01 Search console
The CVE corpus, on scope in milliseconds.
393,940 records · updated every 15 minutes
02 Telemetry
Total CVEs393,940
New today54
Known-exploited (KEV)1,711
Sync lag15 MIN
03 Severity mix
04 Latest published
CVE IDCVSSSeverityKEVSummaryVendor / ProductPublished
CVE-2026-863207.8High—Flatpak-builder: host code execution via `git am` hook execution in patch source extraction (`use-git-am`)red hat red hat enterprise linux 1018 MIN AGO
CVE-2026-910173.7Low—Robokassa payment gateway for Woocommerce < 1.8.9 - Unauthenticated Payment Bypass via Forged JWT Callbackunknown robokassa payment gateway for woocommerce40 MIN AGO
CVE-2026-879638.6High—Yo 1.1 - 1.3.1 - Unauthenticated SQL Injection via username Parameterunknown yo40 MIN AGO
CVE-2026-868018.8High—To Do List Member 1.4 - 1.6 - Unauthenticated Stored XSS, File Listing and Deletion via Unprotected Upload Handlerunknown to do list member40 MIN AGO
CVE-2026-909825.3Medium—@fastify/static vulnerable to route guard bypass via path case-folding@fastify/static @fastify/static50 MIN AGO
CVE-2026-449405.7Medium—Service token exposure and potential privilege escalation in SUSE Observabilitysuse suse observability1 HR AGO
CVE-2026-91019—Unrated—Event Booking Manager for WooCommerce < 5.6.0 - Contributor+ Payment Gateway Credential Disclosureunknown event booking manager for woocommerce1 HR AGO
CVE-2026-91016—Unrated—Motors < 1.4.121 - Unauthenticated Draft/Private Listing Disclosureunknown motors1 HR AGO
CVE-2026-91015—Unrated—Master Addons for Elementor < 3.1.9 - Unauthenticated Popup Deactivation via jltma_popup_disable_expiredunknown master addons for elementor1 HR AGO
CVE-2026-91014—Unrated—Realtyna Organic IDX plugin + WPL Real Estate < 5.4.2 - Reflected XSS via Location Selector Endpointunknown realtyna organic idx plugin + wpl real estate1 HR AGO
CVE-2026-91011—Unrated—EWWW Image Optimizer < 8.7.7 - Author+ Stored XSS via Image Class Attribute Backreference Expansionunknown ewww image optimizer1 HR AGO
CVE-2026-91010—Unrated—Invisible Anti-Spam & CAPTCHA < 5.1.1 - Subscriber+ Arbitrary Form Submission Deletionunknown invisible anti-spam & captcha — recaptcha alternative for all forms1 HR AGO
CVE-2026-91009—Unrated—Active Products Tables for WooCommerce < 2.1.3 - Subscriber+ Arbitrary Post Title Modification via woot_update_attachmentunknown active woot products tables for woocommerce. 100% free1 HR AGO
CVE-2026-91008—Unrated—Event Booking Manager for WooCommerce < 5.3.8 - Unauthenticated Attendee PII Disclosure via Booking Confirmation Panelunknown event booking manager for woocommerce1 HR AGO
CVE-2026-90923—Unrated—Autopay < 5.0.1 - Unauthenticated Cross-Customer Order Payment Parameter Disclosure and Deletionunknown autopay1 HR AGO