🔥 Trending CVEs - Last 90 Days

This vulnerability allows attackers to inject malicious scripts into web pages generated by the WP-BusinessDirectory WordPress plugin. When users visi...

This vulnerability involves undefined behavior in the CIccTagSpectralViewingConditions() function of the iccDEV library, which could lead to crashes, ...

This vulnerability involves undefined behavior in the CIccTagLut16::Read() function of the iccDEV library, which could lead to memory corruption when ...

This vulnerability involves undefined behavior in the CIccTagLutAtoB::Validate() function of the iccDEV library, which could lead to crashes, memory c...

CVE-2026-21687 is an undefined behavior vulnerability in the CIccTagCurve constructor of the iccDEV library that processes ICC color profiles. This co...

Bio-Formats up to version 8.3.0 contains an XML External Entity (XXE) vulnerability in the Leica Microsystems metadata parser. This allows attackers t...

CVE-2026-21681 is an undefined behavior runtime error in iccDEV library versions before 2.3.1.2 that could lead to crashes or potentially arbitrary co...

This vulnerability allows authenticated attackers to modify the behavior of arbitrary LibreChat agents by uploading files to file contexts or file sea...

This vulnerability allows attackers to inject malicious scripts into web pages generated by WidgetKit Pro, a WordPress plugin. When users visit a spec...

This Cross-Site Scripting (XSS) vulnerability in the Frenify Arlo WordPress theme allows attackers to inject malicious scripts into web pages viewed b...

This vulnerability allows attackers to inject malicious scripts into DZS Video Gallery WordPress plugin pages, which execute in victims' browsers when...

The WP Photo Album Plus WordPress plugin contains a reflected cross-site scripting vulnerability in the 'shortcode' parameter that allows unauthentica...

This reflected cross-site scripting (XSS) vulnerability in the WPCHURCH WordPress plugin allows attackers to inject malicious scripts into web pages v...

This CVE describes a reflected cross-site scripting (XSS) vulnerability in two WordPress plugins. Attackers can inject malicious scripts via crafted U...

A reflected cross-site scripting (XSS) vulnerability in GT3 themes Photo Gallery WordPress plugin allows attackers to inject malicious scripts into we...

This vulnerability allows attackers to inject malicious scripts into web pages generated by the JobBank WordPress plugin, which are then executed in v...

This vulnerability allows attackers to inject malicious scripts into web pages generated by the Header Image Slider WordPress plugin. When users visit...

This vulnerability allows attackers to delete other users' workspaces in OpenCTI by exploiting an authorization flaw in the GraphQL mutation 'Workspac...

An Insecure Direct Object Reference vulnerability in Bagisto eCommerce platform allows authenticated customers to add items from other customers' orde...

This vulnerability in Plex Media Server allows attackers to access account information using device tokens even after devices have been disassociated ...

This Cross-Site Scripting (XSS) vulnerability in the Easy Social WordPress plugin allows attackers to inject malicious scripts into web pages viewed b...

A Cross-Site Request Forgery (CSRF) vulnerability in the Themefy Bloggie WordPress theme allows attackers to inject malicious scripts via reflected XS...

This vulnerability allows attackers to inject malicious scripts into ZoomSounds WordPress plugin pages, which execute in victims' browsers when they v...

This is a reflected cross-site scripting (XSS) vulnerability in the Blappsta Mobile App Plugin for WordPress. Attackers can inject malicious scripts v...

This is a reflected cross-site scripting (XSS) vulnerability in the Sala WordPress theme that allows attackers to inject malicious scripts into web pa...

This reflected cross-site scripting (XSS) vulnerability in the Zielke Design Project Gallery WordPress plugin allows attackers to inject malicious scr...

This vulnerability allows attackers to inject malicious scripts into web pages generated by the Matamko En Masse WordPress plugin. When users visit a ...

This vulnerability allows attackers to inject malicious scripts into web pages generated by the ZhinaTwitterWidget WordPress plugin. When users visit ...

This vulnerability allows attackers to inject malicious scripts into web pages generated by the ZD Scribd iPaper WordPress plugin. When users visit a ...

This vulnerability allows attackers to inject malicious scripts into web pages generated by the WordPress Custom Post Edit plugin. When users visit a ...

This vulnerability allows attackers to inject malicious scripts into web pages generated by the LIVE TV WordPress plugin. When users visit a specially...

A Cross-Site Request Forgery (CSRF) vulnerability in Zoho ZeptoMail WordPress plugin allows attackers to inject malicious scripts that become stored X...

This CSRF vulnerability in the WordPress Noindex by Path plugin allows attackers to trick authenticated administrators into performing unintended acti...

A Cross-Site Request Forgery (CSRF) vulnerability in the WordPress Recent Posts From Each Category plugin allows attackers to inject malicious scripts...

A Cross-Site Request Forgery (CSRF) vulnerability in the Page Carbajal Custom Post Status WordPress plugin allows attackers to perform stored cross-si...

This CSRF vulnerability in the Wolfgang Häfelinger Custom Style WordPress plugin allows attackers to trick authenticated administrators into performi...

A Cross-Site Request Forgery (CSRF) vulnerability in Socialprofilr Social Profilr WordPress plugin allows attackers to inject malicious scripts that e...

A Cross-Site Request Forgery (CSRF) vulnerability in the WordPress SensitiveTagCloud plugin allows attackers to inject malicious scripts that execute ...

A Cross-Site Request Forgery (CSRF) vulnerability in the WP-EasyArchives WordPress plugin allows attackers to inject malicious scripts that execute wh...

A Cross-Site Request Forgery (CSRF) vulnerability in the eLEOPARD Behance Portfolio Manager WordPress plugin allows attackers to inject malicious scri...

A Cross-Site Request Forgery (CSRF) vulnerability in the WordPress Simple Archive Generator plugin allows attackers to trick authenticated administrat...

A Cross-Site Request Forgery (CSRF) vulnerability in the Hoernerfranz WP-CalDav2ICS WordPress plugin allows attackers to perform unauthorized actions ...

TrueConf Client 8.5.2 is vulnerable to DLL hijacking where attackers can place a malicious wfapi.dll file to execute arbitrary code. This affects loca...

This vulnerability allows attackers to inject malicious scripts into web pages generated by the Ads24 Lite WordPress plugin. When users visit a specia...

This CVE describes a reflected cross-site scripting (XSS) vulnerability in the Sleekplan WordPress plugin. Attackers can inject malicious scripts via ...

This reflected cross-site scripting (XSS) vulnerability in the WordPress Product Puller plugin allows attackers to inject malicious scripts into web p...

This reflected cross-site scripting (XSS) vulnerability in the Off Page SEO WordPress plugin allows attackers to inject malicious scripts into web pag...

This CVE describes a missing authorization vulnerability in the Plugin Optimizer WordPress plugin that allows attackers to bypass access controls. Att...

This vulnerability allows attackers to inject malicious scripts into web pages generated by the Advanced Custom CSS WordPress plugin. When users visit...

This vulnerability allows attackers to inject malicious scripts into web pages generated by the Content Grid Slider WordPress plugin. When a user visi...