| CVE-2026-1851 | 6.4 | medium | — | The iVysilani Shortcode plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'width' shortcode | 169d ago |
| CVE-2026-1822 | 6.4 | medium | — | The WP NG Weather plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'ng-weather' s | 169d ago |
| CVE-2026-1806 | 6.4 | medium | — | The Tour & Activity Operator Plugin for TourCMS plugin for WordPress is vulnerable to Stored Cross-Site Scripting v | 169d ago |
| CVE-2026-1575 | 6.4 | medium | — | The Schema Shortcode plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's `itemscope` | 169d ago |
| CVE-2026-1397 | 6.4 | medium | — | The PQ Addons – Creative Elementor Widgets plugin for WordPress is vulnerable to Stored Cross-Site Scripting via wi | 169d ago |
| CVE-2026-1275 | 6.4 | medium | — | The Multi Post Carousel by Category plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'slid | 169d ago |
| CVE-2026-1093 | 6.4 | medium | — | The WPFAQBlock– FAQ & Accordion Plugin For Gutenberg plugin for WordPress is vulnerable to Stored Cross-Site Script | 169d ago |
| CVE-2026-0609 | 6.4 | medium | — | The Logo Slider – Logo Carousel, Logo Showcase & Client Logo Slider Plugin plugin for WordPress is vulnerable to St | 169d ago |
| CVE-2026-32052 | 6.4 | medium | openclaw / openclaw | OpenClaw versions prior to 2026.2.24 contain a command injection vulnerability in the system.run shell-wrapper tha | 169d ago |
| CVE-2026-4083 | 6.4 | medium | — | The Scoreboard for HTML5 Games Lite plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'scor | 169d ago |
| CVE-2026-3516 | 6.4 | medium | — | The Contact List plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the '_cl_map_iframe' paramet | 169d ago |
| CVE-2026-3350 | 6.4 | medium | — | The Image Alt Text Manager plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the post title in | 169d ago |
| CVE-2026-2430 | 6.4 | medium | — | The Autoptimize plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the lazy-loading image proces | 169d ago |
| CVE-2026-2352 | 6.4 | medium | — | The Autoptimize plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'ao_post_preload' meta va | 169d ago |
| CVE-2026-32880 | 6.4 | medium | churchcrm / churchcrm | ChurchCRM is an open-source church management system. | 170d ago |
| CVE-2026-4120 | 6.4 | medium | — | The Info Cards – Add Text and Media in Card Layouts plugin for WordPress is vulnerable to Stored Cross-Site Scripti | 170d ago |
| CVE-2026-4006 | 6.4 | medium | — | The Simple Draft List plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'display_name' post | 170d ago |
| CVE-2026-2512 | 6.4 | medium | — | The Code Embed plugin for WordPress is vulnerable to Stored Cross-Site Scripting via custom field meta values in al | 171d ago |
| CVE-2026-4268 | 6.4 | medium | — | The WP Go Maps (formerly WP Google Maps) plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the | 172d ago |
| CVE-2026-4358 | 6.4 | medium | mongodb / mongodb | A specially crafted aggregation query with $lookup by an authenticated user with write privileges can cause a doubl | 172d ago |
| CVE-2026-32774 | 6.4 | medium | vulnogram / vulnogram | Vulnogram 1.0.0 contains a stored cross-site scripting vulnerability in comment hypertext handling that allows att | 173d ago |
| CVE-2015-20119 | 6.4 | medium | nextclickventures / realtyscript | Next Click Ventures RealtyScript 4.0.2 contains a stored cross-site scripting vulnerability that allows authentica | 173d ago |
| CVE-2026-3986 | 6.4 | medium | — | The Calculated Fields Form plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the form settings | 176d ago |
| CVE-2026-32357 | 6.4 | medium | — | Server-Side Request Forgery (SSRF) vulnerability in Katsushi Kawamori Simple Blog Card simple-blog-card allows Ser | 176d ago |
| CVE-2026-32353 | 6.4 | medium | — | Server-Side Request Forgery (SSRF) vulnerability in MailerPress Team MailerPress mailerpress allows Server Side Re | 176d ago |
| CVE-2026-2257 | 6.4 | medium | — | The GetGenie plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and incl | 176d ago |
| CVE-2025-8766 | 6.4 | medium | redhat / openshift data foundation | A container privilege escalation flaw was found in certain Multi-Cloud Object Gateway Core images. | 176d ago |
| CVE-2025-57849 | 6.4 | medium | redhat / fuse | A container privilege escalation flaw was found in certain Fuse images. | 176d ago |
| CVE-2026-4614 | 6.3 | medium | — | A vulnerability was determined in itsourcecode sanitize or validate this input 1.0. | 166d ago |
| CVE-2026-4597 | 6.3 | medium | — | A security flaw has been discovered in 648540858 wvp-GB28181-pro up to 2.7.4. | 166d ago |
| CVE-2026-4593 | 6.3 | medium | — | A flaw has been found in erupts erupt bis 1.13.3. | 166d ago |
| CVE-2026-4589 | 6.3 | medium | — | A vulnerability was identified in kalcaddle kodbox 1.64. | 166d ago |
| CVE-2026-4586 | 6.3 | medium | — | A vulnerability was found in CodePhiliaX Chat2DB up to 0.3.7. | 166d ago |
| CVE-2026-4574 | 6.3 | medium | — | A vulnerability was detected in SourceCodester Simple E-learning System 1.0. | 166d ago |
| CVE-2026-4573 | 6.3 | medium | — | A security vulnerability has been detected in SourceCodester Simple E-learning System 1.0. | 166d ago |
| CVE-2026-4572 | 6.3 | medium | ahsanriaz26gmailcom / sales and inventory system | A weakness has been identified in SourceCodester Sales and Inventory System 1.0. | 167d ago |
| CVE-2026-4571 | 6.3 | medium | ahsanriaz26gmailcom / sales and inventory system | A security flaw has been discovered in SourceCodester Sales and Inventory System 1.0. | 167d ago |
| CVE-2026-4570 | 6.3 | medium | ahsanriaz26gmailcom / sales and inventory system | A vulnerability was identified in SourceCodester Sales and Inventory System 1.0. | 167d ago |
| CVE-2026-4569 | 6.3 | medium | ahsanriaz26gmailcom / sales and inventory system | A vulnerability was determined in SourceCodester Sales and Inventory System 1.0. | 167d ago |
| CVE-2026-4568 | 6.3 | medium | ahsanriaz26gmailcom / sales and inventory system | A vulnerability was found in SourceCodester Sales and Inventory System 1.0. | 167d ago |
| CVE-2026-4554 | 6.3 | medium | tenda / f453 firmware | A security flaw has been discovered in Tenda F453 1.0.0.3. | 167d ago |
| CVE-2026-4548 | 6.3 | medium | — | A vulnerability was detected in mickasmt next-saas-stripe-starter 1.0.0. | 167d ago |
| CVE-2026-4543 | 6.3 | medium | wavlink / wl-wn578w2 firmware | A vulnerability was found in Wavlink WL-WN578W2 221110. | 167d ago |
| CVE-2026-4533 | 6.3 | medium | carmelo / simple food order system | A vulnerability was detected in code-projects Simple Food Ordering System 1.0. | 168d ago |
| CVE-2026-4516 | 6.3 | medium | deepwisdom / metagpt | A vulnerability was found in Foundation Agents MetaGPT up to 0.8.1. | 168d ago |
| CVE-2026-4515 | 6.3 | medium | deepwisdom / metagpt | A vulnerability has been found in Foundation Agents MetaGPT up to 0.8.1. | 168d ago |
| CVE-2026-4514 | 6.3 | medium | — | A flaw has been found in PbootCMS up to 3.2.12. | 168d ago |
| CVE-2026-4513 | 6.3 | medium | — | A vulnerability was detected in vanna-ai vanna up to 2.0.2. | 168d ago |
| CVE-2026-4511 | 6.3 | medium | — | A security vulnerability has been detected in vanna-ai vanna up to 2.0.2. | 168d ago |
| CVE-2026-4509 | 6.3 | medium | — | A security flaw has been discovered in PbootCMS up to 3.2.12. | 168d ago |
| CVE-2026-4507 | 6.3 | medium | — | A vulnerability was determined in Mindinventory MindSQL up to 0.2.1. | 169d ago |
| CVE-2026-4506 | 6.3 | medium | — | A vulnerability was found in Mindinventory MindSQL up to 0.2.1. | 169d ago |
| CVE-2026-4505 | 6.3 | medium | — | A vulnerability has been found in eosphoros-ai DB-GPT up to 0.7.5. | 169d ago |
| CVE-2026-4500 | 6.3 | medium | — | A vulnerability was identified in bagofwords1 bagofwords up to 0.0.297. | 169d ago |
| CVE-2026-4485 | 6.3 | medium | — | A vulnerability has been found in itsourcecode College Management System 1.0. | 169d ago |
| CVE-2026-0677 | 6.3 | medium | — | Deserialization of Untrusted Data vulnerability in TotalSuite TotalContest Lite totalcontest-lite allows Object Inj | 169d ago |
| CVE-2026-4476 | 6.3 | medium | — | A vulnerability was found in Yi Technology YI Home Camera 2 2.1.1_20171024151200. | 169d ago |
| CVE-2026-4472 | 6.3 | medium | adonesevangelista / online frozen foods ordering system | A security vulnerability has been detected in itsourcecode Online Frozen Foods Ordering System 1.0. | 170d ago |
| CVE-2026-4465 | 6.3 | medium | dlink / dir-513 firmware | A flaw has been found in D-Link DIR-513 1.10. | 170d ago |
| CVE-2026-32010 | 6.3 | medium | openclaw / openclaw | OpenClaw versions prior to 2026.2.22 contain an allowlist bypass vulnerability in the safe-bin configuration when | 170d ago |
