103,766 indexed
CVECVE vulnerabilities
103,766 CVEs indexed — newest first. Filter by CVSS severity or CISA KEV listing; KEV-flagged entries surface a rose pill. Authored by Adam Lundqvist.
Showing 9,251–9,300 of 103,766 · page 186 of 2076
| ID | Title | Summary |
|---|---|---|
| CVE-2026-84780 | CVE-2026-84780 CVSS 5.3 | Unauthenticated Denial of Service Attack in WP Go Maps <= 10.1.08 versions. |
| CVE-2026-8478 | CVE-2026-8478 CVSS 8.8langflow | IBM Langflow OSS 1.0.0 through 1.10.3 could allow a remote attacker to inject arbitrary code on the system, due to the improper control of user input code. |
| CVE-2026-84779 | CVE-2026-84779 CVSS 8.1 | Subscriber Broken Access Control in Agentimus – AI SEO, llms.txt & MCP for AI Agents <= 1.51.0 versions. |
| CVE-2026-84778 | CVE-2026-84778 CVSS 7.5 | Unauthenticated Denial of Service Attack in Migrate Guru – Site Migration & Cloning <= 6.65 versions. |
| CVE-2026-84777 | CVE-2026-84777 CVSS 7.4 | Unauthenticated Broken Authentication in Really Simple SSL <= 9.8.0 versions. |
| CVE-2026-84776 | CVE-2026-84776 CVSS 7.5 | Unauthenticated Denial of Service Attack in MalCare Security <= 6.69 versions. |
| CVE-2026-84775 | CVE-2026-84775 CVSS 5.3 | Unauthenticated Denial of Service Attack in Really Simple SSL <= 9.8.0 versions. |
| CVE-2026-84774 | CVE-2026-84774 CVSS 6.1 | Unauthenticated Cross Site Scripting (XSS) in WP Statistics <= 14.16.11 versions. |
| CVE-2026-84773 | CVE-2026-84773 CVSS 7.2 | Unauthenticated Cross Site Scripting (XSS) in EWWW Image Optimizer <= 8.7.6 versions. |
| CVE-2026-84772 | CVE-2026-84772 CVSS 5.5 | Editor Server Side Request Forgery (SSRF) in Broken Link Checker <= 2.4.14 versions. |
| CVE-2026-84771 | CVE-2026-84771 CVSS 5.3 | Unauthenticated Insecure Direct Object References (IDOR) in PublishPress Permissions <= 4.8.3 versions. |
| CVE-2026-84770 | CVE-2026-84770 CVSS 8.8 | Unauthenticated Cross Site Request Forgery (CSRF) in Mang Board WP <= 2.3.8 versions. |
| CVE-2026-8477 | CVE-2026-8477 CVSS 2.7devolutions | Improper enforcement of the sealed-entry workflow in the entry sensitive-data retrieval feature in Devolutions Server allows an authenticated user with access … |
| CVE-2026-84769 | CVE-2026-84769 CVSS 6.5 | Unauthenticated Insecure Direct Object References (IDOR) in Business Directory <= 6.4.26 versions. |
| CVE-2026-84768 | CVE-2026-84768 CVSS 9.3 | Unauthenticated SQL Injection in VikAppointments Services Booking Calendar <= 1.2.20 versions. |
| CVE-2026-84767 | CVE-2026-84767 CVSS 5.3 | Unauthenticated Bypass Vulnerability in BookIt <= 2.6.0.3 versions. |
| CVE-2026-84766 | CVE-2026-84766 CVSS 5.9 | Unauthenticated Bypass Vulnerability in FluentBooking Pro <= 2.2.1 versions. |
| CVE-2026-84765 | CVE-2026-84765 CVSS 7.1 | Unauthenticated Cross Site Scripting (XSS) in Breadcrumb NavXT <= 7.5.1 versions. |
| CVE-2026-84764 | CVE-2026-84764 CVSS 8.8 | Unauthenticated Cross Site Request Forgery (CSRF) in Simply Schedule Appointments <= 1.6.12.23 versions. |
| CVE-2026-84763 | CVE-2026-84763 CVSS 7.1 | Unauthenticated Cross Site Scripting (XSS) in RTMKit <= 2.1.5 versions. |
| CVE-2026-84762 | CVE-2026-84762 CVSS 5.3 | Unauthenticated Bypass Vulnerability in WP EasyPay <= 4.5.3 versions. |
| CVE-2026-84761 | CVE-2026-84761 CVSS 7.2 | Unauthenticated Server Side Request Forgery (SSRF) in LiteSpeed Cache <= 7.9 versions. |
| CVE-2026-84760 | CVE-2026-84760 CVSS 5.3 | Unauthenticated Broken Access Control in Ultimate Gift Cards For WooCommerce <= 3.2.9 versions. |
| CVE-2026-8476 | CVE-2026-8476 CVSS 9.9langflow | IBM Langflow OSS 1.0.0 through 1.10.0 contain a critical remote code execution vulnerability in the disk-based caching mechanism. The AsyncDiskCache class uses… |
| CVE-2026-84759 | CVE-2026-84759 CVSS 7.1 | Unauthenticated Cross Site Request Forgery (CSRF) in Activity Log <= 2.13.1 versions. |
| CVE-2026-84758 | CVE-2026-84758 CVSS 6.5 | Unauthenticated Broken Access Control in Business Directory <= 6.4.26 versions. |
| CVE-2026-84757 | CVE-2026-84757 CVSS 8.2 | Unauthenticated Settings Change in WP Compress <= 7.21.28 versions. |
| CVE-2026-84756 | CVE-2026-84756 CVSS 7.1 | Subscriber Privilege Escalation in WCFM Membership <= 2.11.11 versions. |
| CVE-2026-84755 | CVE-2026-84755 CVSS 6.5 | Unauthenticated Broken Access Control in Mail Mint <= 1.31.0 versions. |
| CVE-2026-84754 | CVE-2026-84754 CVSS 6.5 | Unauthenticated Broken Access Control in WPFunnels <= 3.12.13 versions. |
| CVE-2026-84753 | CVE-2026-84753 CVSS 9.8 | Unauthenticated PHP Object Injection in Mail Mint <= 1.31.0 versions. |
| CVE-2026-84752 | CVE-2026-84752 CVSS 8.8 | Contributor PHP Object Injection in RTMKit <= 2.1.5 versions. |
| CVE-2026-84750 | CVE-2026-84750 CVSS 6.5 | The Ultra Addons for Contact Form 7 WordPress plugin before 3.5.51 does not validate the type or extension of files uploaded through one of its form fields, an… |
| CVE-2026-84745 | CVE-2026-84745 CVSS 2.7 | The Events Calendar WordPress plugin before 6.17.3.1 does not restrict non-public content to the users entitled to read it on its public REST archives, allowin… |
| CVE-2026-84744 | CVE-2026-84744 CVSS 6.5 | The WPForms Lite WordPress plugin from 1.5.0.1 to 2.0.2 does not remove shortcode delimiters from submitted field values before writing them back into the rend… |
| CVE-2026-84743 | CVE-2026-84743 CVSS 3.8 | The Events Calendar WordPress plugin before 6.17.5 does not perform a per-object capability check on one family of its REST write routes, allowing users with a… |
| CVE-2026-84742 | CVE-2026-84742 CVSS 2.7 | The Events Calendar WordPress plugin before 6.17.5 does not check the capability required to publish content before creating or updating it through its REST AP… |
| CVE-2026-84741 | CVE-2026-84741 CVSS 5.3 | The Events Calendar WordPress plugin before 6.17.5 does not check the post status of linked records before embedding their stored details into a public REST AP… |
| CVE-2026-84740 | CVE-2026-84740 CVSS 6.5 | The Events Calendar WordPress plugin before 6.17.5.1 does not validate or sanitise data submitted to an unauthenticated AJAX action before merging it into its … |
| CVE-2026-8474 | CVE-2026-8474 CVSS 5.3 | A vulnerability was discovered on Stormshield Network Security * 4.3.0 to 4.3.41, * 4.8.0 to 4.8.15, * 5.0.0 to 5.0.5 It is possible t… |
| CVE-2026-84739 | CVE-2026-84739 CVSS 8.7gitlab | GitLab has remediated an issue in GitLab CE/EE affecting all versions from 13.11 before 19.2.7, 19.3 before 19.3.3, and 19.4 before 19.4.1 that under certain c… |
| CVE-2026-84738 | CVE-2026-84738 CVSS 9.1 | The AF Companion WordPress plugin before 2.2.0 does not validate the type of files uploaded through one of its import features, allowing users with a low-priv… |
| CVE-2026-84737 | CVE-2026-84737 CVSS 9.8 | The Freeton WP WordPress plugin through 1.0.0 does not correctly validate the activation code when authenticating a user, allowing unauthenticated attackers to… |
| CVE-2026-84736 | CVE-2026-84736 | In the current development version of Eclipse aeriOS, for which no official release has yet been published, the Federator component disables TLS certificate va… |
| CVE-2026-84734 | CVE-2026-84734 CVSS 9.8 | The Mindstien Quick Login WordPress plugin through 1.0 does not correctly validate a value supplied in the request against the visitor's own session before aut… |
| CVE-2026-84732 | CVE-2026-84732 | Retransmissions of ACK packet ID in OpenVPN through 2.6.22 and 2.7.6 allow remote unauthenticated attackers to cause a denial of service via crafted inputs tha… |
| CVE-2026-84731 | CVE-2026-84731 CVSS 9.8 | An unauthenticated remote attacker can bypass authentication and gain full access to administrative API endpoints in Nutanix Prism Element by including a craft… |
| CVE-2026-84724 | CVE-2026-84724 CVSS 6.6 | An argument-injection flaw was found in the Ansible Automation Platform automation-controller system-job subsystem. The system-job template launch endpoint sto… |
| CVE-2026-84721 | CVE-2026-84721 CVSS 6.4 | A server-side request forgery flaw was found in the Ansible Automation Platform automation-controller email notification backend. The email backend passes the … |
| CVE-2026-84720 | CVE-2026-84720 CVSS 6.5 | A flaw was found in the Ansible Automation Platform automation-controller. The WorkflowJobNode.ancestor_artifacts database column, which stores the raw merged … |