Published vulnerability pages
Website Security Risk Index
Current vulnerabilities, affected platforms, and fix guidance for website owners and developers.
Browse by topic
Security risk categories
46 categories with published guidance
Memory Corruption
409Browse published Memory Corruption vulnerabilities, affected products, and practical fix guidance.
Authorization Bypass
373Browse published Authorization Bypass vulnerabilities, affected products, and practical fix guidance.
WordPress
350Browse published WordPress vulnerabilities, affected products, and practical fix guidance.
Information Disclosure
320Browse published Information Disclosure vulnerabilities, affected products, and practical fix guidance.
Remote Code Execution
303Browse published Remote Code Execution vulnerabilities, affected products, and practical fix guidance.
Cross-site Scripting
260Browse published Cross-site Scripting vulnerabilities, affected products, and practical fix guidance.
Network Security
253Browse published Network Security vulnerabilities, affected products, and practical fix guidance.
Input Validation
243Browse published Input Validation vulnerabilities, affected products, and practical fix guidance.
Web Application
239Browse published Web Application vulnerabilities, affected products, and practical fix guidance.
Windows
216Browse published Windows vulnerabilities, affected products, and practical fix guidance.
API Security
215Browse published API Security vulnerabilities, affected products, and practical fix guidance.
Browser
215Browse published Browser vulnerabilities, affected products, and practical fix guidance.
Denial of Service
215Browse published Denial of Service vulnerabilities, affected products, and practical fix guidance.
Microsoft
212Browse published Microsoft vulnerabilities, affected products, and practical fix guidance.
PHP
199Browse published PHP vulnerabilities, affected products, and practical fix guidance.
Path Traversal
167Browse published Path Traversal vulnerabilities, affected products, and practical fix guidance.
Authentication Bypass
118Browse published Authentication Bypass vulnerabilities, affected products, and practical fix guidance.
Arbitrary File Write
116Browse published Arbitrary File Write vulnerabilities, affected products, and practical fix guidance.
Privilege Escalation
113Browse published Privilege Escalation vulnerabilities, affected products, and practical fix guidance.
Linux
94Browse published Linux vulnerabilities, affected products, and practical fix guidance.
DevOps
81Browse published DevOps vulnerabilities, affected products, and practical fix guidance.
SQL Injection
72Browse published SQL Injection vulnerabilities, affected products, and practical fix guidance.
Cryptography
68Browse published Cryptography vulnerabilities, affected products, and practical fix guidance.
SSRF
61Browse published SSRF vulnerabilities, affected products, and practical fix guidance.
Python
59Browse published Python vulnerabilities, affected products, and practical fix guidance.
Java
57Browse published Java vulnerabilities, affected products, and practical fix guidance.
IDOR
56Browse published IDOR vulnerabilities, affected products, and practical fix guidance.
WooCommerce
53Browse published WooCommerce vulnerabilities, affected products, and practical fix guidance.
Unsafe Deserialization
51Browse published Unsafe Deserialization vulnerabilities, affected products, and practical fix guidance.
File Upload
47Browse published File Upload vulnerabilities, affected products, and practical fix guidance.
npm
44Browse published npm vulnerabilities, affected products, and practical fix guidance.
Joomla
41Browse published Joomla vulnerabilities, affected products, and practical fix guidance.
Supply Chain
39Browse published Supply Chain vulnerabilities, affected products, and practical fix guidance.
Cloud Security
36Browse published Cloud Security vulnerabilities, affected products, and practical fix guidance.
CSRF
33Browse published CSRF vulnerabilities, affected products, and practical fix guidance.
Race Condition
31Browse published Race Condition vulnerabilities, affected products, and practical fix guidance.
PDF Editor
28Browse published PDF Editor vulnerabilities, affected products, and practical fix guidance.
Industrial Control
27Browse published Industrial Control vulnerabilities, affected products, and practical fix guidance.
.NET
23Browse published .NET vulnerabilities, affected products, and practical fix guidance.
File Deletion
23Browse published File Deletion vulnerabilities, affected products, and practical fix guidance.
Open Redirect
16Browse published Open Redirect vulnerabilities, affected products, and practical fix guidance.
Node.js
15Browse published Node.js vulnerabilities, affected products, and practical fix guidance.
SAML
13Browse published SAML vulnerabilities, affected products, and practical fix guidance.
Virtualization
13Browse published Virtualization vulnerabilities, affected products, and practical fix guidance.
Drupal
6Browse published Drupal vulnerabilities, affected products, and practical fix guidance.
Unix Domain Sockets
5Browse published Unix Domain Sockets vulnerabilities, affected products, and practical fix guidance.
Published security risks
Showing 1–36 of 2230 published risks.
CVE-2026-65470 Fluent Support vulnerability
Contributor Cross Site Scripting (XSS) in Fluent Support <= 2.3.0 versions.
Updated Jul 24, 2026
CVE-2026-65471 Avada Core vulnerability
Unauthenticated Cross Site Request Forgery (CSRF) in Avada Core <= 5.15.6 versions.
Updated Jul 24, 2026
CVE-2026-65472 Kit (formerly ConvertKit) vulnerability
Unauthenticated Broken Access Control in Kit (formerly ConvertKit) <= 3.3.5 versions.
Updated Jul 24, 2026
CVE-2026-65473 Virtue/Ascend/Pinnacle Toolkit vulnerability
Contributor Cross Site Scripting (XSS) in Virtue/Ascend/Pinnacle Toolkit <= 4.9.12 versions.
Updated Jul 24, 2026
CVE-2026-65475 Modula Image Gallery vulnerability
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WP Chill Modula Image Gallery allows Stored XSS. This issue affects Modula Image Gallery: from 2.14.25 through 2.14.30.
Updated Jul 24, 2026
CVE-2026-65474 Ninja Tables vulnerability
Unauthenticated Sensitive Data Exposure in Ninja Tables <= 5.2.10 versions.
Updated Jul 24, 2026
CVE-2026-65476 Civi vulnerability
Unauthenticated Broken Access Control in Civi <= 2.2.4 versions.
Updated Jul 24, 2026
CVE-2026-65477 Tonda Core vulnerability
Contributor Local File Inclusion in Tonda Core <= 2.1.2 versions.
Updated Jul 24, 2026
CVE-2026-65478 ListingPro vulnerability
Subscriber Broken Access Control in ListingPro <= 2.9.10 versions.
Updated Jul 24, 2026
CVE-2026-65479 Reviewer vulnerability
Subscriber Broken Access Control in Reviewer <= 3.14.2 versions.
Updated Jul 24, 2026
CVE-2026-65480 TheGem vulnerability
Contributor Cross Site Scripting (XSS) in TheGem <= 5.11.1 versions.
Updated Jul 24, 2026
CVE-2026-65481 Vino vulnerability
Contributor Local File Inclusion in Vino <= 1.9 versions.
Updated Jul 24, 2026
CVE-2026-65482 LA-Studio Element Kit for Elementor vulnerability
Contributor Cross Site Scripting (XSS) in LA-Studio Element Kit for Elementor <= 1.6.2 versions.
Updated Jul 24, 2026
CVE-2026-65483 HashThemes Demo Importer vulnerability
Author Cross Site Scripting (XSS) in HashThemes Demo Importer <= 1.4.2 versions.
Updated Jul 24, 2026
CVE-2026-65484 Style Kits vulnerability
Contributor Broken Access Control in Style Kits <= 2.6.5 versions.
Updated Jul 24, 2026
CVE-2026-65485 Content Control vulnerability
Unauthenticated Broken Access Control in Content Control <= 2.6.5 versions.
Updated Jul 24, 2026
CVE-2026-65487 Photography vulnerability
Unauthenticated Broken Access Control in Photography <= 7.7.6 versions.
Updated Jul 24, 2026
CVE-2026-65486 Event post vulnerability
Unauthenticated Broken Access Control in Event post <= 6.0.1 versions.
Updated Jul 24, 2026
CVE-2026-65488 LA-Studio Element Kit for Elementor vulnerability
Unauthenticated Cross Site Request Forgery (CSRF) in LA-Studio Element Kit for Elementor <= 1.6.2 versions.
Updated Jul 24, 2026
CVE-2026-65489 LA-Studio Element Kit for Elementor vulnerability
Unauthenticated Broken Access Control in LA-Studio Element Kit for Elementor <= 1.6.2 versions.
Updated Jul 24, 2026
CVE-2026-65492 Dokan Pro vulnerability
Unauthenticated Cross Site Scripting (XSS) in Dokan Pro <= 5.0.0 versions.
Updated Jul 24, 2026
CVE-2026-65490 Create by Mediavine vulnerability
Unauthenticated Sensitive Data Exposure in Create by Mediavine <= 2.5.3 versions.
Updated Jul 24, 2026
CVE-2026-65491 Query Wrangler vulnerability
Subscriber Broken Access Control in Query Wrangler <= 1.5.57 versions.
Updated Jul 24, 2026
CVE-2026-65493 Dokan Pro vulnerability
Subscriber PHP Object Injection in Dokan Pro <= 5.0.2 versions.
Updated Jul 24, 2026
CVE-2026-65497 Complianz vulnerability
Administrator PHP Object Injection in Complianz <= 7.5.0 versions.
Updated Jul 24, 2026
CVE-2026-65495 Dokan Pro vulnerability
Unauthenticated Broken Access Control in Dokan Pro <= 5.0.3 versions.
Updated Jul 24, 2026
CVE-2026-65494 Dokan Pro vulnerability
Subscriber SQL Injection in Dokan Pro <= 5.0.2 versions.
Updated Jul 24, 2026
CVE-2026-65496 Complianz vulnerability
Author Server Side Request Forgery (SSRF) in Complianz <= 7.5.0 versions.
Updated Jul 24, 2026
CVE-2026-65498 Complianz vulnerability
Unauthenticated Sensitive Data Exposure in Complianz <= 7.5.0 versions.
Updated Jul 24, 2026
CVE-2026-65501 Shiptastic for WooCommerce vulnerability
Unauthenticated Insecure Direct Object References (IDOR) in Shiptastic for WooCommerce <= 5.1.0 versions.
Updated Jul 24, 2026
CVE-2026-65500 Manual - Documentation, Knowledge Base & Education WordPress Theme vulnerability
Unauthenticated Broken Access Control in Manual - Documentation, Knowledge Base & Education WordPress Theme <= 7.5.4 versions.
Updated Jul 24, 2026
CVE-2026-65499 PeproDev Ultimate Invoice vulnerability
Unauthenticated Broken Access Control in PeproDev Ultimate Invoice <= 2.2.6 versions.
Updated Jul 24, 2026
CVE-2026-65505 Ultimate Store Kit Elementor Addons vulnerability
Unauthenticated Sensitive Data Exposure in Ultimate Store Kit Elementor Addons <= 3.0.5 versions.
Updated Jul 24, 2026
CVE-2026-65503 Ultimate Store Kit Elementor Addons vulnerability
Contributor Cross Site Scripting (XSS) in Ultimate Store Kit Elementor Addons <= 3.0.5 versions.
Updated Jul 24, 2026
CVE-2026-65506 MP3 Audio Player for Music, Radio & Podcast by Sonaar vulnerability
Unauthenticated Broken Access Control in MP3 Audio Player for Music, Radio & Podcast by Sonaar <= 5.12 versions.
Updated Jul 24, 2026
CVE-2026-65510 PeproDev Ultimate Invoice vulnerability
Unauthenticated Cross Site Scripting (XSS) in PeproDev Ultimate Invoice <= 2.2.6 versions.
Updated Jul 24, 2026
