CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

show all

3966 matches found

attackerkb•added 2026/02/24 5:00 p.m.•13 views

CVE-2026-27156

NiceGUI is a Python-based UI framework. Prior to version 3.8.0, several NiceGUI APIs that execute methods on client-side elements Element.runmethod, AgGrid.rungridmethod, EChart.runchartmethod, and others use an eval fallback in the JavaScript-side runMethod function. When user-controlled input i...

6.1CVSS6.1AI score0.00273EPSS

SaveExploits0References3Affected Software1

RedhatCVE•added 2026/02/20 1:26 p.m.•14 views

CVE-2026-25375

Missing Authorization vulnerability in WP Chill Image Photo Gallery Final Tiles Grid final-tiles-grid-gallery-lite allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Image Photo Gallery Final Tiles Grid: from n/a through = 3.6.10...

4.3CVSS5.5AI score0.00255EPSS

SaveExploits0References1

Packet Storm•added 2026/02/20 12:00 a.m.•156 views

📄 Selenium Server (Grid) 4.27.0 Code Injection

Proof of concept exploit for Selenium Server Grid versions 4.27.0 and below that exploits firefoxprofile to force the browser to run bash commands. ============================================================================================================================================= | Title...

5.5AI score

SaveExploits0

NVD•added 2026/02/19 9:16 a.m.•22 views

CVE-2026-25375

4.3CVSS0.00255EPSS

SaveExploits0References1

attackerkb•added 2026/02/19 8:27 a.m.•5 views

CVE-2026-25375

5.5AI score0.00255EPSS

SaveExploits0References2

CVE•added 2026/02/19 8:27 a.m.•26 views

CVE-2026-25375

CVE-2026-25375 concerns the WordPress plugin Image Photo Gallery Final Tiles Grid (final-tiles-grid-gallery-lite) with version

4.3CVSS6AI score0.00255EPSS

SaveExploits0References1

Cvelist•added 2026/02/19 8:27 a.m.•36 views

CVE-2026-25375 WordPress Image Photo Gallery Final Tiles Grid plugin <= 3.6.10 - Broken Access Control vulnerability

4.3CVSS0.00255EPSS

SaveExploits0References1

Vulnrichment•added 2026/02/19 8:27 a.m.•3 views

CVE-2026-25375 WordPress Image Photo Gallery Final Tiles Grid plugin <= 3.6.10 - Broken Access Control vulnerability

4.3CVSS6AI score0.00255EPSS

SaveExploits0References1

CNNVD•added 2026/02/19 12:00 a.m.•20 views

WordPress plugin Image Photo Gallery Final Tiles Grid 安全漏洞

WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows for the creation of personal blog websites on servers based on PHP and MySQL. WordPress plugins are additional applications that can b...

4.3CVSS5.8AI score0.00255EPSS

SaveExploits0References1

Positive Technologies•added 2026/02/19 12:00 a.m.•43 views

PT-2026-20716

5.5AI score0.00255EPSS

SaveExploits0References1

Rapid7 Vulnerability Database (full)•added 2026/02/19 12:00 a.m.•7 views

CVE-2026-25375: Missing Authorization

4.3CVSS5.9AI score0.00255EPSS

SaveExploits0References1

Patchstack•added 2026/02/18 11:28 a.m.•18 views

WordPress Image Photo Gallery Final Tiles Grid plugin <= 3.6.10 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by Nabil Irawan in WordPress Plugin Image Photo Gallery Final Tiles Grid versions = 3.6.10...

4.3CVSS5.4AI score0.00255EPSS

SaveExploits0Affected Software1

RedhatCVE•added 2026/02/15 7:10 a.m.•32 views

CVE-2026-0559

The MasterStudy LMS WordPress Plugin – for Online Courses and Education plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'stmlmscoursesgriddisplay' shortcode in all versions up to, and including, 3.7.11 due to insufficient input sanitization and output escaping o...

6.4CVSS5.8AI score0.00212EPSS

SaveExploits0References1

NVD•added 2026/02/14 7:16 a.m.•27 views

CVE-2026-0559

6.4CVSS0.00212EPSS

SaveExploits0References2

Cvelist•added 2026/02/14 6:42 a.m.•46 views

CVE-2026-1988 Flexi Product Slider and Grid for WooCommerce <= 1.0.5 - Authenticated (Contributor+) Local File Inclusion via 'theme' Shortcode Attribute

The Flexi Product Slider and Grid for WooCommerce plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 1.0.5 via the flexipsgcarousel shortcode. This is due to the theme parameter being directly concatenated into a file path without proper sanitization ...

7.5CVSS0.00813EPSS

SaveExploits0References5

Cvelist•added 2026/02/14 6:42 a.m.•48 views

CVE-2026-0559 MasterStudy LMS WordPress Plugin – for Online Courses and Education <= 3.7.11 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'stm_lms_courses_grid_display' Shortcode

6.4CVSS0.00212EPSS

SaveExploits0References2

Vulnrichment•added 2026/02/14 6:42 a.m.•11 views

CVE-2026-0559 MasterStudy LMS WordPress Plugin – for Online Courses and Education <= 3.7.11 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'stm_lms_courses_grid_display' Shortcode

6.4CVSS6.1AI score0.00212EPSS

SaveExploits0References2

CVE•added 2026/02/14 6:42 a.m.•55 views

CVE-2026-0559

The CVE-2026-0559 entry concerns MasterStudy LMS WordPress Plugin (

6.4CVSS6.1AI score0.00212EPSS

SaveExploits0References2

Rapid7 Vulnerability Database (full)•added 2026/02/14 12:00 a.m.•3 views

CVE-2026-1254: Missing Authorization

The Modula Image Gallery – Photo Grid & Video Gallery plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 2.13.6. This is due to the plugin not properly verifying that a user is authorized to modify specific posts before updating them via the REST API...

4.3CVSS5.8AI score0.00188EPSS

SaveExploits0References1

Rapid7 Vulnerability Database (full)•added 2026/02/14 12:00 a.m.•4 views

CVE-2026-1988: Improper Control of Filename for Include/Require Statement in PHP Program

7.5CVSS6.1AI score0.00813EPSS

SaveExploits0References1

Rows per page

Query Builder

Family

Bulletin Type

Min CVSS Score

Date

Order by