01 Search console
The CVE corpus, on scope in milliseconds.
393,934 records · updated every 15 minutes
02 Telemetry
Total CVEs393,934
New today48
Known-exploited (KEV)1,711
Sync lag32 MIN
03 Severity mix
04 Latest published
CVE IDCVSSSeverityKEVSummaryVendor / ProductPublished
CVE-2026-91019—Unrated—Event Booking Manager for WooCommerce < 5.6.0 - Contributor+ Payment Gateway Credential Disclosureunknown event booking manager for woocommerce35 MIN AGO
CVE-2026-91016—Unrated—Motors < 1.4.121 - Unauthenticated Draft/Private Listing Disclosureunknown motors35 MIN AGO
CVE-2026-91015—Unrated—Master Addons for Elementor < 3.1.9 - Unauthenticated Popup Deactivation via jltma_popup_disable_expiredunknown master addons for elementor35 MIN AGO
CVE-2026-91014—Unrated—Realtyna Organic IDX plugin + WPL Real Estate < 5.4.2 - Reflected XSS via Location Selector Endpointunknown realtyna organic idx plugin + wpl real estate35 MIN AGO
CVE-2026-91011—Unrated—EWWW Image Optimizer < 8.7.7 - Author+ Stored XSS via Image Class Attribute Backreference Expansionunknown ewww image optimizer35 MIN AGO
CVE-2026-91010—Unrated—Invisible Anti-Spam & CAPTCHA < 5.1.1 - Subscriber+ Arbitrary Form Submission Deletionunknown invisible anti-spam & captcha — recaptcha alternative for all forms35 MIN AGO
CVE-2026-91009—Unrated—Active Products Tables for WooCommerce < 2.1.3 - Subscriber+ Arbitrary Post Title Modification via woot_update_attachmentunknown active woot products tables for woocommerce. 100% free35 MIN AGO
CVE-2026-91008—Unrated—Event Booking Manager for WooCommerce < 5.3.8 - Unauthenticated Attendee PII Disclosure via Booking Confirmation Panelunknown event booking manager for woocommerce35 MIN AGO
CVE-2026-90923—Unrated—Autopay < 5.0.1 - Unauthenticated Cross-Customer Order Payment Parameter Disclosure and Deletionunknown autopay35 MIN AGO
CVE-2026-90922—Unrated—Paid Member Subscriptions < 3.0.9 - Unauthenticated Membership Payment Bypass via PayPal Standard Amount and Currency Mismatchunknown paid membership subscriptions35 MIN AGO
CVE-2026-88904—Unrated—PuppyFW <= 0.4.4 - Subscriber+ Arbitrary Blog Options Update and Deletion Leading to Privilege Escalationunknown puppyfw35 MIN AGO
CVE-2026-88795—Unrated—wpShopGermany IT-RECHT KANZLEI < 2.4 - Unauthenticated RCE via Predictable API Tokenunknown wpshopgermany it-recht kanzlei35 MIN AGO
CVE-2026-88792—Unrated—Dictionary <= 1.0 - Unauthenticated Stored XSS via Direct Dictionary Updateunknown dictionary35 MIN AGO
CVE-2026-87836—Unrated—Comments Import & Export 2.1.11 - 2.5.3 - Author+ Comment PII Disclosure via Exportunknown comments import & export35 MIN AGO
CVE-2026-87786—Unrated—Dewa Kirim <= 1.0.0 - Unauthenticated Stored XSS via Checkout Coordinatesunknown dewa kirim35 MIN AGO