CVE Find is a real-time vulnerability database indexing 393 885 security flaws (CVE) from MITRE, NVD, CISA KEV, CWE and CAPEC. 4403 new CVEs were published in the last 7 days.
Data aggregated from: MITRE Corporation (CVE, CWE, CAPEC), National Vulnerability Database – NIST (NVD), CISA Known Exploited Vulnerabilities (KEV), FIRST (EPSS).
| CVE ID | Published | Description | Score | Severity | |
|---|---|---|---|---|---|
CVE-2026-87963 |
2026-09-17 07h16 +00:00 |
The Yo WordPress plugin from 1.1 through 1.3.1 does not sanitize or parameterize the username reques... |
8.6 |
High |
|
CVE-2026-86801 |
2026-09-17 07h16 +00:00 |
The To Do List Member WordPress plugin from 1.4 through 1.6 ships a file upload endpoint that does n... |
8.8 |
High |
|
CVE-2026-87796 |
2026-09-17 05h17 +00:00 |
The Multi Uploader for Gravity Forms plugin for WordPress is vulnerable to Arbitrary File Upload in ... File Inclusion |
9.8 |
Critical |
|
CVE-2026-25283 |
2026-09-17 05h17 +00:00 |
Memory Corruption when copying unverified data from an external source exceeds the allocated buffer ... |
8.8 |
High |
|
CVE-2026-92593 |
2026-09-16 22h18 +00:00 |
Craft CMS versions 5.10.0 through 5.10.12 contain an incomplete fix for CVE-2026-55794: the Controll... Code Injection |
8.8 |
High |
|
CVE-2026-92592 |
2026-09-16 22h18 +00:00 |
Craft CMS 4.8.0 through 4.18.5 and 5.0.0 through 5.10.12 sign an authenticated user's attacker-contr... |
8.8 |
High |
|
CVE-2026-92580 |
2026-09-16 22h18 +00:00 |
In AVideo through 29.0, the CloneSite plugin is vulnerable to stored OS command injection. In plugin... OS Command Injection |
8.8 |
High |
|
CVE-2026-92576 |
2026-09-16 22h18 +00:00 |
HKUDS nanobot before 0.3.0 contains a server-side request forgery vulnerability in the WebFetchTool ... Server-Side Request Forgery - SSRF |
8.6 |
High |
|
CVE-2026-61594 |
2026-09-16 22h17 +00:00 |
djust provides Phoenix LiveView-style reactive server-side rendering for Django with Rust-powered pe... Authorization problems |
9.1 |
Critical |
|
CVE-2026-61599 |
2026-09-16 22h11 +00:00 |
djust provides Phoenix LiveView-style reactive server-side rendering for Django with Rust-powered pe... |
8.8 |
High |