CVE search
Every published CVE plus open-source advisories (NVD, OSV, GitHub), with CVSS, EPSS and whether it is being exploited in the wild (CISA KEV). Updated every few hours. Our scans match these against the technologies they detect.
Every published CVE plus open-source advisories (NVD, OSV, GitHub), with CVSS, EPSS and whether it is being exploited in the wild (CISA KEV). Updated every few hours. Our scans match these against the technologies they detect.
| CVE-2026-61996 | ALTO8.5 | Subscriber SQL Injection in MLS On The Fly <= 1.8.1.5 versions. | 29/10/2026 |
| CVE-2026-61995 | ALTO7.1 | Unauthenticated Cross Site Scripting (XSS) in YouTube Showcase <= 4.1.0 versions. | 29/10/2026 |
| CVE-2026-61993 | ALTO7.1 | Unauthenticated Cross Site Scripting (XSS) in Blockonomics 3.11.0 versions. | 29/10/2026 |
| CVE-2026-61992 | CRITICO9.8 | Unauthenticated PHP Object Injection in GEO my WordPress <= 4.5.5.3 versions. | 29/10/2026 |
| CVE-2026-61991 | CRITICO10.0 | Unauthenticated Remote Code Execution (RCE) in AjaxLoadMore Cache <= 3.1.1 versions. | 29/10/2026 |
| CVE-2026-61989 | ALTO7.1 | Unauthenticated Cross Site Scripting (XSS) in Easy Property Listings <= 3.5.25 versions. | 29/10/2026 |
| CVE-2026-61988 | ALTO7.1 | Unauthenticated Cross Site Scripting (XSS) in Auction Nudge – Your eBay on Your Site <= 8.4.0 versions. | 29/10/2026 |
| CVE-2026-54866 | ALTO7.1 | Unauthenticated Cross Site Scripting (XSS) in Razorpay Payment Button Elementor Plugin <= 1.2.8 versions. | 29/10/2026 |
| CVE-2026-54865 | MEDIO6.5 | Subscriber Cross Site Scripting (XSS) in Podamibe Custom User Gravatar <= 1.0.8 versions. | 29/10/2026 |
| CVE-2026-54864 | ALTO7.1 | Unauthenticated Cross Site Scripting (XSS) in Post Video Players <= 1.165 versions. | 29/10/2026 |
| CVE-2026-54860 | CRITICO9.8 | Unauthenticated PHP Object Injection in Ozisti <= 1.1.10 versions. | 29/10/2026 |
| CVE-2026-54859 | CRITICO9.8 | Unauthenticated PHP Object Injection in Preservation <= 1.15 versions. | 29/10/2026 |
| CVE-2026-54858 | CRITICO9.8 | Unauthenticated PHP Object Injection in Printy <= 1.13.0 versions. | 29/10/2026 |
| CVE-2026-54857 | CRITICO9.8 | Unauthenticated PHP Object Injection in Quirky <= 1.23 versions. | 29/10/2026 |
| CVE-2026-54856 | CRITICO9.8 | Unauthenticated PHP Object Injection in RexCoin <= 1.2.6 versions. | 29/10/2026 |