVSS severity warrants an early asset and exposure review.

ReviewCritical

paytiumsupport Paytium

CVE-2026-56030 affects paytiumsupport Paytium. Review the CVSS score, exploitation signals, affected versions, remediation status, and linked source material before making a change.

The CVSS severity warrants an early asset and exposure review.

ReviewHigh

corvuspay CorvusPay WooCommerce Payment Gateway

CVE-2026-56029 affects corvuspay CorvusPay WooCommerce Payment Gateway. Review the CVSS score, exploitation signals, affected versions, remediation status, and linked source material before making a change.

The CVSS severity warrants an early asset and exposure review.

ReviewCritical

themewant Easy Elements for Elementor – Addons & Website Templates

Unauthenticated Privilege Escalation in Easy Elements for Elementor – Addons & Website Templates <= 1.4.9 versions.

The CVSS severity warrants an early asset and exposure review.

ReviewCritical

Pluggabl Booster for WooCommerce

CVE-2026-56027 affects Pluggabl Booster for WooCommerce. Review the CVSS score, exploitation signals, affected versions, remediation status, and linked source material before making a change.

The CVSS severity warrants an early asset and exposure review.

ReviewHigh

Paymob Paymob for WooCommerce

CVE-2026-56025 affects Paymob Paymob for WooCommerce. Review the CVSS score, exploitation signals, affected versions, remediation status, and linked source material before making a change.

The CVSS severity warrants an early asset and exposure review.

ReviewHigh

chrisvrichardson MapPress Maps for WordPress

Unauthenticated Cross Site Scripting (XSS) in MapPress Maps for WordPress <= 2.97.3 versions.

The CVSS severity warrants an early asset and exposure review.

ReviewHigh

Tyche Softwares. Abandoned Cart Pro for WooCommerce

Subscriber Privilege Escalation in Abandoned Cart Pro for WooCommerce <= 10.4.0 versions.

The CVSS severity warrants an early asset and exposure review.