Skip to contentVulnerabilities with public exploits
- lomart up, lomart.fr up plugin for joomla +1 moreJoomla Extension - lomart.fr - Unauthenticated remote code installation in UP plugin extension 5.0.0-5.2.0, 6.0.0-6.0.29CVE-2026-97163Public exploit10.0 Critical
- lomart up, lomart.fr up plugin for joomla +1 moreJoomla Extension - lomart.fr - Authenticated, privileged PHP command injection in UP plugin extension 5.0.0-5.2.0, 6.0.0-6.0.29CVE-2026-97160Public exploit9.4 Critical
- acymailing, acymailing.com acymailing enterprise extension for joomla +1 moreJoomla Extension - acymailing.com - Remote Code Execution vulnerability in mailbox action feature in AcyMailing Enterprise extension < 11.1.0CVE-2026-94132Public exploit9.5 Critical
- joomlaboat youtube gallery, joomlaboat.com youtube gallery extension for joomla +1 moreJoomla Extension - joomlaboat.com - Unauthenticated SQL injection in YouTube Gallery extension < 5.7.3CVE-2026-94130Public exploit9.3 Critical
- getgrav gravGrav before 2.0.25 Session Cookie Theft via Twig SandboxCVE-2026-100671Public exploit8.6 High
- siyuan-note siyuanSiYuan 3.8.0 through 3.8.3 Path Traversal via MCP File OperationsCVE-2026-100633Public exploit8.5 High
- addify request a quote for woocommerceRequest a Quote for WooCommerce <= 2.9.2 - Unauthenticated Arbitrary File Upload via AJAX Popup HandlerCVE-2026-18143Public exploit9.8 Critical
- crivion laranodeLaranode before 1.2.1 Path Traversal in File Manager Upload EndpointCVE-2026-100520Public exploit8.7 High
- wikimedia foundation mediawiki - externaldata extensionUnauthenticated remote code execution through wikitext in ExternalDataCVE-2026-100382Public exploit10.0 Critical
- wikimedia foundation mediawiki - uploadwizard extensionUploadWizard Flickr collection and set titles allow DOM XSSCVE-2026-100381Public exploit5.3 Medium
- the wikimedia foundation mediawiki - wikibase extensionReflected XSS in Wikibase Special:SetLabel language validationCVE-2026-100380Public exploit5.3 Medium
- the wikimedia foundation mediawiki - cargo extensionCargo Exhibit field alias allows stored XSSCVE-2026-96878Public exploit6.9 Medium
- the wikimedia foundation mediawiki - cargo extensionReflected XSS through Cargo Drilldown full-text searchCVE-2026-96877Public exploit6.9 Medium
- the wikimedia foundation mediawiki - cargo extensionAnonymous reflected XSS in CargoExport invalid-alias errorsCVE-2026-96876Public exploit6.9 Medium
- the wikimedia foundation mediawiki - cargo extensionReflected XSS in Cargo Drilldown hierarchy filtersCVE-2026-96875Public exploit6.9 Medium
- glpi-project glpiGLPI: SQL injection in history tabCVE-2026-53629Public exploit7.1 High
- glpi-project glpiGLPI: Privilege Escalation via authtype API manipulationCVE-2026-53625Public exploit7.5 High
- piwigoPiwigo: Authenticated RCE via File Upload in Logo Upload FeatureCVE-2026-42322Public exploit9.1 Critical
- the wikimedia foundation mediawiki - cargo extensionStored XSS in Cargo Drilldown tab namesCVE-2026-96874Public exploit2.3 Low
- red hat enterprise linux 10, enterprise linux 6, enterprise linux 7 +6 more +8 moreQemu-kvm: 9pfs: use-after-free race in tlcreate/twalk allows vm guest escapeCVE-2026-93834Public exploitFix available8.8 High
- linuxmm/slab: take n->list_lock in __slab_try_return_freelist() to avoid raceCVE-2026-97941Public exploitFix available7.8 High
- linuxsmb: client: fix heap overflow in DACL owner/group rewriteCVE-2026-97555Public exploitFix available8.8 High
- smub wpforms – ai form builder for wordpress – contact forms, payment forms, survey form, quiz & moreWPForms <= 2.0.2 - Reflected Cross-Site Scripting via 'page_title' POST ParameterCVE-2026-88996Public exploit6.1 Medium
- 101gen automation web platform – notifications and otp for woocommerce, advanced country codeAutomation Web Platform <= 4.8.6 - Unauthenticated Privilege Escalation via 'wawp_custom_fields' ParameterCVE-2026-14281Public exploit9.8 Critical
- ladela online scheduling and appointment booking system – booklyOnline Scheduling and Appointment Booking System <= 28.2 - Insecure Direct Object Reference to Unauthenticated Arbitrary Booking Token Disclosure and Deletion via 'order_id' ParameterCVE-2026-93399Public exploit9.1 Critical
- ivole customer reviews for woocommerceCustomer Reviews for WooCommerce <= 5.120.0 - Missing Authorization to Unauthenticated Arbitrary Attachment Deletion via 'items[][media]' ParameterCVE-2026-89055Public exploit9.1 Critical
- elementor website builderWordPress Elementor Website Builder plugin <= 4.3.1 - Cross Site Request Forgery (CSRF) vulnerabilityCVE-2026-62062Public exploit8.8 High
glance UbuntuA Server-Side Request Forgery (SSRF) vulnerability exists in the Image API (v2) of OpenStack...CVE-2026-51772Public exploit6.5 Medium- honeywell pd45 industrial printerUnauthenticated RCE Arbitrary File Upload Honeywell PD45 Industrial Printer version F10.19.010040CVE-2026-13249Public exploit9.8 Critical
- bittersecurity decepticon, decepticon-core, decepticon-sdk +2 moreDecepticon: Role-boundary forgery via ChatML special-token literals in web crawl output composed into LLM contextCVE-2026-61732Public exploitFix available10.0 Critical
- goauthentik authentikauthentik: Privilege Escalation to Superuser via Group HierarchyCVE-2026-94609Public exploitFix available8.8 High
- the wikimedia foundation mediawiki - cirrussearch extensionReflected XSS in CirrusSearch debug explain outputCVE-2026-96873Public exploit5.5 Medium
- araxis mergeAraxis Merge insufficiently protected credentialsCVE-2026-92680Public exploit6.8 Medium
- netlink ict pvt ltd ict hg323rw routerCommand Injection Vulnerability in Netlink ICT HG323RW RouterCVE-2026-96515Public exploitDisputed8.6 High
- visual composer website builder, visualcomposer visual composer website builder +1 moreVisual Composer Website Builder <= 45.16.0 - Unauthenticated Local File Inclusion via 'vcv-template' ParameterCVE-2026-12227Public exploit9.8 Critical
- pixelite events managerEvents Manager < 7.4.5 - Contributor+ Arbitrary Ticket Overwrite via IDORCVE-2026-93661Public exploit2.7 Low
- No product listedmcp-remote versions 0.1.32 through 0.1.38 are vulnerable to Server-Side Request Forgery (SSRF)...CVE-2026-51994Public exploit9.1 Critical
- carazo import and export users and customersImport and export users and customers <= 2.4.17 - Authenticated (Subscriber+) Privilege Escalation via CSV Escape-Character Mismatch in Export/Import Round Trip via display_name and nickname Profile F…CVE-2026-86583Public exploit8.8 High
- lynn999 ethpress – web3 loginEthPress <= 2.3.5 - Unauthenticated Authentication BypassCVE-2026-19125Public exploit8.1 High
- the wikimedia foundation mediawiki - wikilambda extensionWikiLambda public function execution bypasses the unsaved-code permission through nested Z825 compositionsCVE-2026-96872Public exploit2.9 Low
- frictionlessdata frictionless-pyFrictionless OS Command Injection via explore Console CommandCVE-2026-93349Public exploit8.6 High
- plex media serverPlex Media Server arbitrary file writeCVE-2026-96656In KEVPublic exploitEPSS 19.8%8.6 High
- plex media serverPlex Media Server SSRFCVE-2026-96652In KEVPublic exploitEPSS 11.9%5.3 Medium
- solspace craft-freeformSolspace Freeform: Limited Twig template injection via submitted field valuesCVE-2026-73858Public exploitFix available5.3 Medium
- red hat enterprise linux 10, enterprise linux 10.0 extended update support, enterprise linux 7 extended lifecycle support +15 more +17 moreSudo: sudo: tz environment variable allows bypass of notbefore/notafter time-based authorizationCVE-2026-96512Public exploitFix available7.8 High
- red hat enterprise linux 10, enterprise linux 10.0 extended update support, enterprise linux 6 +17 more +19 moreLibrsvg: use-after-free when xml includes have duplicated entitiesCVE-2026-96889Public exploitFix available7.8 High
- abis technology ltd. co. avesisUnauthenticated Open Redirect Vulnerability in Abis Technology's AVESİSCVE-2026-80444Public exploit5.4 Medium
- gplsaver np quote request for woocommerceNP Quote Request for WooCommerce < 2.4.16 - Unauthenticated Order Data Disclosure via Quote Request PageCVE-2026-93528Public exploit3.7 Low
- js morisset jsm show post metadataJSM Show Post Metadata < 4.9.1 - Contributor+ Stored XSS via Custom Field Meta KeyCVE-2026-88997Public exploit6.8 Medium
- apache http server project lounge windowsCVE-2026-89282CVE-2026-89282Public exploit9.1 Critical
- Show moreLoading…