Security
CVE Feed
Latest vulnerabilities from the National Vulnerability Database.
42900
Total
3476
Critical
12865
High
12603
Medium
| CVE ID | Severity | Score | Description | Published |
|---|---|---|---|---|
| CVE-2026-19225 | MEDIUM | 6.6 | The Defender Security WordPress plugin before 6.2.0 does not restrict a network-wide setting to network administrators, allowing an administrator of any single site on a … | Aug 27, 2026 |
| CVE-2026-19223 | HIGH | 7.2 | The Smush WordPress plugin before 4.3.2 does not restrict a network-wide setting to network administrators, allowing an administrator of any single site on a multisite … | Aug 27, 2026 |
| CVE-2026-16569 | MEDIUM | 4.3 | The Mobile App for WooCommerce: ShopApper Mobile App Builder Service for WooCommerce WordPress plugin through 0.4.62 does not check the user's capabilities before allowing a … | Aug 27, 2026 |
| CVE-2026-16568 | MEDIUM | 4.3 | The Mobile App for WooCommerce: ShopApper Mobile App Builder Service for WooCommerce WordPress plugin through 0.4.62 does not verify that the requesting user owns the … | Aug 27, 2026 |
| CVE-2026-16567 | MEDIUM | 5.3 | The Document Embedder WordPress plugin before 2.3.1 does not check a document's status before issuing a download token and streaming the file, allowing unauthenticated attackers … | Aug 27, 2026 |
| CVE-2026-13416 | LOW | 3.5 | The CMP WordPress plugin before 4.1.18 does not sanitise and escape a settings value before outputting it on the coming-soon page, allowing users with the … | Aug 27, 2026 |
| CVE-2026-13415 | HIGH | 7.2 | The CMP WordPress plugin before 4.1.18 does not enforce an option-name allow-list when importing settings via one of its AJAX actions, allowing users with the … | Aug 27, 2026 |
| CVE-2026-13414 | MEDIUM | 4.8 | The CMP WordPress plugin before 4.1.18 does not perform authorization checks on one of its AJAX actions and relies on a nonce that is skipped … | Aug 27, 2026 |
| CVE-2023-27508 | UNKNOWN | — | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority because it is Unused | Aug 27, 2026 |
| CVE-2023-27503 | UNKNOWN | — | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority because it is Unused | Aug 27, 2026 |
| CVE-2023-23544 | UNKNOWN | — | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority because it is Unused | Aug 27, 2026 |
| CVE-2023-22446 | UNKNOWN | — | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority because it is Unused | Aug 27, 2026 |
| CVE-2023-22445 | UNKNOWN | — | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority because it is Unused | Aug 27, 2026 |
| CVE-2023-22437 | UNKNOWN | — | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority because it is Unused | Aug 27, 2026 |
| CVE-2023-22434 | UNKNOWN | — | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority because it is Unused | Aug 27, 2026 |
| CVE-2023-22433 | UNKNOWN | — | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority because it is Unused | Aug 27, 2026 |
| CVE-2023-22430 | UNKNOWN | — | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority because it is Unused | Aug 27, 2026 |
| CVE-2023-22426 | UNKNOWN | — | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority because it is Unused | Aug 27, 2026 |
| CVE-2023-22423 | UNKNOWN | — | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority because it is Unused | Aug 27, 2026 |
| CVE-2023-22420 | UNKNOWN | — | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority because it is Unused | Aug 27, 2026 |
| CVE-2023-22364 | UNKNOWN | — | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority because it is Unused | Aug 27, 2026 |
| CVE-2023-22352 | UNKNOWN | — | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority because it is Unused | Aug 27, 2026 |
| CVE-2023-22343 | UNKNOWN | — | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority because it is Unused | Aug 27, 2026 |
| CVE-2023-22328 | UNKNOWN | — | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority because it is Unused | Aug 27, 2026 |
| CVE-2023-22289 | UNKNOWN | — | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority because it is Unused | Aug 27, 2026 |