Browse CVEs
28,733 critical severity vulnerabilities
| CVE ID | Title | Severity | CVSS | Risk | Patch | Published |
|---|---|---|---|---|---|---|
| CVE-2025-54816 | WebSocket Authentication Bypass | Critical | 9.4 | Low Risk | Unpatched | 22-Jan-26 |
| CVE-2025-68018 | WooCommerce Order Listener Vulnerability | Critical | 9.4 | Low Risk | Patched | 22-Jan-26 |
| CVE-2026-21264 | CVE-2026-21264 | Critical | 9.3 | Low Risk | Patched | 22-Jan-26 |
| CVE-2026-24305 | Azure Entra ID Elevation of Privilege Vulnerability | Critical | 9.3 | Low Risk | Patched | 22-Jan-26 |
| CVE-2026-24307 | CVE-2026-24307 | Critical | 9.3 | Low Risk | Patched | 22-Jan-26 |
| CVE-2025-68857 | ichurakov Paid Downloads SQL Injection | Critical | 9.3 | Low Risk | Unpatched (5d) | 22-Jan-26 |
| CVE-2025-67945 | SQL Injection in MailerLite – WooCommerce Integration | Critical | 9.3 | Low Risk | Patched | 22-Jan-26 |
| CVE-2025-68034 | CleverReach WP SQL Injection Vulnerability | Critical | 9.3 | Low Risk | Patched | 22-Jan-26 |
| CVE-2026-23966 | sm-crypto Vulnerability | Critical | 9.1 | Low Risk | Patched | 22-Jan-26 |
| CVE-2026-22482 | Imgspider SSRF Vulnerability | Critical | 9.1 | Low Risk | Patched | 22-Jan-26 |