Browse CVEs
144,453 medium severity vulnerabilities
| CVE ID | Title | Severity | CVSS | Risk | Patch | Published |
|---|---|---|---|---|---|---|
| CVE-2025-66488 | Discourse S3 Upload Vulnerability | Medium | 4.6 | Low Risk | Patched | 28-Jan-26 |
| CVE-2025-67723 | Discourse Math Plugin XSS | Medium | 4.6 | Low Risk | Patched | 28-Jan-26 |
| CVE-2026-1083 | WordPress Booking Calendar Plugin Vulnerability | Medium | 4.4 | Low Risk | Patched | 28-Jan-26 |
| CVE-2026-1053 | Ivory Search Vulnerability | Medium | 4.4 | Low Risk | Patched | 28-Jan-26 |
| CVE-2026-1381 | WooCommerce Order Minimum/Maximum Amount Limits Vulnerability | Medium | 4.4 | Low Risk | Patched | 28-Jan-26 |
| CVE-2026-1399 | WordPress Plugin XSS | Medium | 4.4 | Low Risk | Patched | 28-Jan-26 |
| CVE-2025-13981 | Drupal AI Cross-Site Scripting | Medium | 4.4 | Low Risk | Unpatched (1d) | 28-Jan-26 |
| CVE-2026-0818 | Thunderbird CSS Exfiltration Vulnerability | Medium | 4.3 | Low Risk | Unpatched | 28-Jan-26 |
| CVE-2025-14616 | Recooty Job Widget Cross-Site Request Forgery | Medium | 4.3 | Low Risk | Patched | 28-Jan-26 |
| CVE-2026-1377 | WordPress Plugin XSS | Medium | 4.3 | Low Risk | Patched | 28-Jan-26 |