Use CVSS, EPSS, CISA KEV, affected-version data, and source evidence as separate signals for prioritization.
NVD data is used under its public data terms. This service is not endorsed or certified by NVD.CVE-2026-40775 affects Royal Plugins Royal MCP. Review the CVSS score, exploitation signals, affected versions, remediation status, and linked source material before making a change.
The CVSS severity warrants an early asset and exposure review.CVE-2026-40774 affects SaasProject Booking Package. Review the CVSS score, exploitation signals, affected versions, remediation status, and linked source material before making a change.
The CVSS severity warrants an early asset and exposure review.CVE-2026-40772 affects Ahmad GeekyBot. Review the CVSS score, exploitation signals, affected versions, remediation status, and linked source material before making a change.
The CVSS severity warrants an early asset and exposure review.CVE-2026-40771 affects Wasiliy Strecker Contest Gallery. Review the CVSS score, exploitation signals, affected versions, remediation status, and linked source material before making a change.
The CVSS severity warrants an early asset and exposure review.CVE-2026-40770 affects RelyWP Coupon Affiliates. Review the CVSS score, exploitation signals, affected versions, remediation status, and linked source material before making a change.
The CVSS severity warrants an early asset and exposure review.Unauthenticated Arbitrary File Deletion in Contact Form Extender for Divi – Save Entries, File Upload & Country Code Field <= 1.0.6 versions.
The CVSS severity warrants an early asset and exposure review.CVE-2026-40767 affects Tomdever wpForo Forum. Review the CVSS score, exploitation signals, affected versions, remediation status, and linked source material before making a change.
The CVSS severity warrants an early asset and exposure review.CVE-2026-40766 affects StylemixThemes MasterStudy LMS. Review the CVSS score, exploitation signals, affected versions, remediation status, and linked source material before making a change.
The CVSS severity warrants an early asset and exposure review.CVE-2026-40762 affects WPGraphQL. Review the CVSS score, exploitation signals, affected versions, remediation status, and linked source material before making a change.
The CVSS severity warrants an early asset and exposure review.Unauthenticated Broken Access Control in Redsys for WooCommerce Light <= 7.0.0 versions.
The CVSS severity warrants an early asset and exposure review.Unauthenticated Cross Site Scripting (XSS) in Notification for Telegram <= 3.5 versions.
The CVSS severity warrants an early asset and exposure review.CVE-2026-40727 affects Groundhogg. Review the CVSS score, exploitation signals, affected versions, remediation status, and linked source material before making a change.
The CVSS severity warrants an early asset and exposure review.CVE-2026-39591 affects CMSJunkie – WordPress Business Directory Plugins WP-BusinessDirectory. Review the CVSS score, exploitation signals, affected versions, remediation status, and linked source material before making a change.
The CVSS severity warrants an early asset and exposure review.CVE-2026-39587 affects Hakan Ozevin WP BASE Booking. Review the CVSS score, exploitation signals, affected versions, remediation status, and linked source material before making a change.
The CVSS severity warrants an early asset and exposure review.CVE-2026-39583 affects Datalogics Datalogics Ecommerce Delivery. Review the CVSS score, exploitation signals, affected versions, remediation status, and linked source material before making a change.
The CVSS severity warrants an early asset and exposure review.